DNS
SSL certificate
TLSv1.3achmea.nl · 145.219.28.71:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=NL ST=Utrecht L=Zeist O=Achmea Interne Diensten N.V. CN=www.achmea.nl
- Issuer
- C=IE O=DigiCert Ireland Limited CN=DigiCert QuoVadis 2G3 TLS RSA4096 SHA384 2023 CA1
- Valid from
- 2026-08-24T00:00:00+00:00
- Expires
- 2027-03-10T23:59:59+00:00
- Days remaining
- 119
- Serial (hex)
- 05124DDC9F1B3F59E785ED871D175679
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:www.achmea.nl, DNS:achmea.nl
SHA-256 fingerprint
0F:EE:3F:EB:B6:C5:FC:33:D8:82:86:B8:92:67:75:2E:D1:F0:BC:DB:C3:66:37:8F:03:F4:27:D4:04:98:3B:9C
Certificate extensions & PEM
- authorityKeyIdentifier
- 86:56:E5:65:B1:7E:F7:EA:3F:1D:BA:84:D2:DA:97:DC:84:B1:B1:EF
- subjectKeyIdentifier
- 3D:66:54:78:B8:14:06:74:AF:D5:E6:39:B8:DE:00:89:AC:57:BC:9B
- subjectAltName
- DNS:www.achmea.nl, DNS:achmea.nl
- certificatePolicies
- Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.digicert.eu/DigiCertQuoVadis2G3TLSRSA4096SHA3842023CA1.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.eu CA Issuers - URI:http://cacerts.digicert.eu/DigiCertQuoVadis2G3TLSRSA4096SHA3842023CA1.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Aug 24 08:29:36.837 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:41:B0:96:87:EA:15:5C:C1:8F:16:91:D6: B8:B2:9A:A1:7A:25:DB:5D:D5:28:06:D4:82:29:28:27: 2D:AA:B5:06:02:21:00:92:63:EE:27:A5:DD:66:82:AF: 48:34:ED:A6:97:42:1A:DC:D7:4F:5D:AF:58:29:31:11: 20:87:16:E0:90:94:E7 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D6:D5:8D:A9:D0:17:53:F3:6A:4A:A0:C7:57:49:02:AF: EB:C7:DC:2C:D3:8C:D9:F7:64:C8:0C:89:19:1E:9F:02 Timestamp : Aug 24 08:29:36.812 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:72:76:21:54:89:1D:D4:17:EB:2C:4F:6A: 4F:81:10:0D:7E:0E:98:17:92:D7:FB:E7:94:67:51:CE: E4:C6:A0:07:02:20:75:84:16:5A:14:FE:2B:AA:D3:FE: ED:84:FE:23:47:0F:0A:21:26:AF:47:FF:EC:C9:27:B3: 1B:FB:75:03:79:37 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Aug 24 08:29:36.749 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:46:23:55:77:63:8E:27:08:03:50:78:C4: 31:41:87:C8:1E:49:C2:55:EF:30:14:54:1C:3F:31:A5: 0A:33:5A:47:02:21:00:A5:42:1D:CF:A8:13:91:BB:B5: 90:86:9D:46:54:4A:1D:D8:97:B1:54:C4:E1:27:42:D3: 44:22:48:39:6E:48:D7
-----BEGIN CERTIFICATE----- MIIHsjCCBZqgAwIBAgIQBRJN3J8bP1nnhe2HHRdWeTANBgkqhkiG9w0BAQsFADBs MQswCQYDVQQGEwJJRTEhMB8GA1UECgwYRGlnaUNlcnQgSXJlbGFuZCBMaW1pdGVk MTowOAYDVQQDDDFEaWdpQ2VydCBRdW9WYWRpcyAyRzMgVExTIFJTQTQwOTYgU0hB Mzg0IDIwMjMgQ0ExMB4XDTI2MDgyNDAwMDAwMFoXDTI3MDMxMDIzNTk1OVowbjEL MAkGA1UEBhMCTkwxEDAOBgNVBAgTB1V0cmVjaHQxDjAMBgNVBAcTBVplaXN0MSUw IwYDVQQKExxBY2htZWEgSW50ZXJuZSBEaWVuc3RlbiBOLlYuMRYwFAYDVQQDEw13 d3cuYWNobWVhLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+1t QYPN4rzMcdpwtCEsa4eHinDEbvXyt0ISobb63pBBHyy4tG/bcwYrel2pOjMb2Ure WuzeI2yTkmXaOpiDT0n81EDgEOOPNPDgAY2wuXekseT7eJ0Aj97r32oHHYd+IRmU zakKVRi7rjx5jyq7RKejxlX7Z/PcNvwQNOh8CkZR9mPjUCg510ApWsWiUtmH6iuV UTxj2QF5BCkJElNThXgaHLIIdYhXocjjqHWse4tnX41t4P+tOa/Wg8NH5rmGGmlf Nd3zzJcvYdJwxEnilxhQce/H/1Yq0xvOwlFcemZUIai0DWEQIROvr5p3K+fF45bJ lbcfMvoZ13p6UdA2kQIDAQABo4IDTDCCA0gwHwYDVR0jBBgwFoAUhlblZbF+9+o/ HbqE0tqX3ISxse8wHQYDVR0OBBYEFD1mVHi4FAZ0r9XmObjeAImsV7ybMCMGA1Ud EQQcMBqCDXd3dy5hY2htZWEubmyCCWFjaG1lYS5ubDA+BgNVHSAENzA1MDMGBmeB DAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBW BgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLmRpZ2ljZXJ0LmV1L0RpZ2lDZXJ0 UXVvVmFkaXMyRzNUTFNSU0E0MDk2U0hBMzg0MjAyM0NBMS5jcmwwgYoGCCsGAQUF BwEBBH4wfDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZGlnaWNlcnQuZXUwVQYI KwYBBQUHMAKGSWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmV1L0RpZ2lDZXJ0UXVv VmFkaXMyRzNUTFNSU0E0MDk2U0hBMzg0MjAyM0NBMS5jcnQwDAYDVR0TAQH/BAIw ADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYATGPcmOWcHauI9h6KPd6uj6tE ozd7X5uUw/uhnPzBviYAAAGgMuOsxQAABAMARzBFAiBBsJaH6hVcwY8Wkda4spqh eiXbXdUoBtSCKSgnLaq1BgIhAJJj7iel3WaCr0g07aaXQhrc109dr1gpMREghxbg kJTnAHUA1tWNqdAXU/NqSqDHV0kCr+vH3CzTjNn3ZMgMiRkenwIAAAGgMuOsrAAA BAMARjBEAiBydiFUiR3UF+ssT2pPgRANfg6YF5LX++eUZ1HO5MagBwIgdYQWWhT+ K6rT/u2E/iNHDwohJq9H/+zJJ7Mb+3UDeTcAdgBEwr0M6RQOZKXJSgGTClqhuzWX DgDuERaJaCocRNe1ZgAAAaAy46xtAAAEAwBHMEUCIEYjVXdjjicIA1B4xDFBh8ge ScJV7zAUVBw/MaUKM1pHAiEApUIdz6gTkbu1kIadRlRKHdiXsVTE4SdC00QiSDlu SNcwDQYJKoZIhvcNAQELBQADggIBAJS7EZ6aeBQR2arTQxFGyuVaaKPRMt1804lT 4XsUsVhIu4oXqXutZBY0iI7oyK2YJLGeo6+iyjXSZFwZmle0eSJmV5xdLgkuZ7Tp IBUHRmMoYe+Lr2cg0XIRnaZh60DzAinCDZG08p6XHiOyubKYEyVKlxIOPBjjLFyU EG3kVqcORnJVeZLVNnBxcN7dFlGHSmOipMqpy0IRhCaX1t4y2n0R73MS0m6keYjq 4m4tNs5AHyv7v89AQDtwpllwguNO8RFGzTSmGztPRszXOcBnoxJE6yzIbrCg2nPy kvXUpjNHyQIYXrd8a2Vp2s3F89toQeSSk8hRBdG36zYgwcznAr+alLbe8USWitYM E9cxi2PaQR1cUGyVOpgwc6ZCNs2spPX7wb/PfhSXGrVF9xrEoeS5HW8r81DWkVsA JlPJP0emyiCI8udx8i5Y+JsuMp3OfUsOc5jxF5TvCtAJ2q6l5XNHp9HMbdJz+fSI orT3cMQ+ROvjDjVC9QGKDEOBFT0536ZiEXuIiJLM+a4BB5/94B3f95eMWrzTHaab SWKckEGYRnqm6C2Za2swL8VQhK40pVapGyEI4AL8Cnxb6FD8MzBEDX7d3WYx3ilY kcarYcbFIKe65hfIuchR3pJ0vatjjZnPgWiQ6qehKX1FPZ8b7OpXIsCV/YWuGfKM 1Ni4wGP9 -----END CERTIFICATE-----
Cipher: TLS_CHACHA20_POLY1305_SHA256 · Checked 2026-11-11T03:57:47+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=IE O=DigiCert Ireland Limited CN=DigiCert QuoVadis 2G3 TLS RSA4096 SHA384 2023 CA1
- Issuer
- C=BM O=QuoVadis Limited CN=QuoVadis Root CA 2 G3
- Valid from
- 2023-12-12T16:20:42+00:00
- Expires
- 2033-12-11T23:59:59+00:00
- Days remaining
- 2587
- Serial (hex)
- 206C1C1E4D0BBBD76382A5C9209C3838C948E474
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
91:63:F1:91:0D:49:44:BE:32:D0:D2:24:A7:9F:9F:A6:B4:03:6E:90:98:79:5A:C8:1D:3D:D1:4C:E4:FF:24:D2
Certificate extensions & PEM
- basicConstraints
- CA:TRUE, pathlen:0
- authorityKeyIdentifier
- ED:E7:6F:76:5A:BF:60:EC:49:5B:C6:A5:77:BB:72:16:71:9B:C4:3D
- authorityInfoAccess
- CA Issuers - URI:http://trust.quovadisglobal.com/qvrca2g3.crt OCSP - URI:http://ocsp.quovadisglobal.com
- certificatePolicies
- Policy: X509v3 Any Policy
- extendedKeyUsage
- TLS Web Client Authentication, TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl.quovadisglobal.com/qvrca2g3.crl
- subjectKeyIdentifier
- 86:56:E5:65:B1:7E:F7:EA:3F:1D:BA:84:D2:DA:97:DC:84:B1:B1:EF
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
-----BEGIN CERTIFICATE----- MIIGkTCCBHmgAwIBAgIUIGwcHk0Lu9djgqXJIJw4OMlI5HQwDQYJKoZIhvcNAQEM BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMiBHMzAeFw0yMzEyMTIxNjIwNDJaFw0z MzEyMTEyMzU5NTlaMGwxCzAJBgNVBAYTAklFMSEwHwYDVQQKDBhEaWdpQ2VydCBJ cmVsYW5kIExpbWl0ZWQxOjA4BgNVBAMMMURpZ2lDZXJ0IFF1b1ZhZGlzIDJHMyBU TFMgUlNBNDA5NiBTSEEzODQgMjAyMyBDQTEwggIiMA0GCSqGSIb3DQEBAQUAA4IC DwAwggIKAoICAQC6nnJ/+N0cNKi3mRWm8Vj+O76HnNBJgLgbINVwriBtfbK8Vaxb 2RN/0asY8x+cqQryyf4rZv27HgUa4Z8IS2oD9gSa/LhsVjOeWr0VyUdSrqnGFnzY z0MawJz+Pus+3dv+L4wQEaoF27b7Iu8R2Gj14dY91SH7nd1Alz61JlxA1H6cE1/5 RaeCBmNhbSOd3LW8nbKhtj4svkZF94nyXz1ro8j3RCapf144y8zSNHSejcdZupXH 4iQU/FmxkwQeXPuyfUyNyxQJi4KG4V1J6XOGlS85UW7qwjMgzVvZh9r3QI/Xjli3 tkO2SrdA5exrKx9etxILlH4ycDhoH7jN2XI6YY310RFHdb/+m5mH1C/J739UdU3S BbLNaL8JTIxFMkc6jXlgpFi73uFnpjv44yeHiMx0Gjgi9/eDaudam0f8FV1sIEQB IbNT+tPw5Y0ueFOVNy6D/s52337UsyHm4yG2jt1JF/Q6n+8PVs7mTUSyx2LTvSDn EzaBwwkvfWc4oP17fGxUtYR+g1HvhVmixLK389wOTXU2uo2fLSi2OfkwlTvSf9Rz 2aDMHRiRNNa+H0P7B93NLojOZtxnP57YFn6VpcJj0lB/ozwb6tZV3dNJY3+RqN82 5AjcKnobl2Lm6lPQmba6mkTW7avjXyN/3oE/TgSGk88SjoNx+griukIUIwIDAQAB o4IBTTCCAUkwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBTt5292Wr9g 7ElbxqV3u3IWcZvEPTB0BggrBgEFBQcBAQRoMGYwOAYIKwYBBQUHMAKGLGh0dHA6 Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZyY2EyZzMuY3J0MCoGCCsGAQUF BzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wEQYDVR0gBAowCDAG BgRVHSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnJjYTJnMy5j cmwwHQYDVR0OBBYEFIZW5WWxfvfqPx26hNLal9yEsbHvMA4GA1UdDwEB/wQEAwIB hjANBgkqhkiG9w0BAQwFAAOCAgEAgaDUpCDbnTkdE9YDHCWYmVbof0s+zzVUUnpu ayfRKkeVpsYj7zrm6JBoL/Uml5sZPg7ho1WfnrQP+s8+XTaXUmNsTG3t0KMrFcTF KBSkH2qsBfcSM8l2E5ae22JArxkY1aYYtuL70tdHkACL1WDZAmOl5YJ3M4IMAZFh SLdUq+GVHxl8GLIMNxqhowafwERSA79ZFHZ8kOJ8bMYbaw89mbJ/DEDOr32lSP2m XhUi21uq08U9gf/vzNApq6iR7c0eirzDbhL2BEkgELhugmbQ4aMO/sARQcyTZcBg p/bV8mtjSEMwv+V60fe7uGFoOgIm+yXbdRjkhQOj9ri9hM2+rWKEV/zUynu6f0JE KLFpTB8DypBTbqxibJfyyXs5t1F3owfe9H4yZ1xVALCvwK16rd+QwsfwaOYh4A1W dnrlgvF7ctbkyc5OegV8fZ2WdBtsYMmhM6CIin8vMt8YtJKUZknch53/EpQLGhoL gceEo/ZKtQLWbWI6nGJMJ0gvVUsheVEfPV3WFJrqGCP+LjvNPWR2vWhJTa9/237a muB5PYLOr8ESvCIWf7dDdQ3D+O+Um6dXk0cItnInqir0RGwPlagcbhILESN4nJUL hFG+ZeQVESCYGuLDd9PFZOKv1jnXJFDqkBKVnITql+OsasDvD2nPlTkfVQ9nJFmZ JR3LGUM= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=BM O=QuoVadis Limited CN=QuoVadis Root CA 2 G3
- Issuer
- C=BM O=QuoVadis Limited CN=QuoVadis Root CA 2 G3
- Valid from
- 2012-01-12T18:59:32+00:00
- Expires
- 2042-01-12T18:59:32+00:00
- Days remaining
- 5541
- Serial (hex)
- 445734245B81899B35F2CEB82B3B5BA726F07528
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
8F:E4:FB:0A:F9:3A:4D:0D:67:DB:0B:EB:B2:3E:37:C7:1B:F3:25:DC:BC:DD:24:0E:A0:4D:AF:58:B4:7E:18:40
Certificate extensions & PEM
- basicConstraints
- CA:TRUE
- keyUsage
- Certificate Sign, CRL Sign
- subjectKeyIdentifier
- ED:E7:6F:76:5A:BF:60:EC:49:5B:C6:A5:77:BB:72:16:71:9B:C4:3D
-----BEGIN CERTIFICATE----- MIIFYDCCA0igAwIBAgIURFc0JFuBiZs18s64KztbpybwdSgwDQYJKoZIhvcNAQEL BQAwSDELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHjAc BgNVBAMTFVF1b1ZhZGlzIFJvb3QgQ0EgMiBHMzAeFw0xMjAxMTIxODU5MzJaFw00 MjAxMTIxODU5MzJaMEgxCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRpcyBM aW1pdGVkMR4wHAYDVQQDExVRdW9WYWRpcyBSb290IENBIDIgRzMwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQChriWyARjcV4g/Ruv5r+LrI3HimtFhZiFf qq8nUeVuGxbULX1QsFN3vXg6YOJkApt8hpvWGo6t/x8Vf9WVHhLL5hSEBMHfNrMW n4rjyduYNM7YMxcoRvynyfDStNVNCXJJ+fKH46nafaF9a7I6JaltUkSs+L5u+9ym c5GQYaYDFCDy54ejiK2toIz/pgslUiXnFgHVy7g1gQyjO/Dh4fxaXc6AcW34Sas+ O7q414AB+6XrW7PFXmAqMaCvN+ggOp+oMiwMzAkd056OXbxMmO7FGmh77FOm6RQ1 o9/NgJ8MSPsc9PG/Srj61YxxSscfrf5BmrODXfKEVu+lV0POKa2Mq1W/xPtbAd0j IaFYAI7D0GoT7RPjEiuA3GfmlbLNHiJuKvhB1PLKFAeNilUSxmn1uIZoL1NesNKq IcGY5jDjZ1XHm26sGahVpkUG0CM62+tlXSoREfA7T8pt9DTEceT/AFr2XK4jYIVz 8eQQsSWu1ZK7E8EM4DnatDlXtas1qnIhO4M15zHfeiFuuDIIfR0ykRVKYnLP43eh vNURG3YBZwjgQQvD6xVu+KQZ2aKrr+InUlYrAoosFCT5v0ICvybIxo/gbjh9Uy3l 7ZizlWNof/k19N+IxWA1ksB8aRxhlRbQ694Lrz4EEEVlWFA4r0jyWbYW8jwNkALG cC4BrTwV1wIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB BjAdBgNVHQ4EFgQU7edvdlq/YOxJW8ald7tyFnGbxD0wDQYJKoZIhvcNAQELBQAD ggIBAJHfgD9DCX5xwvfrs4iP4VGyvD11+ShdyLyZm3tdquXK4Qr36LLTn91nMX66 AarHakE7kNQIXLJgapDwyM4DYvmL7ftuKtwGTTwpD4kWilhMSA/ohGHqPHKmd+RC roijQ1h5fq7KpVMNqT1wvSAZYaRsOPxDMuHBR//47PERIjKWnML2W2mWeyAMQ0Ga W/ZZGYjeVYg3UQt4XAoeo0L9x52ID8DyeAIkVJOviYeIyUqAHerQbj5hLja7NQ4n lv1mNDthcnPxFlxHBlRJAHpYErAK74X9sbgzdWqTHBLmYF5vHX/JHyPLhGGfHoJE +V+tYlUkmlKY7VHnoX6XOuYvHxHaU4AshZ6rNRDbIl9qxV6XU/IyAgkwo1jwDQHV csaxfGl7w/U2Rcxhbl5MlMVerugOXou/983g7aEOGzPuVBj+D77vfoRrQ+NwmNtd dbINWQeFFSM51vHfqSYP1kjHs6Yi9TM3WpVHn3u6GBVv/9YUZINJ0gpnIdsPNWNg KCLjsZWDzYWm3S8P52dSbrsvhXz1SnPnxT7AvSESBT/8twNJAlvIJebiVDj1eYeM HVOyToV7BjjHLPj4sHKNJeV3UvQDHEimUF+IIDBu8oJDqz2XhOdT+yHBTw8imoa4 WSr2Rz0ZiC3oheGe7IUIarFsNMkd7EgrO3jtZsSOeWmD3n+M -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.