premier.michel.archive.belgium.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a4:2d:77:c1:d0:ab:79:62:9c:b5:e5:92:cb:d1:19:f1 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): a4:2d:77:c1:d0:ab:79:62:9c:b5:e5:92:cb:d1:19:f1
Serial Number (int): 218229473629718651784717241891261848049
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 55:b8:01:a8:51:4a:40:ff:7b:cc:8e:f2:58:7e:60:0a:dd:0f:05:19
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): f2:3c:58:fc:24:12:3a:d0:e0:b2:a8:32:5b:94:cf:b0:27:1f:48:78
Fingerprint (sha256): 04:0e:3e:e3:90:bc:3b:0c:4b:df:8d:b2:f7:07:10:8b:21:1f:7b:2e:15:0d:3e:e9:5c:ca:2b:1c:3a:d6:bd:ec

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate premier.michel.archive.belgium.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premier.michel.archive.belgium.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premier.michel.archive.belgium.be

Other certificates including the domain name belgium.be

(limited to 100 certificates)
www.venezuela.diplomatie.belgium.be
16-loi.be
www.australie.diplomatie.belgium.be
www.business.belgium.be
5226.web01.f2w.blue4you.be
www.koeweit.diplomatie.belgium.be
wtsvcvic099a.services.gcloud.belgium.be
rma-help.fedict.belgium.be
*.spaas.gcloud.belgium.be
www.japon.diplomatie.belgium.be
2014.jaarverslag.financien.belgium.be
fedict.be
digiflow-mm.ta.belgium.be
support.eloket.belgium.be
www.bulgarije.diplomatie.belgium.be
www.griekenland.diplomatie.belgium.be
*.ta.belgium.be
finances.belgium.be
consular.diplomatie.be
www.jordanie.diplomatie.belgium.be
www.ierland.diplomatie.belgium.be
www.panama.diplomatie.belgium.be
*.adriatic.belgium.be
www.zweden.diplomatie.belgium.be
www.portugal.diplomatie.belgium.be
2013.jaarverslag.financien.belgium.be
bienarrondir.belgium.be
www.verenigdestaten.diplomatie.belgium.be
*.belgium.be
organesdeconcertation.sante.belgique.be
www.evenements.emploi.belgique.be
*.infocenter.belgium.be
www.chili.diplomatie.belgium.be
www.mozambique.diplomatie.belgium.be
finshop.belgium.be
www.ofoifa.belgium.be
bibforum.fgov.be
www.ofoifa.belgium.be
www.oeganda.diplomatie.belgium.be
*.services.belgium.be
www.maleisie.diplomatie.belgium.be
myhandicap.belgium.be
www.mozambique.diplomatie.belgium.be
*.decroo-i.archive.belgium.be
handicap.belgium.be
www.inde.diplomatie.belgium.be
www.duurzaamevenement.belgium.be
premier.michel.archive.belgium.be
www.zuid-afrika.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.saoedi-arabie.diplomatie.belgium.be
www.kosovo.diplomatie.belgium.be
panorama.belgium.be
complaints.p-o.belgium.be
handicap.belgium.be
residencepalace.be
smp.belgium.be
wahl2003.belgium.be
eIDAS-M.iamfas.belgium.be
premier.be
www.koeweit.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
rapport.mobilit.belgium.be
www.qatar.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.spfeconomie2018.belgium.be
www.diplomatie.be
www.vaticaanstad.diplomatie.belgium.be
meldpunt.belgie.be
www.ivoorkust.diplomatie.belgium.be
bienarrondir.belgium.be
cass.justice.belgium.be
www.jamaique.diplomatie.belgium.be
www.evenements.emploi.belgique.be
e.koba.be
belrai.org
cgra.belgium.be
accreditation-new.belgium.be
consular.diplomatie.be
www.turkije.diplomatie.belgium.be
www.venezuela.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
mailings.social.belgium.be
idp.iamfas.belgium.be
2014.jaarverslag.financien.belgium.be
www.kmteams.belgium.be
*.news.belgium.be
scope.belgium.be
*.spaas.gcloud.belgium.be
www.wellrounded.belgium.be
2018.jaarverslag.financien.belgium.be
certif.iamfas.qa.belgium.be
ibfp.be
www.italie.diplomatie.belgium.be
gutgerundet.belgium.be
webdiv.mobilit.belgium.be
www.ofoifa.belgium.be

Certificate

The complete raw certificate details for premier.michel.archive.belgium.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHQDCCBSigAwIBAgIRAKQtd8HQq3linLXlksvRGfEwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMDIyNDAwMDAwMFoXDTIzMDIyNDIz
NTk1OVowgacxCzAJBgNVBAYTAkJFMScwJQYDVQQIDB5CcnV4ZWxsZXMtQ2FwaXRh
bGUsIFLDqWdpb24gZGUxQzBBBgNVBAoTOkZlZGVyYWxlIE92ZXJoZWlkc2RpZW5z
dCBLYW5zZWxhcmlqIHZhbiBkZSBFZXJzdGUgTWluaXN0ZXIxKjAoBgNVBAMTIXBy
ZW1pZXIubWljaGVsLmFyY2hpdmUuYmVsZ2l1bS5iZTCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBALXGVMBIcMJGJEv1mvuMiH0fp4MxdI934oujp8gNRlMS
bcOi1R+Bt9fgemhFaiJJ4exnwgTjEbox+PZOj4jCOPhU2klseD0xSE+nUlDBbSdH
edxYbFqZ7Skw+ZiMrCGVSvO6r5Tx11B5ZH8z/HACBHyOIHeQOsFAE8iaI50UURVu
Hfoep0xAermi8goA0g2qLYCqzzx3BDiNuCD5J29svElqXkzu3AOvmdIo22Q53Cnu
198w5jMlsqpeTpeZYiKQGDEnbbpEFv6ponjdS7w2c3FBco+wTw+HDrQvXyBKrVUf
lr83onckChWK+72/mLKZa9wQDqZ1eXAoI22Wnw/aEctrVWWaQl73LY/bLgU/rGX7
GdtO4FukRQU2XcGoylPJF3LmGZTeIY1qkRNXL560IwMlQlkZ6kTqiTMLgQzITmOw
hnN+Pn6coM4GnPbSREF9Oj7tADOSo9W1aJOTLWXUxUfdxHpZppmKFgKLVL8CvN3W
4Myoe/GS6muJM1uHqJ1lODsGH+VkzHaAnuuzrg5SBK7shznLq3yRVO1osdH/efvb
j5KegD7qxsChq/ZSX1GqpkIaohcMZt6tcCTL022wEH3z33sqo05WKtPo77fbf2Ku
T53d2CssusWs6Zcr45HPnFVvm+GFceEfc3/MjiE7R2lCYCRLt7iOB2zqyjT+MEB1
AgMBAAGjggHHMIIBwzAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd
BgNVHQ4EFgQUVbgBqFFKQP97zI7yWH5gCt0PBRkwDgYDVR0PAQH/BAQDAgWgMAwG
A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud
IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0
aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H
RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH
AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t
L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz
cC5zZWN0aWdvLmNvbTATBgorBgEEAdZ5AgQDAQH/BAIFADAsBgNVHREEJTAjgiFw
cmVtaWVyLm1pY2hlbC5hcmNoaXZlLmJlbGdpdW0uYmUwDQYJKoZIhvcNAQEMBQAD
ggIBAJ2nCAme7bbfhzYXGdfPN4wV9LmSAT2tRkVzKueBPHRKNWMK7XOou2CLV6ji
YO1sTAPSjAvdqJnLU0talKCB5DL3Aq0dTElnz5uDZ5Na7p2joNgoprrp7b4sMwRL
59GFBHC6h6LhB93LNd4EP9IXbLe8OR8IRh5fSIuwqkDk3NUAY85h6vtKfnEaKGsc
1mIShBAiPeVX7Q5Dr8wnlkIe9o0qdAVy8oB/nIiz00PttfRyX2NIs8MU3eEpuK7k
tVUE7qsay13YXfzTozHYcNXVoOTaFJg9tEzN/47UT8LqBCe1XQJqyFJKI5DiyXH6
xsXRkYdUBuw+SVto0ciAEZ59mWP58Cvyy7Rwm8wd38VqTBbbiDeTf5j+8y6xSaWF
zUswsF71USKbc3cGz93t6FTbhc8OsbrOU9zNpZb8yRAIRx/wdBjfa+sPq/AonjUM
LYjH7iRddqdY6XH5hEW3hzuFULYrmS3QD9FgBnUvIEPgzW+cwBvmLVZ+LaJF1rHK
Q36v+XKqHvBiwf+vf/dUH/ejyHbNtul8eCGfxS2UI6dQclXDQHyNwJhztVrmz2ZH
KvkReBp9IB7I0kR3Dt3l+EjHoKUAu55vGC5Q7Q84WSxBaKMY+WveQdia9CiNRbjv
ZqZaxB5sE8BIvUDixMU0NjVr72M2og2BhNSfTO2W2vMT2vGR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 218229473629718651784717241891261848049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premier.michel.archive.belgium.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741576201813108114399210845830531928770187153863003727291385660845009334471408366760339397206204094619483031480526631543250416048261247491379038537558371212140377498497661219123984508571397181378964082015744430481645134025543007602648769080903365746602227716806600761545508554787125482207650109108856897865782125433613924905624125343052507766019884719445150756072711719684264820162647042100310130235923800611774253892467421767496742200944016509709708060144198259474296625847967936250678606375706102208551100079898724048136581725410617979752657477411139723439185874707157300031480569393513095999938444065541610391571781241681889723965716290777695022499737307151594568493463647054973105624432202991601784341551417778879700787142287101766909610394652823792780994253155650429038072008327504530414969533683253207008363918075874657435948175541725726171635715504784401631589020472255384265852272183565494633276033543109473996185235156803083507653040971448966305172267148389769921597653044277130438608154176217881108346611225173534998592025559916461071813500972623719774702618194711697876311490655125226990435039916720707396531693922812909119321482091034838481454409174797338082003042647033056749393484027067344069191760191725121272200314997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55b801a8514a40ff7bcc8ef2587e600add0f0519
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.michel.archive.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009da708099eedb6df87361719d7cf378c15f4b992013dad4645732ae7813c744a35630aed73a8bb608b57a8e260ed6c4c03d28c0bdda899cb534b5a94a081e432f702ad1d4c4967cf9b8367935aee9da3a0d828a6bae9edbe2c33044be7d1850470ba87a2e107ddcb35de043fd2176cb7bc391f08461e5f488bb0aa40e4dcd50063ce61eafb4a7e711a286b1cd662128410223de557ed0e43afcc2796421ef68d2a740572f2807f9c88b3d343edb5f4725f6348b3c314dde129b8aee4b55504eeab1acb5dd85dfcd3a331d870d5d5a0e4da14983db44ccdff8ed44fc2ea0427b55d026ac8524a2390e2c971fac6c5d191875406ec3e495b68d1c880119e7d9963f9f02bf2cbb4709bcc1ddfc56a4c16db8837937f98fef32eb149a585cd4b30b05ef551229b737706cfddede854db85cf0eb1bace53dccda596fcc91008471ff07418df6beb0fabf0289e350c2d88c7ee245d76a758e971f98445b7873b8550b62b992dd00fd16006752f2043e0cd6f9cc01be62d567e2da245d6b1ca437eaff972aa1ef062c1ffaf7ff7541ff7a3c876cdb6e97c78219fc52d9423a7507255c3407c8dc09873b55ae6cf66472af911781a7d201ec8d244770edde5f848c7a0a500bb9e6f182e50ed0f38592c4168a318f96bde41d89af4288d45b8ef66a65ac41e6c13c048bd40e2c4c53436356bef6336a20d8184d49f4ced96daf313daf191