rrn-sitran-test.minfin.be
- Service Public Federal Finances -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 02:10:63:e4:e1:57:ca:77:2e:a3:bf:31:24:10:54:c4 was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Service Public Federal Finances
Organization:
Service Public Federal Finances
State / Province:
Bruxelles-Capitale, Région de
Country: BE
Country: BE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 02:10:63:e4:e1:57:ca:77:2e:a3:bf:31:24:10:54:c4Serial Number (int): 2743558833618463628166981773499061444
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 9e:63:c3:27:7e:6f:f2:b4:41:0c:3a:f0:45:83:ac:1e:63:a9:c2:4c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 05:24:06:f6:ea:7c:55:03:f5:7a:82:da:de:9b:5d:83:84:27:bc:f8
Fingerprint (sha256): 03:ff:f6:81:86:af:e8:5f:86:9f:11:53:f2:75:01:16:b4:23:88:2f:1e:cd:6a:b7:fd:b5:0d:f2:1a:f0:9f:de
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate rrn-sitran-test.minfin.be
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rrn-sitran-test.minfin.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rrn-sitran-test.minfin.be
Other certificates including the domain name minfin.be
(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
Certificate
The complete raw certificate details for rrn-sitran-test.minfin.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIgjCCBmqgAwIBAgIQAhBj5OFXyncuo78xJBBUxDANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjEwOTAxMDAwMDAwWhcNMjIwOTAxMjM1 OTU5WjCBhDELMAkGA1UEBhMCQkUxJzAlBgNVBAgMHkJydXhlbGxlcy1DYXBpdGFs ZSwgUsOpZ2lvbiBkZTEoMCYGA1UEChMfU2VydmljZSBQdWJsaWMgRmVkZXJhbCBG aW5hbmNlczEiMCAGA1UEAxMZcnJuLXNpdHJhbi10ZXN0Lm1pbmZpbi5iZTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJeP3AMawTQKNVppy7q8SHwUfWOK ANAd0BKDnIjYsK2Tq0VjEoiHkNh3v1+Uq89tomlrpQWw+HtsxSc5qukm2/6SbNaA 5RjaYTBmIqopNdHbMZGdJu3VYYnSgdqKjggYm4usREeDrSPrcgKzywOd6YbjjxXU xFsBrGWn0/+vUs2a4AfulNDafSKOGVj2T2As7pc7RwJ1q8W23FsrDPHQMY5KQD0Y yOIXlzwIxWBEZqH0zbtJwKNieJXYhTzGOtkKX0fnDCKCJ5RgBV/El6NXSplaV9Xn qam6Yr9cufwnxEDB3Ap2Sm4cSGw2FK/UV+NGG7WBhqlX/uKMgjRoeMz/MXhuqpVD j+x0vh7eDlYpJGAucIevJadZ2StcRQDzmTO4NXJPbXLXhWWiHNwvFhsqLZdDgbT7 dHoxUxhaO50ws6VSqeAabRNRPJlPweisxVt4K4IYDc1wyz/BfLfmCM1svlEElCZd ZCiIhDOh5NrLufAxGas6KD4fXLWXd/shSUGL2rgvn2n5QXWKx3mtR1skAtN6KrI6 26kpTdBQg4+YClQcDbIwkh/Nn42+86nm0A8HJQxLVBI+kfvcqGTXKExOLXg4s04n t3KM4LNJpkyEyQh+TUxFCMYV4Xo9Hz+1/f3U4C5TMf2xsrwx13HhcE30CwlDOO1v NqDYDsjt6qgMC2MbAgMBAAGjggMtMIIDKTAfBgNVHSMEGDAWgBRvHTVJEGwy+lmg nryK6B+VvnF6DDAdBgNVHQ4EFgQUnmPDJ35v8rRBDDrwRYOsHmOpwkwwDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYX aHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAy oDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5j cmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0 LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRw Oi8vR0VBTlQub2NzcC5zZWN0aWdvLmNvbTCCAX8GCisGAQQB1nkCBAIEggFvBIIB awFpAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAF7oXTRcwAA BAMARzBFAiAwMGQOPd3juAL3PpIDhJM2sz+2TgNzV0NKbooJb40NewIhAN4jNr6z LyYsvK8qxmvKc8ydpdFDIQNEWAo+ZqzQnqtJAHYAQcjKsd8iRkoQxqE6CUKHXk4x ixsD6+tLx2jwkGKWBvYAAAF7oXTRMgAABAMARzBFAiEAiBV3bnmO7bgNi2mPaZpb S276+BJEXyMD9JC1CxD4xkECIHGsjFTns8k2oqQLZnIBMnAde/Iit7S/IIUU2EEc t3jvAHcAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF7oXTRCgAA BAMASDBGAiEAuYJmXGhwgvWKJk2vHa3ey1pX4NKg3CItrXeqyM29AaQCIQCfM7rV jPOFFCIlmanGjhyvGAjUa6ujZiFzc48yrwgUvTAkBgNVHREEHTAbghlycm4tc2l0 cmFuLXRlc3QubWluZmluLmJlMA0GCSqGSIb3DQEBDAUAA4ICAQCO+te4TmWcIe6/ N136BIlNp1Pov4ONuihNvVSRt6znk7qf6xtClP2H4p3JI+c9lFpBK7tWr/jlVpQe AuLbb/CYgNuTk2xNUouTZqj931L3+MXbHjU++sJlOw9Jfw8uijiej9+Csk5/qjql trHiY/AlF4JIAXd1BEPGR3WoaFZ/yir3asGGi5J2lz4PizGiocC5B3pZnaZ6Lyl0 tWTzB3D1Z4wu0qpIGBcpLaN7IFOyGHHSi0p3b/IAvK5VAlbAxNjcTbgDSnaXGMLw keACbicl1AKxk9urPk4h8jMZeEPn/lBwJV4a/wyFuMhiTDZTJ7kED+cgWrK/k0YT NynQn5rp1Vr1tYD4vuCsE09VYv+2AEiiC8wwZlBSnBZQ+2e1qfpegXaDWMRvpZsS lYoD/bbrpBv6qKbxvszaEXSh+ZlTBbcIYR4LTtiUgmmUOw0J3aeCZG3i+Q5V8Bac ioQjUqKWdIduXC9Me7srRvPlDdj5mdjmYVa2MjZX6sExQkcZsuPJK13OBvwJpivg UFcbyej4UPxwftPXEVkLmBvD34kcISyDj90ADWEa6ILxii5wj5HHpVnHOgKd6Xr2 YBQRAQr4mhybMFOQ0f63Yx0f1xB/epFCkkU8tQxFbkVEuzo8+BcijafEcq67L+Xh tp5mKjE6ueENxZ6eodGTVduRZtGBGw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl4/cAxrBNAo1WmnLurxI fBR9Y4oA0B3QEoOciNiwrZOrRWMSiIeQ2He/X5Srz22iaWulBbD4e2zFJzmq6Sbb /pJs1oDlGNphMGYiqik10dsxkZ0m7dVhidKB2oqOCBibi6xER4OtI+tyArPLA53p huOPFdTEWwGsZafT/69SzZrgB+6U0Np9Io4ZWPZPYCzulztHAnWrxbbcWysM8dAx jkpAPRjI4heXPAjFYERmofTNu0nAo2J4ldiFPMY62QpfR+cMIoInlGAFX8SXo1dK mVpX1eepqbpiv1y5/CfEQMHcCnZKbhxIbDYUr9RX40YbtYGGqVf+4oyCNGh4zP8x eG6qlUOP7HS+Ht4OVikkYC5wh68lp1nZK1xFAPOZM7g1ck9tcteFZaIc3C8WGyot l0OBtPt0ejFTGFo7nTCzpVKp4BptE1E8mU/B6KzFW3grghgNzXDLP8F8t+YIzWy+ UQSUJl1kKIiEM6Hk2su58DEZqzooPh9ctZd3+yFJQYvauC+faflBdYrHea1HWyQC 03oqsjrbqSlN0FCDj5gKVBwNsjCSH82fjb7zqebQDwclDEtUEj6R+9yoZNcoTE4t eDizTie3cozgs0mmTITJCH5NTEUIxhXhej0fP7X9/dTgLlMx/bGyvDHXceFwTfQL CUM47W82oNgOyO3qqAwLYxsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2743558833618463628166981773499061444 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rrn-sitran-test.minfin.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618318813798792862097618362876920304889945618536577556999581418860384957523489216894890873037528998484304603850584465413156280814806012829161187276384218570079879615637566321757497056862656171783050936934538231196890229981133376135602635100199208493523191712717112350851028459759276473450966281674621885394151606770167079282873626586412243624834761507907258072291840813357547788984507182668597608429994535517479570731264942472106446773317932552905398412170937321155088342371859176712884824125943623752703227627500456458562359667266266130238499395492015366856363062224753993469206405737975847962411015739887595759271040672127310731621795842194645098011694311139425427026598245012489422753779511073271068717475211466061996006021057481829132451373552914236391144403144739069958645487505573996138551344757297753181397643688221563335750459482422953209946747739101052002189901826333813662161445737393988950276274847767442031239124782138298731845289320009802123558573570412536425068676845081248311492195484647254204453276442023379451924330626909341653329556888106602441051442122125552321391529037729284594062022663288042745981720299534302646121744178720093181724125350235571320439301934567447916119307588434376563135228148938745490919088923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9e63c3277e6ff2b4410c3af04583ac1e63a9c24c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 016900760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017ba174d173000004030047304502203030640e3ddde3b802f73e9203849336b33fb64e037357434a6e8a096f8d0d7b022100de2336beb32f262cbcaf2ac66bca73cc9da5d143210344580a3e66acd09eab4900760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ba174d13200000403004730450221008815776e798eedb80d8b698f699a5b4b6efaf812445f2303f490b50b10f8c641022071ac8c54e7b3c936a2a40b66720132701d7bf222b7b4bf208514d8411cb778ef0077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ba174d10a0000040300483046022100b982665c687082f58a264daf1daddecb5a57e0d2a0dc222dad77aac8cdbd01a40221009f33bad58cf38514222599a9c68e1caf1808d46baba3662173738f32af0814bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrn-sitran-test.minfin.be' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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