business.api.kbc-group.com
- KBC Group NV -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 09:76:ef:a5:66:9b:7b:ca:73:f3:75:53:d9:c2:a5:cb was issued on by DigiCert Inc.
With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
KBC Group NV
Organization:
KBC Group NV
Locality:
Brussels
Country: BE
Country: BE
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:76:ef:a5:66:9b:7b:ca:73:f3:75:53:d9:c2:a5:cbSerial Number (int): 12580603591668879208640199561576621515
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 28:f2:ea:37:5e:d7:1c:7e:b3:6a:4e:47:18:80:d8:3d:6c:4a:bb:96
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): ef:f0:38:a5:31:da:cb:2b:8b:58:7b:78:79:32:01:13:f2:e4:6a:e9
Fingerprint (sha256): 01:02:04:ed:24:ae:8a:b3:32:6d:f4:41:e7:1f:d1:2f:b2:69:9e:6c:55:36:b5:f7:b2:5f:63:d0:6b:55:ce:f0
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate business.api.kbc-group.com
30
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for business.api.kbc-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
business.api.kbc-group.com
api.bolero.be
api.comfintouch.com
api.comfintouch.kbc.be
api2.bolero.be
b2bapi.kbc-group.com
b2capi.boleromatti.be
b2capi.kbc-group.com
cm0.open.api.kbc-group.com
cm1.open.api.kbc-group.com
comfinapi.kbc-group.com
cos.open.api.kbc-group.com
d9u.open.api.kbc-group.com
dzg.open.api.be.kbc-group.com
ec2.open.api.kbc-group.com
goalalert.api.kbc-group.com
hbb-socket.bolero.be
hbb.open.api.be.kbc-group.com
kat.open.api.be.kbc-group.com
lnd.open.api.kbc-group.com
msd.open.api.kbc-group.com
open.b2b.api.kbc-group.com
open.b2b.big.api.kbc-group.com
openapi.kbc-group.com
openint.big.api.kbc-group.com
openintapi.kbc-group.com
sapi.bolero.be
xbj.open.api.be.kbc-group.com
xtb.open.api.be.kbc-group.com
xu5.open.api.be.kbc-group.com
api.bolero.be
api.comfintouch.com
api.comfintouch.kbc.be
api2.bolero.be
b2bapi.kbc-group.com
b2capi.boleromatti.be
b2capi.kbc-group.com
cm0.open.api.kbc-group.com
cm1.open.api.kbc-group.com
comfinapi.kbc-group.com
cos.open.api.kbc-group.com
d9u.open.api.kbc-group.com
dzg.open.api.be.kbc-group.com
ec2.open.api.kbc-group.com
goalalert.api.kbc-group.com
hbb-socket.bolero.be
hbb.open.api.be.kbc-group.com
kat.open.api.be.kbc-group.com
lnd.open.api.kbc-group.com
msd.open.api.kbc-group.com
open.b2b.api.kbc-group.com
open.b2b.big.api.kbc-group.com
openapi.kbc-group.com
openint.big.api.kbc-group.com
openintapi.kbc-group.com
sapi.bolero.be
xbj.open.api.be.kbc-group.com
xtb.open.api.be.kbc-group.com
xu5.open.api.be.kbc-group.com
Other certificates including the domain name kbc-group.com
(limited to 100 certificates)
mftdashboard.acc.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
Certificate
The complete raw certificate details for business.api.kbc-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIPzCCByegAwIBAgIQCXbvpWabe8pz83VT2cKlyzANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA3MDQwMDAwMDBa Fw0yNDA3MDMyMzU5NTlaMFwxCzAJBgNVBAYTAkJFMREwDwYDVQQHEwhCcnVzc2Vs czEVMBMGA1UEChMMS0JDIEdyb3VwIE5WMSMwIQYDVQQDExpidXNpbmVzcy5hcGku a2JjLWdyb3VwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALc6 Qq9379gklPKDnp6XLK+h3NUbV941P9wkDwjQyKB/kVXkXZ8oVr600fzPox7YC1Fn lmMfqeoMMTLn+M9Fgoc5kP4wGc5ilDbwXDA1NUHjCdaGTJZSuUIIWWHPQ8DMRNYQ mGM63TYjHGEaLiEZR/E//NN9vK2YklswXxLnNXri6XDIqWCmcbVtEWHe9N+5Mjyv AGHVtv2gZ/J0ScM2nVVaeisc5E80nuSxgH9pcCTMjW3jm7bsbTdn2bFQBraRkhpo n2hLg2eXUntMa+EhXmf045lR/5/KffItgaFEc5RGy6OW+my+1GgAoSLUFh7SYQ5B BPpt7nneqxT1VqjbT28CAwEAAaOCBQgwggUEMB8GA1UdIwQYMBaAFLdrouqoqoSM eeq02g+YssWVdrn0MB0GA1UdDgQWBBQo8uo3XtccfrNqTkcYgNg9bEq7ljCCAx4G A1UdEQSCAxUwggMRghpidXNpbmVzcy5hcGkua2JjLWdyb3VwLmNvbYINYXBpLmJv bGVyby5iZYITYXBpLmNvbWZpbnRvdWNoLmNvbYIWYXBpLmNvbWZpbnRvdWNoLmti Yy5iZYIOYXBpMi5ib2xlcm8uYmWCFGIyYmFwaS5rYmMtZ3JvdXAuY29tghViMmNh cGkuYm9sZXJvbWF0dGkuYmWCFGIyY2FwaS5rYmMtZ3JvdXAuY29tghpjbTAub3Bl bi5hcGkua2JjLWdyb3VwLmNvbYIaY20xLm9wZW4uYXBpLmtiYy1ncm91cC5jb22C F2NvbWZpbmFwaS5rYmMtZ3JvdXAuY29tghpjb3Mub3Blbi5hcGkua2JjLWdyb3Vw LmNvbYIaZDl1Lm9wZW4uYXBpLmtiYy1ncm91cC5jb22CHWR6Zy5vcGVuLmFwaS5i ZS5rYmMtZ3JvdXAuY29tghplYzIub3Blbi5hcGkua2JjLWdyb3VwLmNvbYIbZ29h bGFsZXJ0LmFwaS5rYmMtZ3JvdXAuY29tghRoYmItc29ja2V0LmJvbGVyby5iZYId aGJiLm9wZW4uYXBpLmJlLmtiYy1ncm91cC5jb22CHWthdC5vcGVuLmFwaS5iZS5r YmMtZ3JvdXAuY29tghpsbmQub3Blbi5hcGkua2JjLWdyb3VwLmNvbYIabXNkLm9w ZW4uYXBpLmtiYy1ncm91cC5jb22CGm9wZW4uYjJiLmFwaS5rYmMtZ3JvdXAuY29t gh5vcGVuLmIyYi5iaWcuYXBpLmtiYy1ncm91cC5jb22CFW9wZW5hcGkua2JjLWdy b3VwLmNvbYIdb3BlbmludC5iaWcuYXBpLmtiYy1ncm91cC5jb22CGG9wZW5pbnRh cGkua2JjLWdyb3VwLmNvbYIOc2FwaS5ib2xlcm8uYmWCHXhiai5vcGVuLmFwaS5i ZS5rYmMtZ3JvdXAuY29tgh14dGIub3Blbi5hcGkuYmUua2JjLWdyb3VwLmNvbYId eHU1Lm9wZW4uYXBpLmJlLmtiYy1ncm91cC5jb20wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8 hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYy MDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGln aUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EM AQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/ BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0 LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp Z2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAJBgNVHRMEAjAAMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTaPWKRPRFpqJySy2t XERT2n6MSIbqoE3Hhfml6p6n3z1CZl3Rg/fSbglFE/K9v4gZFMo/Qs0wocnXT9gJ H8Qa5sbZW02PvmPcHqNdZCuXzz7RE0OepEp/UWtb9/CAIW6V8CynbJPP72p1l+yS zTcs9FVE5KLh5dRhwTpHySLJamTEOP2DFcaDkDElxaUCDJXEUC9Ar5ziRqakhfRh GJm/SAvfi3kAgcGXDI5QV+aZZDXFqTpFwAemxwTvXt2HdTkbh++pqdpG1N2PdsOv SfZzVcRVr6QUdXoNfPhJLv4ljSzJJusCCkiqhbYHs15TUKVA9f0rIHqJ49Zd3eNg xaAo -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzpCr3fv2CSU8oOenpcs r6Hc1RtX3jU/3CQPCNDIoH+RVeRdnyhWvrTR/M+jHtgLUWeWYx+p6gwxMuf4z0WC hzmQ/jAZzmKUNvBcMDU1QeMJ1oZMllK5QghZYc9DwMxE1hCYYzrdNiMcYRouIRlH 8T/80328rZiSWzBfEuc1euLpcMipYKZxtW0RYd7037kyPK8AYdW2/aBn8nRJwzad VVp6KxzkTzSe5LGAf2lwJMyNbeObtuxtN2fZsVAGtpGSGmifaEuDZ5dSe0xr4SFe Z/TjmVH/n8p98i2BoURzlEbLo5b6bL7UaAChItQWHtJhDkEE+m3ued6rFPVWqNtP bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12580603591668879208640199561576621515 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'business.api.kbc-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23130339127132962525073869741485982352080761055810194093393461955235719756213424221646392491028765912018361954158965531041895719869786154872765183416500792771696564879780904798355305608387099777997748029110542569567174203691824831137064729303236054938978386907823357324441590176455020618425975472215065989872373638302582111604932361148945865725786294411183264019587123245131480134405506153626879258210529862492287181417032702175972765282406233576331352961402647187873583862254076973565775327833517133351994451263707510939363329528207977487411328383012165986003418529317995980226200612758640576953029230885841946759023 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28f2ea375ed71c7eb36a4e471880d83d6c4abb96 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (789 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bolero.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.comfintouch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.comfintouch.kbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.bolero.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bapi.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2capi.boleromatti.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2capi.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm0.open.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm1.open.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfinapi.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cos.open.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd9u.open.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzg.open.api.be.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ec2.open.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goalalert.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbb-socket.bolero.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbb.open.api.be.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kat.open.api.be.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnd.open.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msd.open.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.b2b.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'open.b2b.big.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openapi.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openint.big.api.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openintapi.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapi.bolero.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbj.open.api.be.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtb.open.api.be.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xu5.open.api.be.kbc-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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