rrn-sitran-test.minfin.be

- Service Public Federal Finances -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9a:45:82:b9:55:f3:f2:de:48:f4:a1:2c:98:e5:00:f1 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Service Public Federal Finances

Organization: Service Public Federal Finances
Organization unit: 0308357159
Address: Internal Postal Box 10
Address: Boulevard du Roi Albert II 33
Postal code: 1030
State / Province: Bruxelles-Capitale, Région de
Locality: Schaerbeek
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 9a:45:82:b9:55:f3:f2:de:48:f4:a1:2c:98:e5:00:f1
Serial Number (int): 205062031231175629111716187904873398513
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: eb:30:d6:f0:32:5f:dd:eb:93:d3:92:cc:a7:c5:c2:74:3d:cf:78:da
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): fc:4b:0d:0d:a1:c9:b0:cf:7c:fd:16:88:7c:8e:76:6e:de:db:ea:61
Fingerprint (sha256): 09:72:ef:62:dd:e6:1b:c0:d2:d1:c4:b7:c1:c1:f6:b1:55:47:9f:bd:90:3e:b9:c6:5e:cf:69:ea:3f:a7:6f:75

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate rrn-sitran-test.minfin.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rrn-sitran-test.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rrn-sitran-test.minfin.be
www.rrn-sitran-test.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for rrn-sitran-test.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAma71/Gl4mqj/69IEI0G6
wIQ0Xk1uX96KltdEhQVMfYYfRm4P5xOYQwwMuHJSNMntu8gtQf35QfkY4xo76B0b
pFf5L+KfmrEa81qmC8zWD4omrON9wDxZ73vl6tKxVIMJUBJQMd75aoof3qdb2AS1
EfYA5TuH65JM3koKyodtQKa0snr4Q5V6md0pJ/pD3VwFmclBqYkIlWJ2KOeauAMO
VD1DG0x3K2tqZr7ovhsvnrigGNPPYprRKsIzq4BLBSnAzM6+eSqHhfqSp+modvo/
/nxwxNDDqVNmvzuRq9easxcxM+4Vsy+R/G877aJeVcRX+QvG7BNEmM54bL3vICkO
Py52QPbrp/FYHmA8P1BjqJW4eeNImbv66eqmnL28vl3tdMxmewCMuLklr8jK+nze
X1q8POwhjwizOVvCbfZEMfDDo9lO2uJP4TiaWLNnOPiAkZWRzuDUG6pOxABKhI0c
F/kO22AO49ogf5ciJoFMXyE0+J0Ks5QCGZtkgC4dRjz2gmKAgXlKEAhbbR5awqvL
A5QBvtbvAWWUAW3zgfGZ8bYRnjEg/gy0Lu9evS1VNh8F25iair5BR67ZLacXmjxo
CQg61dUQFaIcE2bB48UBFMqRu/EGzw3/Wne9aktXId9/6qP4X+irHqzGFEIrXL8A
HqKAslJ90qXPRePNBrJVrxUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 205062031231175629111716187904873398513
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schaerbeek'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internal Postal Box 10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boulevard du Roi Albert II 33'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0308357159'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rrn-sitran-test.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 626973738217440217151092640104671187010992935134272912709186764425415681229787787442020348868427268381489715896871236224527278398080602801904728728702680757201809886003005231721476934658477549010220604208364755042897464641975165114378504386204378722310715471482755673764615884851704500531283186945040729231584636779767837722412777499985706090519369130206226588703659388391727774251946200804873734121275584182402292296490673245267294286822285653086003478060744579335733686252751370518972063806350106889996644734365985307472401982489045476149174491830249497474252239531987716544760927217904266429382944991486071764836778931899463479267663949470933251626397477990516213762487213126701127249527949342173273855910562068526559479905874945853296444676324341386222424976270120769662726786381788619133418955353185556325444181631107898327924663153021459562648024777653167663492329847042653849066559534865199317074488637150905230009346615154618039101101596787320527313303798265692312821791398314904045871403258165712810310271325483775980464882314784905437656634379887524539084429830409625998823488370425536209819426814203703903486720530012953682377792414347408405793260933308156094164509047069585982867614096014592302132557843688470511795678997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb30d6f0325fddeb93d392cca7c5c2743dcf78da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrn-sitran-test.minfin.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rrn-sitran-test.minfin.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017471f25d150000040300473045022100c70ac6fd003c21cb42f11039dc99c7fc2aa306020d449bca096822c61979bb7502206a9ef16fd343a811cded390d1ec8c0871458d7f66a1227db85f2472908dd4d290077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017471f25da50000040300483046022100b093912455d928590499eb6670d56976c56d374a6800d5f26b3cab6245fd31f2022100e543d06f357fdc049a7728c5109c206929a4b4fdf8dd7fe56d41834ce83cb4a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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