HTTP/1.1 403 Forbidden
content-length: 292
content-type: text/html
date: Mon, 21 Oct 2024 06:11:40 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
x-frame-options: DENY
x-content-type-options: nosniff
cache-control: no-store
x-xss-protection: 1
content-security-policy: frame-ancestors 'none'
strict-transport-security: max-age=31536000
pragma: no-cache
Set-Cookie: lb1=!5zcBupYk2vRoS9JVKU8piEkh0Z9UG0g+IrroFw/GBVmvu9L1ncFhBHcrTqJzKYYHIUAW4sDmSnziaFagih4U9KCQX5VVuBbhWIxBJ3jR; path=/; Httponly; Secure
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a2:32:36:c3:e5:da:e6:12:68:5a:b5:02:d3:fc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Validity
Not Before: Oct 9 00:00:00 2023 GMT
Not After : Oct 11 23:59:59 2024 GMT
Subject: C=NL, L=Heerlen, O=APG Groep N.V., CN=www.architectenpensioen.nl
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:cd:12:73:39:3f:c2:a0:6c:4b:85:1e:66:92:4b:
45:5d:fe:4a:e8:f0:da:f8:96:a3:5d:54:0f:ff:7e:
dc:84:73:14:c7:3d:0c:46:23:b5:86:6c:34:76:57:
fd:28:d2:1d:b1:2c:60:ab:27:ca:27:8b:4d:2f:4b:
99:08:71:0f:70:2b:e1:25:69:36:4d:6f:bd:a5:8d:
49:e1:00:7a:03:83:6b:b8:68:95:9e:26:bd:7d:b7:
d2:88:05:03:0e:75:a0:e7:03:01:d1:b6:3e:1d:73:
bb:43:ac:10:28:65:13:c3:49:f9:8d:0f:61:3c:7c:
4c:e7:43:87:d8:12:66:15:ca:5c:db:fd:e6:ed:c2:
08:77:7d:89:50:4a:2a:5f:43:c2:a5:87:5f:59:58:
d1:c9:1d:83:b7:c1:04:99:bf:14:e8:f9:0f:a1:2b:
3c:81:7b:46:88:8d:9f:63:df:89:87:54:20:1d:3c:
f5:a9:a5:6a:70:26:51:c9:34:e8:72:86:c9:bb:f6:
09:58:35:f9:73:cd:87:7d:22:b9:41:0a:ef:02:de:
1d:fe:37:70:ff:64:51:b1:f2:3c:93:6f:2f:36:69:
0b:43:aa:a1:a4:6b:ec:bb:7d:11:05:15:bc:d1:50:
2c:37:7f:65:43:94:5a:b2:c7:d8:11:a2:33:3b:51:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
X509v3 Subject Key Identifier:
65:4E:1F:A8:40:4F:89:69:E4:67:E3:8D:95:81:BB:F5:37:1E:9C:DF
X509v3 Subject Alternative Name:
DNS:www.architectenpensioen.nl, DNS:architectenpensioen.nl, DNS:www.pfab.nl, DNS:pfab.nl, DNS:www.pensioenfondsarchitectenbureaus.nl, DNS:pensioenfondsarchitectenbureaus.nl
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Full Name:
URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Oct 9 07:28:49.789 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:BC:E3:25:8B:73:96:92:06:20:80:09:
5B:60:09:D3:3C:61:FC:89:F9:39:17:4E:13:79:4F:96:
DA:11:D2:95:E8:02:20:22:43:C8:A4:E9:F9:56:D8:CD:
01:E2:41:09:7B:C3:B3:0A:C9:A4:4F:1C:EE:79:65:08:
6C:F4:03:1B:EF:D1:B0
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Oct 9 07:28:49.748 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:97:8F:29:96:2F:CB:7C:38:60:87:1F:
40:53:31:42:09:40:1C:35:CD:F0:FE:8F:5E:C5:23:2F:
DA:B1:37:DA:19:02:21:00:B7:50:44:7F:AD:C4:49:26:
11:49:A1:72:8F:BB:55:88:9B:12:E8:19:89:FA:08:B4:
5B:85:5D:E0:EB:DD:AB:F6
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
Timestamp : Oct 9 07:28:49.819 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:58:60:F7:61:10:67:6A:77:00:E5:23:C3:
49:F3:49:34:09:1A:36:0D:6B:33:C4:5F:51:A9:A7:81:
25:54:C6:52:02:21:00:B1:A9:C3:77:55:E3:48:98:E9:
3D:3A:E1:7A:AD:EE:EA:C5:2B:11:5C:E5:F6:A9:D7:28:
02:B4:BD:30:92:C3:7D
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
0d:f4:d2:27:bb:5a:2a:d5:0c:c4:77:8e:3a:c7:15:7f:7d:8f:
9f:66:68:5c:52:57:38:e1:73:39:14:dd:c1:09:70:34:01:23:
07:f9:ae:41:24:88:1d:4b:a9:3e:1a:09:91:43:30:c2:77:e7:
0b:38:a5:73:d7:c0:9d:b6:c9:12:34:b2:a4:d1:07:26:27:f8:
b5:e2:9e:77:1b:be:7d:b5:cb:dc:a8:f2:20:64:9d:49:c8:dd:
c2:7b:3e:74:8f:86:17:e7:e4:a3:58:f9:5a:cb:1c:16:4d:0d:
c8:e3:6c:50:6c:da:0d:41:04:cd:b8:5e:8c:fa:d6:59:68:bd:
3b:49:20:64:df:60:16:95:45:9f:45:22:1d:d7:18:e5:24:2c:
b5:78:64:a7:43:4e:ed:e6:eb:c7:2e:5a:5b:44:ea:b1:9f:1f:
cb:b2:20:78:a2:9a:52:f7:3a:da:28:ea:8d:a5:53:4f:64:9c:
60:02:3d:df:fe:74:1d:c4:42:3b:8c:6f:e5:33:a1:7c:31:f2:
cc:f7:c2:2a:36:80:fb:84:38:63:77:eb:f4:26:e1:bc:2f:31:
44:3c:ca:6a:63:65:20:b3:1f:71:b9:06:0d:de:71:7d:6c:05:
8e:ac:98:f0:24:42:e2:76:2a:00:f9:10:f6:40:b4:64:59:6e:
ad:ec:d6:73