bel1fedlaeaacc01.fed.oncsfm.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number c9:c9:51:5e:b2:fb:64:2c was issued on by GoDaddy.com, Inc..

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bel1fedlaeaacc01.fed.oncsfm.com,OU=Domain Control Validated

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c9:c9:51:5e:b2:fb:64:2c
Serial Number (int): 14540242339113952300
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: b3:3f:71:cb:d5:00:1e:fc:a1:dd:a4:51:d4:4f:f2:c8:a5:8c:73:16
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 3e:8e:f3:7a:bb:c7:2c:ed:40:4a:cb:22:7d:57:bb:e0:e1:1a:f5:1a
Fingerprint (sha256): 08:97:4c:f2:ec:36:35:ef:7d:58:ac:d6:50:5b:03:a3:f1:15:5a:a9:8b:63:f1:2e:05:73:fe:a8:62:69:2e:bd

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-1950.crl

Check the revocation status for certificate bel1fedlaeaacc01.fed.oncsfm.com

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bel1fedlaeaacc01.fed.oncsfm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bel1fedlaeaacc01.fed.oncsfm.com
www.bel1fedlaeaacc01.fed.oncsfm.com
sip.rvaonem.fgov.be
sip.onva-rjv.fgov.be
bel1fedlaedwcon01.fed.oncsfm.com
sip.meta.fgov.be
sip.fagg-afmps.be
bel2fedlaecacc01.fed.oncsfm.com
sip.buildingsagency.be
bel2fedlaebwcon01.fed.oncsfm.com
access.fed.oncsfm.com
sip.fedris.be
www.bel1fedlaebacc01.fed.oncsfm.com
sip.ksz-bcss.fgov.be
bel1fedlaebacc01.fed.oncsfm.com
sip.africamuseum.be
sip.famiwal.be
sip.mi-is.be
bel2fedlaecwcon01.fed.oncsfm.com
sip.health.fgov.be
bel2fedlaedacc01.fed.oncsfm.com
sip.minfin.fed.be
sip.fed.oncsfm.com
bel1fedlaeewcon01.fed.oncsfm.com
sip.economie.fgov.be
sip.bosa.fgov.be
sip.creg.be
bel1fedlaedacc01.fed.oncsfm.com
bel1fedlaebwcon01.fed.oncsfm.com
bel2fedlaeewcon01.fed.oncsfm.com
bel2fedlaebacc01.fed.oncsfm.com
sip.smals.be
sip.sigedis.fgov.be
bel1fedlaecacc01.fed.oncsfm.com
sip.riziv-inami.fgov.be
sip.caami-hziv.fgov.be
bel1fedlaeawcon01.fed.oncsfm.com
bel2fedlaeeacc01.fed.oncsfm.com
bel2fedlaedwcon01.fed.oncsfm.com
sip.ehealth.fgov.be
bel1fedlaeaeav01.fed.oncsfm.com
bel1fedlaeeacc01.fed.oncsfm.com
sip.sfpd.fgov.be
bel1fedlaecwcon01.fed.oncsfm.com
sip.minsoc.fed.be
sip.onssrszlss.fgov.be
sip.federaalombudsman.be

Other certificates including the domain name oncsfm.com

(limited to 100 certificates)
bel2fedlfeawebex01.fed.oncsfm.com
ap05scjlfeawebex01.scj.oncsfm.com
eu08scjlaeaacc01.scj.oncsfm.com
bel1fedgenucs.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
ap04scjowwebex01.scj.oncsfm.com
eu08scjlaeaacc01.scj.oncsfm.com
na09scjlfeawebex01.scj.oncsfm.com
fed.fbu.oncsfm.com
bel2fedgengax.fed.oncsfm.com
bel1fedgengax.fed.oncsfm.com
eu08scjlaeaacc01.scj.oncsfm.com
bel1fedowwebex01.fed.oncsfm.com
eu06scjowwebex01.scj.oncsfm.com
na09sollaeaacc01.sol.oncsfm.com
fed.sat.oncsfm.com
*.fed.oncsfm.com
eu08scjowwebex01.scj.oncsfm.com
ap05scjowwebex01.scj.oncsfm.com
na09sollfeawebex01.sol.oncsfm.com
bel2fedowwebex01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
*.qtc.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
*.scj.oncsfm.com
ap04scjlfeawebex01.scj.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
*.fed.oncsfm.com
na09sollfeawebex01.sol.oncsfm.com
fed.sol.oncsfm.com
eu08scjlfeawebex01.scj.oncsfm.com
na09solowwebex01.sol.oncsfm.com
na09scjlfeawebex01.scj.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
bel2fedowwebex01.fed.oncsfm.com
bel2fedlaeaacc01.fed.oncsfm.com
*.fed.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
na01l01webex01.l01.oncsfm.com
ap05scjlaeaacc01.scj.oncsfm.com
bel1fedowwebex01.fed.oncsfm.com
eu08scjlfeapool.scj.csfm.global
bel1fedlaeaacc01.fed.oncsfm.com
*.fed.oncsfm.com
bel1fedlaebacc01.fed.oncsfm.com
bel2fedlfeawebex01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
eu08scjlfeawebex01.scj.oncsfm.com
na09scjlfeawebex01.scj.oncsfm.com
*.scj.oncsfm.com
ap05scjlfeapool.scj.csfm.global
bel1fedlfeawebex01.fed.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
na12scjowwebex01.scj.oncsfm.com
na09sollaeaacc01.sol.oncsfm.com
na09scjowwebex01.scj.oncsfm.com
fed.sol.oncsfm.com
scj.oncsfm.com
eu06scjlfeawebex01.scj.oncsfm.com
*.fed.oncsfm.com
na09scjowwebex01.scj.oncsfm.com
ap05scjowwebex01.scj.oncsfm.com
bel2fedlaeaacc01.fed.oncsfm.com
sol.oncsfm.com
na09sollfeapool.sol.csfm.global
bel2fedgenucs.fed.oncsfm.com
ap03scjlfeapool.scj.csfm.global
fed.np1.oncsfm.com
ap03scjlaeaacc01.scj.oncsfm.com
*.fed.oncsfm.com
ap04scjlfeapool.scj.csfm.global
*.fed.oncsfm.com
*.z01.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
sol.oncsfm.com
na12scjlfeapool.scj.csfm.global
bel1fedlfeawebex01.fed.oncsfm.com
na12scjlaeaacc01.scj.oncsfm.com
*.fed.oncsfm.com
*.z01.oncsfm.com
na09scjlaeaacc01.scj.oncsfm.com
na09sollaeaacc01.sol.oncsfm.com
bel1fedowwebex01.fed.oncsfm.com
bel2fedowwebex01.fed.oncsfm.com
fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
bel1fedlaebacc01.fed.oncsfm.com
na12scjlfeawebex01.scj.oncsfm.com
na09sollfeawebex01.sol.oncsfm.com
ap03scjlfeawebex01.scj.oncsfm.com
fed.stn.oncsfm.com
*.z01.oncsfm.com
eu06scjowwebex01.scj.oncsfm.com
bel1fedlaebacc01.fed.oncsfm.com
eu06scjlfeapool.scj.csfm.global
ap05scjlfeawebex01.scj.oncsfm.com
eu06scjlaeaacc01.scj.oncsfm.com

Certificate

The complete raw certificate details for bel1fedlaeaacc01.fed.oncsfm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFGZC054y1gHlrvR/9zZ
dNZXXbf+nemeYNMVTxxXcPQbcewIRZjOwzSG8gF8sJiwHiqm3HRxtKEKM9QvrL4X
ndfE0EHdHwEtrt+g8ZaGrtv4YFELZdsaxaty0VjcdIcn1h25RH6vPj5FZEkdeeNO
YbUYmw0rDGVIVTfub+kc8jShesMsl19PYPQKRjlD/Yokj/pXmlJWw38zNTlW4GS9
00g3o68osy47pB9/+Y+eWnlP8zUQUaXrPUsVB1SENYkI2oxqIZwYm2ouvJ1fFSr4
VBz7wpQAV0iKBD+b1/9hika4wjTd5VoG5b1z5NgSajPshTu5n+ZkawfZh1XZPV3W
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14540242339113952300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 10:48:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-10 16:26:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bel1fedlaeaacc01.fed.oncsfm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20743319403470083695193603892380641422955178256613335470050135419875946254767105956692788308977914376734742004443072074189136927969031029845810761600909435638051468943047939260519964941482164077562426629178051174329317799353266649830880630507579679379766224894789993279927284197188984719867380194824618794435952030968843680895522615531841963086803408098690636248897068354874714534380144346494756847492207631502724541382226689944097687829420644534875729210232346949608079302073121215385112068125959252435081045038325340749422537611505664007249970964069945952728280090555882311732145914521090351228292963268919228749439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-1950.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeaacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bel1fedlaeaacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rvaonem.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.onva-rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaedwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.meta.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fagg-afmps.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaecacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.buildingsagency.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaebwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fedris.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bel1fedlaebacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ksz-bcss.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaebacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.africamuseum.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.famiwal.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mi-is.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaecwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.health.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaedacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minfin.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeewcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.economie.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bosa.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.creg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaedacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaebwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaeewcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaebacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.smals.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sigedis.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaecacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.riziv-inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.caami-hziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeawcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaeeacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaedwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ehealth.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeaeav01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeeacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sfpd.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaecwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minsoc.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.onssrszlss.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.federaalombudsman.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b33f71cbd5001efca1dda451d44ff2c8a58c7316
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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