Overview of PKIoverheid certificates

This page lists all root and intermediate Certification Authority (CA) certificates issued by the Public Key Infrastructure (PKI) for the Dutch Government, also known as PKIoverheid (PKIo).

A PKIoverheid certificate hierarchy consists of the following components:

• Root certificate
• Domain or intermediate certificates
• Certificates for Trust Service Providers (TSPs)
• Certificates for end-users

A root certificate issues at least one domain certificate; domain certificates issue, in turn, at least one TSP certificate. TSP certificates typically issues thousands of end-user certificates. This page provides an overview of certificates from the first three categories, which are also known as Certification Authorities (CAs), meaning that new certificates can be issued under these certificates. End-user certificates cannot issue new certificates.

The name of each mentioned certificate is provided, along with the year of issuance for clarification if available. Additionally, the file extension for each certificate is indicated (which is normally “CER”, meaning “certificate”), as well as the size in kilobytes (kB).

Any revoked domain and TSP certificates can be found on the Certificate Revocation Lists (CRL). An overview of those is available at https://crl.pkioverheid.nl.

For more information about PKIoverheid, please visit the Logius website at https://www.logius.nl/pkioverheid.

Certificate hierarchies

Additional verification

To verify the authenticity of PKIoverheid root certificates (excluding those intended for testing purposes) please refer to the Dutch Government Gazette (Dutch language only):

• Staat der Nederlanden Root CA - G3
• Staat der Nederlanden Root CA - G4
• Staat der Nederlanden Private Root CA - G1