You are looking in the wrong place. https://securitytxt.org/ proposes to create a text file called security.txt under the .well-known directory of your project.

So, the URL becomes: https://www.digitaltrustcenter.nl/.well-known/security.txt

This returns a 200 (via 302).