ipmgroup2.web.arc-cdn.net

Issued by R3

About this certificate

This digital certificate with serial number 03:c5:5c:23:5a:60:a8:7b:b0:f3:30:7e:9a:58:22:bf:a5:b5 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ipmgroup2.web.arc-cdn.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:5c:23:5a:60:a8:7b:b0:f3:30:7e:9a:58:22:bf:a5:b5
Serial Number (int): 328494956617782789166598712318773921031605
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:2b:dc:c7:04:1e:68:99:a1:30:2a:f9:42:1c:bc:f0:71:5a:0b:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:af:59:32:58:e3:d8:bb:1d:9f:01:2c:77:44:39:e9:a5:1f:95:e8
Fingerprint (sha256): 03:f5:33:13:38:7e:94:08:6f:39:b6:94:d6:0b:22:8e:b1:8c:f3:eb:17:df:98:55:07:f9:18:11:7a:48:73:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ipmgroup2.web.arc-cdn.net

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ipmgroup2.web.arc-cdn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actualite-cine-tele.dhnet.be
actualite-generale.dhnet.be
actualite-people.dhnet.be
actualite-pratique.dhnet.be
actualite-regionale.dhnet.be
actualite-sportive.dhnet.be
cinema.dhnet.be
culture.dhnet.be
dev.dhnet.be
dhdimanche.be
fotovot.dh.be
fotovot.dhnet.be
galeries.dh.be
galeries.dhnet.be
imode.dh.be
imode.dhnet.be
infos.dhnet.be
iphone.dh.be
iphone.dhnet.be
ipmgroup2.web.arc-cdn.net
jo.dhnet.be
laderniereheure.be
laderniereheurelessports.be
lessportsplus.dh.be
lessportsplus.dhnet.be
m.dh.be
m.dhnet.be
maintenance.dh.be
maintenance.dhnet.be
mob.dh.be
mob.dhnet.be
r.ldh.be
s.ldh.be
sandbox.dhnet.be
smart.dh.be
smart.dhnet.be
sourires.dh.be
sourires.dhnet.be
trafic.dh.be
trafic.dhnet.be
videos.dh.be
videos.dhnet.be
wap.dh.be
wap.dhnet.be
www.derniereheure.be
www.dh.be
www.dhdimanche.be
www.dhnet.be
www.laderniereheure.be
www.laderniereheurelessports.be
www.ladh.be
www.ladhlessports.be
www.ldh.be

Other certificates including the domain name arc-cdn.net

(limited to 100 certificates)
arcmarketing.web.arc-cdn.net
metroworldnews.web.arc-cdn.net
thenational.web.arc-cdn.net
octane.web.arc-cdn.net
gray5.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
radiomitre.web.arc-cdn.net
avalonbay.web.arc-cdn.net
prisaradiomx.web.arc-cdn.net
culturacolectiva.web.arc-cdn.net
elfinanciero.web.arc-cdn.net
archetype.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
coindesk.web.arc-cdn.net
avalonbay.web.arc-cdn.net
cmg.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
newr7.web.arc-cdn.net
gray2.web.arc-cdn.net
lanacionpy.web.arc-cdn.net
diarioas.web.arc-cdn.net
coindesk.api.arc-cdn.net
lanacionar.web.arc-cdn.net
avalonbay.web.arc-cdn.net
larazon.api.arc-cdn.net
grupoclarin.web.arc-cdn.net
diarioas.api.arc-cdn.net
rtl.web.arc-cdn.net
radiomitre.web.arc-cdn.net
gray2.web.arc-cdn.net
coindeskdev2.web.arc-cdn.net
irishtimes.web.arc-cdn.net
elcomercio.web.arc-cdn.net
coxohio.web.arc-cdn.net
shawmedia.web.arc-cdn.net
opb.web.arc-cdn.net
coindesk.web.arc-cdn.net
grupoclarin.web.arc-cdn.net
mna.web.arc-cdn.net
cmg2.web.arc-cdn.net
culturacolectiva.web.arc-cdn.net
artear.web.arc-cdn.net
ipmgroup2.web.arc-cdn.net
diarioas.web.arc-cdn.net
pmn.web.arc-cdn.net
mentormedier.web.arc-cdn.net
prisa.web.arc-cdn.net
advancelocal.web.arc-cdn.net
elcomercio.web.arc-cdn.net
prisaradiolos40.web.arc-cdn.net
elespectador.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
web.arc-cdn.net
eluniverso.web.arc-cdn.net
gray4.web.arc-cdn.net
octane.web.arc-cdn.net
cmg2.web.arc-cdn.net
mna.web.arc-cdn.net
octane.web.arc-cdn.net
gmg.web.arc-cdn.net
ajc.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
tgam.web.arc-cdn.net
avalonbay.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
sfr.web.arc-cdn.net
elcomercio.web.arc-cdn.net
coindeskuat.api.arc-cdn.net
elfinanciero.web.arc-cdn.net
tbt.web.arc-cdn.net
tronc.api.arc-cdn.net
cmg2.web.arc-cdn.net
bostonglobe.web.arc-cdn.net
cmg.web.arc-cdn.net
mna.web.arc-cdn.net
ajc.web.arc-cdn.net
archetype.web.arc-cdn.net
coindeskdev1.web.arc-cdn.net
avalonbay.web.arc-cdn.net
avalonbay.web.arc-cdn.net
spectator.web.arc-cdn.net
leparisien.web.arc-cdn.net
cmg.web.arc-cdn.net
lexpress.web.arc-cdn.net
prisaradioco.web.arc-cdn.net
gray2.web.arc-cdn.net
gray4.web.arc-cdn.net
avalonbay.web.arc-cdn.net
metroworldnews.web.arc-cdn.net
raycom.web.arc-cdn.net
thenational.web.arc-cdn.net
advancelocalthemes.web.arc-cdn.net
gfrmedia.web.arc-cdn.net
arcmarketing.web.arc-cdn.net
copesa.api.arc-cdn.net
elfinanciero.web.arc-cdn.net
civicnewscompany.web.arc-cdn.net
elcomercio.web.arc-cdn.net
lexpress.web.arc-cdn.net

Certificate

The complete raw certificate details for ipmgroup2.web.arc-cdn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SljB4kjXL4OMqLDXNvC
rc5VS661j25zjOigjfP5nYC2NNG+CMYYz8XqfztiJwqVngh9H8DVlMnk9OSo/SjC
X91OA1LM3NtGNuNVqVmnupI4Ec02fv2d+lcCbKiRnimZoc4VKhFXkm2l89f3pdcz
Z8oCzqnNgKUl/lkw8n+8KjRDOvLYF+/OeXN+H2K0AHHT6jwAg/b6qvzQtEVSrcWm
vJRe6nKGUoS5KD5kmkSpUGDWYMIZ4hpchRaFULyf4dmWzV9H2hDQnYkbS66nC2My
czPyROV2x2bnxp5f6tjKaYWadn6YcbvrYK3r3GuQhfmWL6QhafAaisRhcyI2DDcp
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328494956617782789166598712318773921031605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 07:00:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 07:00:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ipmgroup2.web.arc-cdn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27414120785988992034959878869024609611851481767530058866794832896906870667739682648595564737083902382009090628618778167982715212864523718683953394222690627897826657525357041641726698607950101322098118349323041952140006443329244480086675356066894651409689211815346777335744140233474892114337093634050436893747507680104665062351690647565567217525335689225799673136721135681618508656620189030785728221165656614167776258866162073698970058673463602288557717969280798019165158392544517993371103625228450323462451657658006594625879530377459938738565557854084648241118658479557589342230566190006966211638774932980629541169571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							722bdcc7041e6899a1302af9421cbcf0715a0b18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualite-cine-tele.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualite-generale.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualite-people.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualite-pratique.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualite-regionale.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualite-sportive.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culture.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhdimanche.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotovot.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotovot.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeries.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeries.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imode.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imode.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infos.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipmgroup2.web.arc-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jo.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laderniereheure.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laderniereheurelessports.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessportsplus.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessportsplus.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mob.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mob.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.ldh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.ldh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourires.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourires.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trafic.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trafic.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wap.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wap.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derniereheure.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhdimanche.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dhnet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laderniereheure.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laderniereheurelessports.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladh.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladhlessports.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldh.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc92ff53e00000403004730450220328d8082bbe2c696c48975f2e58d50b4fd2faa08a9a8006ddada330a66aa5677022100d310db4b2d1c448a7c466937e117890448571699a7c1d5fd5398ab8f2150d27800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cc92ff58d0000040300483046022100e1969297dcdb00b072888f6e522dc45421e4321b659bc85779ac4a0bde4661cb0221008a5c18e848ef667e5cf57ba6e96dc86fa059b6ca3ab6f8f9249d2d1046243989
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b8ff2b87f431dffac46a4fdafc7156281de3a0378b46eadb4d86a3f2c7fb73e0a7b9e374666990e9119b147997497a680f23aa10c6e0038f8db84b6c90e84a303379824eac6b5dff59e705bf532380edf7e333eb61cc86008a9782d9a481d75c7e43c179f8915866372aef5a43fe8528e35d0cc987fb2e10c5b22652cc344c285b814d2453f45c976e449ea8389f75c6b74f3dd445d37082c356ebe667469abf2cd5a95d891e1acad3004cd20dc1b5d3687d7221d5084e880fb8a80f1757147df1b540fd0f7af24a17335ee00fc44070e257708762effbefe0f44ba5f199686722f7a56ca76c20be1fddebc262818a104ed267630e257396fd84b64ca5845099