nkb.acc.kbc-group.com
- KBC Group NV -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 0d:c2:22:82:1f:52:17:02:a3:fa:04:a0:65:32:1f:44 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
KBC Group NV
Organization:
KBC Group NV
State / Province:
Brussels
Locality: Brussels
Country: BE
Locality: Brussels
Country: BE
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:c2:22:82:1f:52:17:02:a3:fa:04:a0:65:32:1f:44Serial Number (int): 18287969447040589803651161970122563396
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e4:51:fa:0f:6c:ba:1a:11:b9:3f:92:37:2d:a9:38:bf:ac:fe:a3:b0
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 64:8a:8b:3d:7e:08:4a:e5:36:05:f3:1f:69:43:9e:86:c1:82:24:b5
Fingerprint (sha256): 05:b3:8c:9f:39:90:7c:c4:61:35:a9:92:f3:1d:c7:6c:db:33:5d:d0:d4:5c:f9:a4:c9:2c:31:51:e6:b4:df:26
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate nkb.acc.kbc-group.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nkb.acc.kbc-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nkb.acc.kbc-group.com
Other certificates including the domain name kbc-group.com
(limited to 100 certificates)
mftdashboard.acc.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com
Certificate
The complete raw certificate details for nkb.acc.kbc-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGujCCBaKgAwIBAgIQDcIigh9SFwKj+gSgZTIfRDANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzAyMDgwMDAwMDBa Fw0yNDAyMDcyMzU5NTlaMGoxCzAJBgNVBAYTAkJFMREwDwYDVQQIEwhCcnVzc2Vs czERMA8GA1UEBxMIQnJ1c3NlbHMxFTATBgNVBAoTDEtCQyBHcm91cCBOVjEeMBwG A1UEAxMVbmtiLmFjYy5rYmMtZ3JvdXAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1JLQ7alsZ1kGm1cGWuXRT+ewa7oKfx2iFcldPFavAwvCPX/V qhuJwiM+vHXaL4MIMkvzfMILk1FOdtjoeItLS22qxdZP9JaGd2xIHKDSEP+lSdH1 dD425LaBueoTZQpSc+MOq3nxTzgQCTK7Jgd8I6RKtDMib3JEhFImapDmpKytJtOr 29IMxP7m8yYfv5iGe/Wcy1Lo01bA84L/BcgQ333TpEJEL5kZvTBt8sVLqY9FmU8X lZrxww/zgYZTntndlgt9qQlPBK1Yjh1uzN7Duw51Og8ItqJydRBIFOcWFibmzbgI bdID7cKQYKLT0tNtkM+sTTkXMey5w+RZ7DkhUQIDAQABo4IDdTCCA3EwHwYDVR0j BBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFORR+g9suhoRuT+S Ny2pOL+s/qOwMCAGA1UdEQQZMBeCFW5rYi5hY2Mua2JjLWdyb3VwLmNvbTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNV HR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy dFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwPgYD VR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5k aWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAkG A1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrOxVy3 nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhjAfpM4AAAQDAEcwRQIgQUxTn3u5N7+g LU0ntfK8LClbHY17Q1TdQrhIqLrunvQCIQDT2xv88Ptr2S2Tu+xtPk1TMKxgMe6o oQBe329/SFae+wB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAAB hjAfpUYAAAQDAEcwRQIgDcJtrxMYjWo3qBqSA5/+ijUtWvitlovtodBv1eBzsMMC IQCv7DGv7Q2LdCzO1x2cjWNvdoLKrvmFTtpJwKYMBXfKjgB2AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABhjAfpQsAAAQDAEcwRQIhAOrMCvieoToP t+wjjWH4bocuTqjeru0K7FVsAzzekNPQAiAe9JUrz9qVmugtVfjgU1uz93vglepf 9xdwZWU2gMgp9zANBgkqhkiG9w0BAQsFAAOCAQEAns/KHoTExHB+hjewPWTZoc7n 4lAPSHPCEHcMANHkYh1GBm8qtHqvZOZndklQojkQljbrHbVuphseL6NSHzH8oR4C owojZLjBmFrxhUGNNNhWR00I7wj8KTI8hMyvz33I8iSUqx81U8rMscVHJ33c9yRk n18r8Lh81KDzDtWCy7fLxtu/uRfJDr6CprpmFH7aFxn6ckKHf08CC7tAq7+mdMZP SaoX/tUekSm/SqzvJvz1iipWZT+s8wcaf6Ce+lCZYbuh0T7J3hF+belaZwyfcPts sjRj+fdGih8efljPJJvkKC8tYaA43P+wkXwEUKuM3/D4xXO+R0gJCriF8O+SPw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JLQ7alsZ1kGm1cGWuXR T+ewa7oKfx2iFcldPFavAwvCPX/VqhuJwiM+vHXaL4MIMkvzfMILk1FOdtjoeItL S22qxdZP9JaGd2xIHKDSEP+lSdH1dD425LaBueoTZQpSc+MOq3nxTzgQCTK7Jgd8 I6RKtDMib3JEhFImapDmpKytJtOr29IMxP7m8yYfv5iGe/Wcy1Lo01bA84L/BcgQ 333TpEJEL5kZvTBt8sVLqY9FmU8XlZrxww/zgYZTntndlgt9qQlPBK1Yjh1uzN7D uw51Og8ItqJydRBIFOcWFibmzbgIbdID7cKQYKLT0tNtkM+sTTkXMey5w+RZ7Dkh UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18287969447040589803651161970122563396 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nkb.acc.kbc-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26834918383048125552969223760702366594544200923090864098107142367830838754029641739332145592568569538046508440921815168638438282692661462622675650976586970386467954462684621635195639170458922325392021420011049620106474616889309418174909418350285614768919000826655700376144257935782924883591033982786039131138998796050996882462769532673442489468139608947981693983542975305145084675222734073157420074579395274321483620097587679778135892902426035526366113272017479924104172267720233380835852242802380072992571621776657084276328541993615861449377838486116363481394850185015731709214054124881680121516852417437442831360337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e451fa0f6cba1a11b93f92372da938bfacfea3b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkb.acc.kbc-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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