[ricklambrechts]

No description provided.

[gerbrand-bosch]

I think we should merge this ASAP — it's a big improvement.

A few things to pick up afterward:

• Document that production requires a PKIoverheid certificate, while non-production environments can use a PKIoverheid TRIAL certificate.
• URL-encoded characters show up when running locally — we need to verify these don't appear in the docs:
  
• The prs:administration scope is poorly formatted: