Logius is part of the Ministry of the Interior and Kingdom Relations (logo)
Home | Certificate Practice Statement (CPS) | Programme of Requirements (CP) | CA certificates | Certificate Revocation Lists (CRL) | Object Identifiers (OID)

Overview of PKIoverheid certificates

This page lists all root and intermediate Certification Authority (CA) certificates issued under the Public Key Infrastructure (PKI) for the Dutch Government, also know as PKIoverheid (PKIo). Three certificate hierarchies are currently active:

  1. Staat der Nederlanden - G3: These certificates are publicly trusted by members of the CAB Forum
  2. Staat der Nederlanden Private - G1: These certificates are not publicly trusted
  3. TRIAL PKIoverheid - G3: Intended for testing purposes only and not trusted by members of the CAB Forum

Note: The abbreviations G1, G2, G3 and G4 used in hierarchy names represent the subsequent generations of root certificates: first, second, third and fourth generations respectively. Five certificate hierarchies are currently in development and currently only the Root CA certificates have been created. These are:

  1. Staat der Nederlanden - G4 Root EUTL G-Sigs - 2024: These certificates are not trusted by members of the CAB Forum and will be used to issue ICAs and TSP CAs which in turn will issue end-user certificates for qualified signatures according to EU Regulation 910/2014 (eIDAS)
  2. Staat der Nederlanden - G4 Root Priv S-CIBG - 2024: These certificates are not trusted by members of the CAB Forum and will be used to issue ICAs and TSP CAs which in turn will issue end-user authentication and encryption certificates specifically for the Dutch healthcare sector (CIBG)
  3. Staat der Nederlanden - G4 Root Priv G-Other - 2024: These certificates are not trusted by members of the CAB Forum and will be used to issue ICAs and TSP CAs which in turn will issue end-user authentication and encryption certificates for general use
  4. Staat der Nederlanden - G4 Root Priv G-TLS - 2024: These certificates are not trusted by members of the CAB Forum and will be used to issue ICAs and TSP CAs which in turn will issue end-user certificates specifically used for server authentication in a private environment (machine-to-machine)
  5. Staat der Nederlanden - G4 Root Publ G-SMIME - 2024: These certificates are currently not trusted by members of the CAB Forum but will be used to issue ICAs and TSP CAs which in turn will issue S/MIME certificates.

A PKIoverheid certificate hierarchy consists of the following components:

  • Root certificate
  • Domain or intermediate certificates
  • Certificates for Trust Service Providers (TSPs)
  • Certificates for end-users

A root certificate issues at least one domain certificate; domain certificates issue, in turn, at least one TSP certificate. TSP certificates typically issues thousands of end-user certificates. This page provides an overview of certificates from the first three categories, which are also known as Certification Authorities (CAs), meaning that new certificates can be issued under these certificates. End-user certificates cannot issue new certificates.

The name of each mentioned certificate is provided, along with the year of issuance for clarification if available. Additionally, the file extension for each certificate is indicated (which is normally “CER”, meaning “certificate”), as well as the size in kilobytes (kB).

Any revoked domain and TSP certificates can be found on the Certificate Revocation Lists (CRL). An overview of those is available at https://crl.pkioverheid.nl.

For more information about PKIoverheid, please visit the Logius website at https://www.logius.nl/pkioverheid.

Certificate hierarchies

Hierarchy: Staat der Nederlanden Root CA - G3

Root certificate: Staat der Nederlanden Root CA - G3 | certificate (CER | 2 kB)

Domain Organisatie Persoon: Staat der Nederlanden Organisatie Persoon CA - G3 | certificate (CER | 2 kB)

  • TSP-certificate: Digidentity BV PKIoverheid Organisatie Persoon (2018) CA - G3 | certificate (CER | 2 kB) (Revoked)
  • TSP-certificate: Digidentity BV PKIoverheid Organisatie Persoon (2019) CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: KPN BV PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: MinDef PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: MinIenW PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: QuoVadis PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: QuoVadis PKIoverheid Organisatie Persoon CA - 2022 | certificate (CER | 2 kB)
  • TSP-certificate: DigiCert QuoVadis PKIoverheid Organisatie Persoon CA - 2023 | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Medewerker op naam CA G3 (2017) | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Medewerker op naam CA G3 (2019) | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Zorgverlener CA G3 (2017) | certificate (CER | 2 kB)
  • TSP-certificate: UZI-register Zorgverlener CA G3 (2019) | certificate (CER | 2 kB)

Domain Organisatie Services: Staat der Nederlanden Organisatie Services CA - G3 | certificate (CER | 2 kB)

  • Services TSP certificate: Digidentity BV PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB) (Revoked)
  • Services TSP certificate: Digidentity BV PKIoverheid Organisatie Services CA - 2021 | certificate (CER | 2 kB)
  • Services TSP certificate: KPN BV PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP certificate: MinIenW PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP certificate: QuoVadis PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP certificate: QuoVadis PKIoverheid Organisatie Services CA - 2022 | certificate (CER | 2 kB)
  • Services TSP certificate: DigiCert QuoVadis PKIoverheid Organisatie Services CA - 2023 | certificate (CER | 2 kB)
  • Services TSP certificate: UZI-register Medewerker niet op naam CA G3 (2017) | certificate (CER | 2 kB)
  • Services TSP certificate: UZI-register Medewerker niet op naam CA G3 (2019) | certificate (CER | 2 kB)
  • Server TSP certificate: Digidentity BV PKIoverheid Organisatie Server CA - G3 (2018) | certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: Digidentity BV PKIoverheid Organisatie Server CA - G3 (2019) | certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: KPN BV PKIoverheid Organisatie Server CA - G3 (2016)| certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: KPN BV PKIoverheid Organisatie Server CA - G3 (2019)| certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: QuoVadis PKIoverheid Organisatie Server CA - G3 (2016)| certificate (CER | 2 kB) (Revoked)
  • Server TSP certificate: QuoVadis PKIoverheid Organisatie Server CA - G3 (2019)| certificate (CER | 2 kB) (Revoked)

Domain Burger: Staat der Nederlanden Burger CA - G3 | certificate (CER | 2 kB)

  • TSP certificate: Cleverbase ID PKIoverheid Burger CA - G3 (2018)| certificate (CER | 2 kB) (Revoked)
  • TSP certificate: Cleverbase ID PKIoverheid Burger CA - G3 (2019)| certificate (CER | 2 kB)
  • TSP certificate: Digidentity BV PKIoverheid Burger CA - G3 (2018) | certificate (CER | 2 kB) (Revoked)
  • TSP certificate: Digidentity BV PKIoverheid Burger CA - G3 (2019) | certificate (CER | 2 kB) (Revoked)
  • TSP certificate: Digidentity BV PKIoverheid Burger CA - 2021 | certificate (CER | 2 kB)
  • TSP certificate: QuoVadis PKIoverheid Burger CA - G3| certificate (CER | 2 kB) (Revoked)
  • TSP certificate: QuoVadis PKIoverheid Burger CA - 2021 | certificate (CER | 2 kB)
  • TSP certificate: DigiCert QuoVadis PKIoverheid Burger CA - 2023 | certificate (CER | 2 kB)

Domain Autonome Apparaten: Staat der Nederlanden Autonome Apparaten CA - G3 | certificate (CER | 2 kB)

  • TSP certificate: MinIenW PKIoverheid Autonome Apparaten CA - G3 | certificate (CER | 2 kB)

Domain Organization Person (2023): Staat der Nederlanden Organization Person CA - 2023 | certificate (CER | 3 kB)

  • TSP certificate: KPN Organization Person CA - 2024 | certificate (CER | 2 kB) (Revoked)

  • TSP certificate: KPN PKIoverheid Organization Person CA - 2024 | certificate (CER | 2 kB)

Domain Organization Services (2023): Staat der Nederlanden Organization Services CA -2023 | certificate (CER | 3 kB)

  • TSP certificate: KPN Organization Services CA - 2024 | certificate (CER | 2 kB) (Revoked)

  • TSP certificate: KPN PKIoverheid Organization Services CA - 2024 | certificate (CER | 2 kB)

Domain Citizen (2023): Staat der Nederlanden Citizen CA - 2023 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued by this domain CA

Domain S/MIME (2023): Staat der Nederlanden S/MIME CA - 2023 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued by this domain CA

Hierarchy: Staat der Nederlanden - G4 Root EUTL G-Sigs - 2024

Root certificate: Staat der Nederlanden - G4 Root EUTL G-Sigs - 2024 | certificate (CER | 2 kB)

Intermediate EUTL Signatures Legal Persons (2024): Staat der Nederlanden - G4 Intm EUTL G-Sigs LP - 2024 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued by this domain CA

Intermediate EUTL Signatures Natural Persons (2024): Staat der Nederlanden - G4 Intm EUTL G-Sigs NP - 2024 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued by this domain CA

Hierarchy: Staat der Nederlanden - G4 Root Priv S-CIBG - 2024

Root certificate: Staat der Nederlanden - G4 Root Priv S-CIBG - 2024 | certificate (CER | 2 kB)

Intermediate Private CIBG Legal Persons - 2024: Staat der Nederlanden - G4 Intm Priv S-CIBG LP - 2024 | certificate (CER | 2 kB)

  • Currently no TSP CAs have been issued by this domain CA

Intermediate Private CIBG Natural Persons - 2024: Staat der Nederlanden - G4 Intm Priv S-CIBG NP - 2024 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued by this domain CA

Hierarchy: Staat der Nederlanden - G4 Root Priv G-Other - 2024

Root certificate: Staat der Nederlanden - G4 Root Priv G-Other - 2024 | certificate (CER | 2 kB)

Intermediate Private Legal Persons (2024): Staat der Nederlanden - G4 Intm Priv G-Other LP - 2024 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued by this domain CA

Intermediate Private Natural Persons (2024): Staat der Nederlanden - G4 Intm Priv G-Other NP - 2024 | certificate (CER | 3 kB)

  • Currently no TSP CAs have been issued by this domain CA

Hierarchy: Staat der Nederlanden - G4 Root Priv G-TLS - 2024

Root certificate: Staat der Nederlanden - G4 Root Priv G-TLS - 2024 | certificate (CER | 2 kB)

Intermediate Private TLS - Systems: Staat der Nederlanden - G4 Intm Priv G-TLS SYS - 2024 | certificate (CER | 2 kB)

  • Currently no TSP CAs have been issued by this domain CA

Hierarchy: Staat der Nederlanden - G4 Root Publ G-SMIME - 2024

Root certificate: Staat der Nederlanden - G4 Root Publ G-SMIME - 2024 | certificate (CER | 2 kB)

  • currently no ICAs or TSP CAs have been issued from this Root CA

Hierarchy: Staat der Nederlanden Private Root CA - G1

Root certificate: Staat der Nederlanden Private Root CA - G1 | certificate (CER | 2 kB)

Domain Private Personen: Staat der Nederlanden Private Personen CA - G1 | certificate (CER | 2 kB)

  • TSP certificate: QuoVadis PKIoverheid Private Personen CA - G1 | certificate (CER | 2 kB)
  • TSP certificate: DigiCert QuoVadis PKIoverheid Private Personen CA - 2023 | certificate (CER | 2 kB)

Domain Private Services: Staat der Nederlanden Private Services CA - G1 | certificate (CER | 2 kB)

  • TSP certificate: KPN PKIoverheid Private Services CA - G1 | certificate (CER | 2 kB)
  • TSP certificate: QuoVadis PKIoverheid Private Services CA - G1 | certificate (CER | 2 kB)
  • TSP certificate: DigiCert QuoVadis PKIoverheid Private Services CA - 2023 | certificate (CER | 2 kB)
  • TSP certificate: UZI-register Private Server CA G1 | certificate (CER | 2 kB)
  • TSP certificate: ZOVAR Private Server CA G1 | certificate (CER | 2 kB)
  • TSP certificate: Digidentity BV PKIoverheid Private Services CA - G1 | certificate (CER | 2 kB)

Hierarchy: TRIAL PKIoverheid Root CA - G3

Root certificate: TRIAL PKIoverheid Root CA - G3 | certificate (CER | 2 kB)

TRIAL Domain Organisatie Persoon: TRIAL PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)

  • TSP-certificate: TRIAL KPN BV PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)
  • TSP-certificate: TRIAL QuoVadis PKIoverheid Organisatie Persoon CA - G3 | certificate (CER | 2 kB)

TRIAL Domain Organisatie Services: TRIAL PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)

  • Services TSP-certificate: TRIAL KPN BV PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Services TSP-certificate: TRIAL QuoVadis PKIoverheid Organisatie Services CA - G3 | certificate (CER | 2 kB)
  • Server TSP-certificate: TRIAL KPN BV PKIoverheid Organisatie Server CA - G3 | certificate (CER | 2 kB)
  • Server TSP-certificate: TRIAL QuoVadis PKIoverheid Organisatie Server CA - G3 | certificate (CER | 2 kB)

Additional verification

To verify the authenticity of PKIoverheid root certificates (excluding those intended for testing purposes) please refer to the Dutch Government Gazette (Dutch language only):

Exported on: 2024-07-01.