emm.rrn.fgov.be

- AD Instellingen en Bevolking -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 63:10:4a:2e:a1:60:db:e5:b8:a3:d3:77:d3:ff:68:6d was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AD Instellingen en Bevolking

Organization: AD Instellingen en Bevolking
State / Province: Brussels Hoofdstedelijk Gewest
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 63:10:4a:2e:a1:60:db:e5:b8:a3:d3:77:d3:ff:68:6d
Serial Number (int): 131678152925193556435092700341683054701
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d3:2b:4a:a0:ec:25:fa:72:f9:a2:0b:3a:9d:73:dd:a6:0f:95:c9:5c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c3:5d:bd:a4:75:73:f3:48:fe:b4:00:c9:b5:dc:60:78:a4:8f:35:66
Fingerprint (sha256): 07:06:3c:aa:fd:8d:79:35:0d:23:43:36:8b:f7:62:bf:8f:28:c1:f8:2d:19:b6:84:12:ba:c3:d8:a1:60:1e:a9

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate emm.rrn.fgov.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for emm.rrn.fgov.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

emm.rrn.fgov.be
www.emm.rrn.fgov.be

Other certificates including the domain name fgov.be

(limited to 100 certificates)
kruispuntbank.fgov.be
eservices.minfin.fgov.be
dabs-acc.ext.wss.just.fgov.be
bpp.economie.fgov.be
www.business.belgium.be
minfin.be
eolf.economie.fgov.be
cap.mobilit.fgov.be
wwwacc.capac-hvw.fgov.be
ilite.wss.just.fgov.be
air.mobilit.fgov.be
justsignal-acc.client.just.fgov.be
www.rsvz.fgov.be
webdwtc01.rrn.fgov.be
jft-acc.wss.just.fgov.be
www.capac-hvw.fgov.be
www.incc.fgov.be
sdvampf001.intra.just.fgov.be
spvwebtpi001.intra.just.fgov.be
webdwtc01.rrn.fgov.be
portal.health.fgov.be
HVB-Liege.just.fgov.be
apptst.riziv.fgov.be
moncomptedevacances.be
*.ehealth-09.paas.cloud.ehealth.fgov.be
www.ehealth.fgov.be
natgw-eessi.ksz-bcss.fgov.be
wahlen.fgov.be
c-b2b.SPFETCS-FODWASO.fgov.be
www.likiv.fgov.be
www.capac-hvw.fgov.be
appsoc.caami-hziv.fgov.be
bibforum.fgov.be
*.statbel.fgov.be
appsoc.caami-hziv.fgov.be
ccff02.minfin.fgov.be
handicap.belgium.be
news.sfpd.fgov.be
ede.onssrszlss.fgov.be
hbca.client.just.fgov.be
savdiv000.intra.just.fgov.be
eucertificates.economie.fgov.be
handicap.belgium.be
residencepalace.be
archi.ccecrb.fgov.be
auth-signing.sigedis.fgov.be
premier.be
www.mybenefits.fgov.be
auth.minfin.fgov.be
www.rsvz.be
vsp.smals.be
forfaitdebase.economie.fgov.be
login.dev.mobilit.fgov.be
mailings.ibz.fgov.be
FODJ-STS-Token-Signing-2018.just.fgov.be
bel1fedlaeaacc01.fed.oncsfm.com
meldpunt.belgie.be
ibz.be
telework.just.fgov.be
circa.health.fgov.be
PAUTH.riziv.fgov.be
e.koba.be
accreditation-new.belgium.be
b2b-tst.rsvz-inasti.fgov.be
stvjira000.intra.just.fgov.be
spvnpsradius001.intra.just.fgov.be
auth.meta.fgov.be
ede.onssrszlss.fgov.be
emm.rrn.fgov.be
*.vpn2.fanc.fgov.be
kce.fgov.be
savelasticb000.intra.just.fgov.be
appsoc.caami-hziv.fgov.be
rsvz-inasti.fgov.be
adldsacc.integration.just.fgov.be
spvxwiki000.intra.just.fgov.be
bgcturn.intra.just.fgov.be
biblio.intra.just.fgov.be
arttiepe.intra.just.fgov.be
www.sigedis.fgov.be
fgov.be
www.riziv.fgov.be
savsdstatbe000.intra.just.fgov.be
viewportal.integration.just.fgov.be
www.decroo.belgie.be
bel1fedlaeaacc01.fed.oncsfm.com
www.capac-hvw.fgov.be
HVB-Mons-test.just.fgov.be
nrmobility.mobilit.fgov.be
infradocs.just.fgov.be
ccff02.minfin.fgov.be
test.ehealthplatform.info
www.caami-hziv.fgov.be
ibz.be
acc-cjcsr.just.fgov.be
www.webapp.rrn.fgov.be
*.apps-acc.mobilit.fgov.be
casfactory-dev.intra.just.fgov.be
enigloket.acc.mobilit.fgov.be
DAC-X3.rsvz-inasti.fgov.be

Certificate

The complete raw certificate details for emm.rrn.fgov.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHfjCCBWagAwIBAgIQYxBKLqFg2+W4o9N30/9obTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwNDE2MDAwMDAwWhcNMjMwNDE2MjM1
OTU5WjB3MQswCQYDVQQGEwJCRTEnMCUGA1UECBMeQnJ1c3NlbHMgSG9vZmRzdGVk
ZWxpamsgR2V3ZXN0MSUwIwYDVQQKExxBRCBJbnN0ZWxsaW5nZW4gZW4gQmV2b2xr
aW5nMRgwFgYDVQQDEw9lbW0ucnJuLmZnb3YuYmUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCp+8yoSo/BktB2ik8NzbCe9z8WXdpKQ0Vxgjs0cnqaIAxF
q3fZk0jui2qcKpxEUf1HHsGhbFip4xpvveqmhLmEuaJ2X6BuvQDNcZIInh16oHrB
xZhU6cZSjlZt6YCPoRyTJESuTZfE70kBUuUApgUE4/AGLh5se3uwfnxGtc3ehCne
jLf46TaToa6BYnVtBvClj5G0HdZHBgtdd77Xm1O3fgJUJ7AvMtu68qy8B7w09WSn
MUAq8T8E26tcOd6n/mFzSKdcY+KTqfEOUeXG7NIvVAcA216RpOnRM42VFgeTqNNr
wuueuocGWnJc1B+aV8g+kinzABz8QOENNWa2WjypAgMBAAGjggM3MIIDMzAfBgNV
HSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQU0ytKoOwl+nL5
ogs6nXPdpg+VyVwwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQEC
Ak8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EM
AQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2VjdGlnby5j
b20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsGAQUFBzAC
hi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3J0
MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdvLmNvbTAvBgNV
HREEKDAmgg9lbW0ucnJuLmZnb3YuYmWCE3d3dy5lbW0ucnJuLmZnb3YuYmUwggF+
BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EM
JMqFhjTr3IKKAAABgC+vtjAAAAQDAEcwRQIhANJz3dzBt0pamHbFjbiTmuNPEfo8
a5JG5uqr0wjSVN6QAiACvH/z9O/HPw3cKnyzVQeHSFvOzRr6jvwt4p0biUtILgB2
AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABgC+vtfcAAAQDAEcw
RQIhAM8Or0vmD24DEWWQmhu8juhgGpaV/O3YKzdMp43bfrNpAiB0cU2TyWuwB+fv
Y6KkA//OsC0DoE+S3jyaD/fUlRm2tAB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs
62nhd31tBr1uAAABgC+vtcwAAAQDAEcwRQIgQq/2f71H9fIk0iQPiClQHVZKkm+G
eHE0ndtvxJ5mhlECIQCow/uv4o20IMUyxJ/y80G+nUY1jnI4nTPkprwP11LaFTAN
BgkqhkiG9w0BAQwFAAOCAgEAUS2h6N5F8WNCvBPPcEWsKgV1qksrQCpbg/wKALkS
l873DiKtQRCtk8G4sg0ZCS7W2uHSRG/2sAwKRyolz5LVzpdtbrQI2Cr9S+9k/sVb
PX0+JRTBbEOh3h3EqZaP1gxi1J7408gi9ER6Wox/5mMXVzgg34BhKuZxtEK4rWGj
c9V36OKj34wTmibVWj2H9Codi8mlyoEmfCDk5RTzNJ09YXaYt0P2978YNXkXLE8c
+lOcbd8QOkqMvdniPf2cxZPjx69qn0xUBkGDaMGuVp9GXl55Zo1rDw2bInZVRMvD
z0onAu5z5bqD4H8zYrISDtZdinWZgerGFg5Uhauy+QgLPAov8+OB+E4d8s8VSqIq
ORUmfAXWn6r57eVCRL00ddWsfomNeTHSvnr4wUt1FHoNc8qNHxrCUhGkvMMc56X2
le0b4BpAGeruFfUmF3EuJyxOpaS7z+Y26h4CWgmFVsSzgOkHYS6i7XZBCW0BzFPS
OkMikPomCxHBvcpY3Otp1pNPiNyn/FGRUEVzqMYr6ojmIppfYYBSH5UpBdHnqc1e
hIzNHmUSkKwG2eIwisol/VzyZOljc+n6sxi8N1oVhKHVq52byZQsjoAcQ5UG79fw
vqgSKpz35eESUeXP8k2JpqIcrcUX53+FXkVNMsjk4MnYuSacd4wkVngRqHVlJT7m
V+8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfvMqEqPwZLQdopPDc2w
nvc/Fl3aSkNFcYI7NHJ6miAMRat32ZNI7otqnCqcRFH9Rx7BoWxYqeMab73qpoS5
hLmidl+gbr0AzXGSCJ4deqB6wcWYVOnGUo5WbemAj6EckyRErk2XxO9JAVLlAKYF
BOPwBi4ebHt7sH58RrXN3oQp3oy3+Ok2k6GugWJ1bQbwpY+RtB3WRwYLXXe+15tT
t34CVCewLzLbuvKsvAe8NPVkpzFAKvE/BNurXDnep/5hc0inXGPik6nxDlHlxuzS
L1QHANtekaTp0TONlRYHk6jTa8LrnrqHBlpyXNQfmlfIPpIp8wAc/EDhDTVmtlo8
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131678152925193556435092700341683054701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels Hoofdstedelijk Gewest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AD Instellingen en Bevolking'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'emm.rrn.fgov.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21458440472333113116509028030957324717654532010307935571578045445962314303372226733943066559598428414103573873596806063384148017507954242220980156010740311058879784274741404058426199386333831297048558818589375887403820025415255322455703798774650921272100518639898925338927572209442697658467794759512061406820325861530007506937278412589922025802507989291832684619473232017700955581002421576403309053526614453233684139057504373892357489129334100171961517703058951331438781790470317885521120158952287739162740562745669856853947646800792410917713902377112717081337470944372867898322592043402955343197933686090044439936169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d32b4aa0ec25fa72f9a20b3a9d73dda60f95c95c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emm.rrn.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emm.rrn.fgov.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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