Overview of PKIoverheid certificates

This page lists all root and intermediate Certification Authority (CA) certificates issued under the Public Key Infrastructure (PKI) for the Dutch Government, also know as PKIoverheid (PKIo). Three certificate hierarchies are currently active:

  1. Staat der Nederlanden - G3: These certificates are publicly trusted by members of the CAB Forum
  2. Staat der Nederlanden Private - G1: These certificates are not publicly trusted
  3. TRIAL PKIoverheid - G3: Intended for testing purposes only and not trusted by members of the CAB Forum

Note: The abbreviations G1, G2, and G3 used in hierarchy names represent the subsequent generations of root certificates: first, second, and third generation respectively.

A PKIoverheid certificate hierarchy consists of the following components:

  • Root certificate
  • Domain or intermediate certificates
  • Certificates for Trust Service Providers (TSPs)
  • Certificates for end-users

A root certificate issues at least one domain certificate; domain certificates issue, in turn, at least one TSP certificate. TSP certificates typically issues thousands of end-user certificates. This page provides an overview of certificates from the first three categories, which are also known as Certification Authorities (CAs), meaning that new certificates can be issued under these certificates. End-user certificates cannot issue new certificates.

The name of each mentioned certificate is provided, along with the year of issuance for clarification if available. Additionally, the file extension for each certificate is indicated (which is normally “CER”, meaning “certificate”), as well as the size in kilobytes (kB).

Any revoked domain and TSP certificates can be found on the Certificate Revocation Lists (CRL). An overview of those is available at https://crl.pkioverheid.nl.

For more information about PKIoverheid, please visit the Logius website at https://www.logius.nl/pkioverheid.

Certificate hierarchies

Hierarchy: Staat der Nederlanden Root CA - G3

Root certificate: Staat der Nederlanden Root CA - G3 | certificate (CER | 2 kB)

Domain Organisatie Persoon: Staat der Nederlanden Organisatie Persoon CA - G3 | certificate (CER | 2 kB)

  • TSP-certificate: Digidentity BV PKIoverheid Organisatie Persoon (2018) CA - G3 | certificate (CER | 2 kB) (Revoked)
  • TSP-certificate: Digidentity BV PKIoverheid Organisatie Persoon (2019) CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: KPN BV PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: MinDef PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: MinIenW PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: QuoVadis PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: QuoVadis PKIoverheid Organisatie Persoon CA - 2022 | certificate (CER | 2 kB)
  • TSP-certificate: DigiCert QuoVadis PKIoverheid Organisatie Persoon CA - 2023 | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Medewerker op naam CA G3 (2017) | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Medewerker op naam CA G3 (2019) | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Zorgverlener CA G3 (2017) | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Zorgverlener CA G3 (2019) | certificate (CER | 2 kB)

Domain Organisatie Services: Staat der Nederlanden Organisatie Services CA - G3 | certificate (CER | 2 kB)

  • Services TSP certificate: Digidentity BV PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB) (Revoked)
  • Services TSP certificate: Digidentity BV PKIoverheid Organisatie Services CA - 2021 | certificate (CER | 2 kB)
  • Services TSP certificate: KPN BV PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP certificate: MinIenW PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP certificate: QuoVadis PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP certificate: QuoVadis PKIoverheid Organisatie Services CA - 2022 | certificate (CER | 2 kB)
  • Services TSP certificate: DigiCert QuoVadis PKIoverheid Organisatie Services CA - 2023 | certificate (CER | 2 kB)
  • Services TSP certificate: UZI-register Medewerker niet op naam CA G3 (2017) | certificate (CER | 2 kB)
  • Services TSP certificate: UZI-register Medewerker niet op naam CA G3 (2019) | certificate (CER | 2 kB)
  • Server TSP certificate: Digidentity BV PKIoverheid Organisatie Server CA - G3 (2018) | certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: Digidentity BV PKIoverheid Organisatie Server CA - G3 (2019) | certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: KPN BV PKIoverheid Organisatie Server CA - G3 (2016)| certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: KPN BV PKIoverheid Organisatie Server CA - G3 (2019)| certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: QuoVadis PKIoverheid Organisatie Server CA - G3 (2016)| certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: QuoVadis PKIoverheid Organisatie Server CA - G3 (2019)| certificate (CER | 2 kB) (Revoked)

Domain Burger: Staat der Nederlanden Burger CA - G3 | certificate (CER | 2 kB)

  • TSP certificate: Cleverbase ID PKIoverheid Burger CA - G3 (2018)| certificate (CER | 2 kB) (Revoked)
  • TSP certificate: Cleverbase ID PKIoverheid Burger CA - G3 (2019)| certificate (CER | 2 kB)
  • TSP certificate: Digidentity BV PKIoverheid Burger CA - G3 (2018) | certificate (CER | 2 kB) (Revoked)
  • TSP certificate: Digidentity BV PKIoverheid Burger CA - G3 (2019) | certificate (CER | 2 kB) (Revoked)
  • TSP certificate: Digidentity BV PKIoverheid Burger CA - 2021 | certificate (CER | 2 kB)
  • TSP certificate: QuoVadis PKIoverheid Burger CA - G3| certificate (CER | 2 kB) (Revoked)
  • TSP certificate: QuoVadis PKIoverheid Burger CA - 2021 | certificate (CER | 2 kB)
  • TSP certificate: DigiCert QuoVadis PKIoverheid Burger CA - 2023 | certificate (CER | 2 kB)

Domain Autonome Apparaten: Staat der Nederlanden Autonome Apparaten CA - G3 | certificate (CER | 2 kB)

  • TSP certificate: MinIenW PKIoverheid Autonome Apparaten CA - G3 | certificate (CER | 2 kB)

Domain Organization Person (2023): Staat der Nederlanden Organization Person CA - 2023 | certificate (CER | 3 kB)

  • TSP certificate: KPN Organization Person CA - 2024 | certificate (CER | 2 kB) (Revoked)

  • TSP certificate: KPN PKIoverheid Organization Person CA - 2024 | certificate (CER | 2 kB)

Domain Organization Services (2023): Staat der Nederlanden Organization Services CA -2023 | certificate (CER | 3 kB)

  • TSP certificate: KPN Organization Services CA - 2024 | certificate (CER | 2 kB) (Revoked)

  • TSP certificate: KPN PKIoverheid Organization Services CA - 2024 | certificate (CER | 2 kB)

Domain Citizen (2023): Staat der Nederlanden Citizen CA - 2023 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued for this domain CA

Domain S/MIME (2023): Staat der Nederlanden S/MIME CA - 2023 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued for this domain CA

Hierarchy: Staat der Nederlanden Private Root CA - G1

Root certificate: Staat der Nederlanden Private Root CA - G1 | certificate (CER | 2 kB)

Domain Private Personen: Staat der Nederlanden Private Personen CA - G1 | certificate (CER | 2 kB)

  • TSP certificate: QuoVadis PKIoverheid Private Personen CA - G1 | certificate (CER | 2 kB)
  • TSP certificate: DigiCert QuoVadis PKIoverheid Private Personen CA - 2023 | certificate (CER | 2 kB)

Domain Private Services: Staat der Nederlanden Private Services CA - G1 | certificate (CER | 2 kB)

  • TSP certificate: KPN PKIoverheid Private Services CA - G1 | certificate (CER | 2 kB)
  • TSP certificate: QuoVadis PKIoverheid Private Services CA - G1 | certificate (CER | 2 kB)
  • TSP certificate: DigiCert QuoVadis PKIoverheid Private Services CA - 2023 | certificate (CER | 2 kB)
  • TSP certificate: UZI-register Private Server CA G1 | certificate (CER | 2 kB)
  • TSP certificate: ZOVAR Private Server CA G1 | certificate (CER | 2 kB)
  • TSP certificate: Digidentity BV PKIoverheid Private Services CA - G1 | certificate (CER | 2 kB)

Hierarchy: TRIAL PKIoverheid Root CA - G3

Root certificate: TRIAL PKIoverheid Root CA - G3 | certificate (CER | 2 kB)

TRIAL Domain Organisatie Persoon: TRIAL PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)

  • TSP-certificate: TRIAL KPN BV PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: TRIAL QuoVadis PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)

TRIAL Domain Organisatie Services: TRIAL PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)

  • Services TSP-certificate: TRIAL KPN BV PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP-certificate: TRIAL QuoVadis PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Server TSP-certificate: TRIAL KPN BV PKIoverheid Organisatie Server CA - G3 | certificate (CER | 2 kB)
  • Server TSP-certificate: TRIAL QuoVadis PKIoverheid Organisatie Server CA - G3 | certificate (CER | 2 kB)

Additional verification

To verify the authenticity of PKIoverheid root certificates (excluding those intended for testing purposes) please refer to the Dutch Government Gazette (Dutch language only):

Exported on: 2024-04-30.