scope.belgium.be

- Federale Overheidsdienst Beleid en Ondersteuning -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 23:18:9d:3b:ad:11:b4:11:3e:c9:a8:65:76:55:b9:15 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Beleid en Ondersteuning

Organization: Federale Overheidsdienst Beleid en Ondersteuning
State / Province: Brussels Hoofdstedelijk Gewest
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 23:18:9d:3b:ad:11:b4:11:3e:c9:a8:65:76:55:b9:15
Serial Number (int): 46650784043408561850682500588217153813
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d1:fd:29:72:6b:c2:5b:cd:76:46:71:2b:27:7b:fa:91:0a:5a:1d:37
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): fb:24:ec:95:3c:2d:7b:02:3d:b1:f2:5a:c1:4e:c2:bd:76:62:e2:23
Fingerprint (sha256): 07:5f:bf:fc:bf:61:8a:bd:8f:cb:b1:fa:cd:e4:15:32:65:81:2b:0e:7d:33:5e:30:b7:55:c1:42:5a:9d:2e:49

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate scope.belgium.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scope.belgium.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scope.belgium.be

Other certificates including the domain name belgium.be

(limited to 100 certificates)
www.venezuela.diplomatie.belgium.be
16-loi.be
www.australie.diplomatie.belgium.be
www.business.belgium.be
5226.web01.f2w.blue4you.be
www.koeweit.diplomatie.belgium.be
wtsvcvic099a.services.gcloud.belgium.be
rma-help.fedict.belgium.be
*.spaas.gcloud.belgium.be
www.japon.diplomatie.belgium.be
2014.jaarverslag.financien.belgium.be
fedict.be
digiflow-mm.ta.belgium.be
support.eloket.belgium.be
www.bulgarije.diplomatie.belgium.be
www.griekenland.diplomatie.belgium.be
*.ta.belgium.be
finances.belgium.be
consular.diplomatie.be
www.jordanie.diplomatie.belgium.be
www.ierland.diplomatie.belgium.be
www.panama.diplomatie.belgium.be
*.adriatic.belgium.be
www.zweden.diplomatie.belgium.be
www.portugal.diplomatie.belgium.be
2013.jaarverslag.financien.belgium.be
bienarrondir.belgium.be
www.verenigdestaten.diplomatie.belgium.be
*.belgium.be
organesdeconcertation.sante.belgique.be
www.evenements.emploi.belgique.be
*.infocenter.belgium.be
www.chili.diplomatie.belgium.be
www.mozambique.diplomatie.belgium.be
finshop.belgium.be
www.ofoifa.belgium.be
bibforum.fgov.be
www.ofoifa.belgium.be
www.oeganda.diplomatie.belgium.be
*.services.belgium.be
www.maleisie.diplomatie.belgium.be
myhandicap.belgium.be
www.mozambique.diplomatie.belgium.be
*.decroo-i.archive.belgium.be
handicap.belgium.be
www.inde.diplomatie.belgium.be
www.duurzaamevenement.belgium.be
premier.michel.archive.belgium.be
www.zuid-afrika.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.saoedi-arabie.diplomatie.belgium.be
www.kosovo.diplomatie.belgium.be
panorama.belgium.be
complaints.p-o.belgium.be
handicap.belgium.be
residencepalace.be
smp.belgium.be
wahl2003.belgium.be
eIDAS-M.iamfas.belgium.be
premier.be
www.koeweit.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
rapport.mobilit.belgium.be
www.qatar.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.spfeconomie2018.belgium.be
www.diplomatie.be
www.vaticaanstad.diplomatie.belgium.be
meldpunt.belgie.be
www.ivoorkust.diplomatie.belgium.be
bienarrondir.belgium.be
cass.justice.belgium.be
www.jamaique.diplomatie.belgium.be
www.evenements.emploi.belgique.be
e.koba.be
belrai.org
cgra.belgium.be
accreditation-new.belgium.be
consular.diplomatie.be
www.turkije.diplomatie.belgium.be
www.venezuela.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
mailings.social.belgium.be
idp.iamfas.belgium.be
2014.jaarverslag.financien.belgium.be
www.kmteams.belgium.be
*.news.belgium.be
scope.belgium.be
*.spaas.gcloud.belgium.be
www.wellrounded.belgium.be
2018.jaarverslag.financien.belgium.be
certif.iamfas.qa.belgium.be
ibfp.be
www.italie.diplomatie.belgium.be
gutgerundet.belgium.be
webdiv.mobilit.belgium.be
www.ofoifa.belgium.be

Certificate

The complete raw certificate details for scope.belgium.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIfjCCBmagAwIBAgIQIxidO60RtBE+yahldlW5FTANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwODA1MDAwMDAwWhcNMjMwODA1MjM1
OTU5WjCBjDELMAkGA1UEBhMCQkUxJzAlBgNVBAgTHkJydXNzZWxzIEhvb2Zkc3Rl
ZGVsaWprIEdld2VzdDE5MDcGA1UEChMwRmVkZXJhbGUgT3ZlcmhlaWRzZGllbnN0
IEJlbGVpZCBlbiBPbmRlcnN0ZXVuaW5nMRkwFwYDVQQDExBzY29wZS5iZWxnaXVt
LmJlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqHQIM6d7G1SysWch
8pLVD+dJxA4A6M2RDpAOd/yRWudi2r8+fFZT5Jk3Zf6Z8Ik1AWb7iPz4/+Am4cXk
/ixtRBwi8XQn3KD5FKV4wdmP3Q3WC9emHQ8VD357jRN6XFKC5SS5Z2pawb8EyOYv
7QwycyNQ2qhQX6NCgTN8oP42CvOSBsdCkxtiHhvg5cyC2a/LeNNYrtyzcReQviBw
tXgz9VxgEN15UeEV/KZkK0D6vs8B3B+0ZHmTihjc/O8Zm83cgz5eYElqdTz+s7Cb
2LYrxUkZzVkzyjinys+gEMYRtDVrYyDVCWNocdoBeZkRK3oBfNWWMqGhZqjNJwZK
qcGBNNkp9Y0XsJXkBczXA5HKeEj1w5ti2zoFvmf2/i0bFlL2uRpmRBJS66Presg/
gKy6Pjivau8MwEEwkgJLkatK16Y937/+IzyiU3zhzgY3rjdbn0dMZRgp12Bq8qYy
jvv0J+EMGaBUK2JS7z3RiUKKs45JafvJFUm6esquzgNI+/l9Jd+ueQW6eMJgK2lI
Tpa7069cElMeE1inZjNpTnu55hV7FMZy3M+BLT3JgqOROx5yOOGUEM+vclRM78wA
+cLQQ62f6/0hC3R2h+S7mq2YE/7+fBgIGm3meoBBqBkyBOnGnPsTXh2wvFOWGGwp
2UZPuprhKdg1KfU7uAZZlrPFaJMCAwEAAaOCAyEwggMdMB8GA1UdIwQYMBaAFG8d
NUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBTR/Slya8JbzXZGcSsne/qRClod
NzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsG
AQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0f
BDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9W
UlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9H
RUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUH
MAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMIIBfAYKKwYBBAHWeQIE
AgSCAWwEggFoAWYAdQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAA
AYJtbmHFAAAEAwBGMEQCIAbbWndxVGHlVGpdpy2JfQaltMLXEiC8pSoPwmxe8QHt
AiBxRIk60FjCZN7FlqlK1OI+m9YHinIYoq3j9xrj2CkkXAB2AHoyjFTYty22IOo4
4FIe6YQWcDIThU070ivBOlejUutSAAABgm1uYZkAAAQDAEcwRQIgdeXWwwAss6EQ
qyBQI4jjFDpM54UnYlz1mF4nGL9M+sECIQC/3VZfRxTysijv5ZG3nqy/bmGRHa7N
M31aNqS59EtshAB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAAB
gm1uYWcAAAQDAEYwRAIgME02tX+GoVCzp4ysPt/ngTEmeeYSi2Z46mGSPYStBmIC
IAO/r929FpOn61YS82osqAZdGxDnb0kMJMfVHzGunsydMBsGA1UdEQQUMBKCEHNj
b3BlLmJlbGdpdW0uYmUwDQYJKoZIhvcNAQEMBQADggIBAJlbJFkMf4nsPtoEzz5S
GYagaVLvL/qRafAxM0HBo1Yx/sMVFMRGSZO1UNfoWhRkkFMGZWEyL60drKhbOfOr
6KEUDgxJUnPR2nrm7PqyOEUBqcvanQ2et6SRUX9Df8wkHKEp3Hg3f6u/7Y1om594
4YpRJ4CU9mtnJxmrSevZzNV6Tee1UmtA45BJ+sRTBfMRYp7Udz3TVSL2JZbUfi9H
sT45haNMPDGbY5Q5XbIW5geSUANsnXfEjv3FM4Ty6Vxq++mtkixuuhkqFIxI6AJP
jfmQWwhjC1aPusvcdPPPfcQsKX8Lnj5LzDVp2vDYphIt6LDqkaX+SViDu8oS/3UI
O3lSHVPQ+5yPFUfBCqYRqmpgZ2unJFsbo0f307fV5CCKLR5hxEXNfenG1YppbzQu
NZl0nVW4o46tQf2u++pSCLORP2Ob9dE3SvnDZ9g31QEHAQVD9RL+thgD1BCVJ/Bo
czW+U1kP0yMxmkFtsoBc+wVeedf2CS4gomYP581RSX4+TjZdQksb3le4A7g5oTlw
JjlTkBL717OZjuYMikz2KqusOaFNQq/yytQvXvD4XGNUZ862meTePZjg/qo9i9Lt
dtbq3yoY02bS5dMNypWFwOF2NTb9n7nrEO2iKz1pfd6jJ0zZoIJ3sMClPbKlaR/4
/tlcXi0zQQqrpG9SelbZSxQN
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 46650784043408561850682500588217153813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels Hoofdstedelijk Gewest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Beleid en Ondersteuning'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scope.belgium.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687229302709666159134199793828108738075950007762240093010386745431050071695704782656294840147407136178768242175231882170273496484325573337296025770637157846623124838658403119595654241006264861765900444937437246890803986533337171547737839298767040519462998849450099333890887434037950529008926057386177771478006719315516401955750053087260516287613811077057320858287153089572022868749807307199063605390831164048745464016268810310576561693953570545829130654094273030824666349282421301582597742673157033456656842531721988056386897617518420679231086605019853837801244553055250243979408147649240082402493889837897023852611537061979789308905427294524612669953917500173089067162374543327034046551404546615216471763825630687791682968758909139003531829608660847123574635934371553285604082332259581425676333080039265624968280490984483258503128042950344026615369804541776148287056596333958675925596321106594878202090804315859065689705125829369051119515820677363984443230732306953675408080320830517967905384716260426072603498449400762878737252703484346986224814449485043541682411711628624236878032406678248383877410452563482742906733540673519062985979050221689955355471084662417505577947710350022260951089645595212209048561836982119067110716303507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1fd29726bc25bcd7646712b277bfa910a5a1d37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001826d6e61c50000040300463044022006db5a77715461e5546a5da72d897d06a5b4c2d71220bca52a0fc26c5ef101ed02207144893ad058c264dec596a94ad4e23e9bd6078a7218a2ade3f71ae3d829245c0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001826d6e61990000040300473045022075e5d6c3002cb3a110ab20502388e3143a4ce78527625cf5985e2718bf4cfac1022100bfdd565f4714f2b228efe591b79eacbf6e61911daecd337d5a36a4b9f44b6c84007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001826d6e616700000403004630440220304d36b57f86a150b3a78cac3edfe781312679e6128b6678ea61923d84ad0662022003bfafddbd1693a7eb5612f36a2ca8065d1b10e76f490c24c7d51f31ae9ecc9d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scope.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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