ondvauth.riziv.fgov.be

- RIZIV-INAMI-LIKIV -

Issued by Government CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:45:2c:e9:1b:ea:48:a1:eb was issued on byGovernment CA.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RIZIV-INAMI-LIKIV

Organization: RIZIV-INAMI-LIKIV
Organization unit: ICT
State / Province: BRUSSELS
Locality: BRUSSELS
Country: BE

Government CA

Company registration number: 2011
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:45:2c:e9:1b:ea:48:a1:eb
Serial Number (int): 20282409603675101783214657151467
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: a9:c6:fa:c4:c8:cd:a1:7c:ff:b6:10:6c:c7:17:9e:8b:53:0f:3a:1f
AuthorityKeyId: c7:a3:46:99:ee:a8:b7:e8:7d:25:f9:9f:e9:9a:45:75:d4:ce:53:7a

Fingerprint (sha1): 73:ce:d7:39:63:b9:1f:6b:9e:fb:51:15:fb:60:8a:b3:19:3d:4d:e3
Fingerprint (sha256): 0b:7d:60:45:97:06:78:28:6a:e7:9a:a9:59:a3:8c:90:8d:95:83:c7:4a:19:aa:5a:60:ce:7f:cb:de:1d:26:0c

Issuing Certificate URL: http://certs.pki.belgium.be/belgiumrs2.crt

Revocation information

OCSP Server: http://ocsp.pki.belgium.be
CRL Distribution Point: http://crl.pki.belgium.be/government2011.crl

Check the revocation status for certificate ondvauth.riziv.fgov.be

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ondvauth.riziv.fgov.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ondvauth.inami.fgov.be
ondvauth.riziv.fgov.be
ondvsts.inami.fgov.be
ondvsts.riziv.fgov.be
ondvapp00.inami.fgov.be
ondvapp00.riziv.fgov.be
ondvapp01.inami.fgov.be
ondvapp01.riziv.fgov.be
ondvapp02.inami.fgov.be
ondvapp02.riziv.fgov.be
ondvapp03.inami.fgov.be
ondvapp03.riziv.fgov.be
ondvapp04.inami.fgov.be
ondvapp04.riziv.fgov.be
ondvapp05.inami.fgov.be
ondvapp05.riziv.fgov.be
ondvapp06.inami.fgov.be
ondvapp06.riziv.fgov.be
ondvapp07.inami.fgov.be
ondvapp07.riziv.fgov.be
ondvapp08.inami.fgov.be
ondvapp08.riziv.fgov.be
ondvapp09.inami.fgov.be
ondvapp09.riziv.fgov.be
ondvapp10.inami.fgov.be
ondvapp10.riziv.fgov.be
ondvapp11.inami.fgov.be
ondvapp11.riziv.fgov.be
ondvapp12.inami.fgov.be
ondvapp12.riziv.fgov.be
ondvapp13.inami.fgov.be
ondvapp13.riziv.fgov.be
ondvapp14.inami.fgov.be
ondvapp14.riziv.fgov.be
ondvapp15.inami.fgov.be
ondvapp15.riziv.fgov.be
ondvapp16.inami.fgov.be
ondvapp16.riziv.fgov.be
ondvapp17.inami.fgov.be
ondvapp17.riziv.fgov.be
ondvapp18.inami.fgov.be
ondvapp18.riziv.fgov.be
ondvapp19.inami.fgov.be
ondvapp19.riziv.fgov.be
ondvapp20.inami.fgov.be
ondvapp20.riziv.fgov.be

Other certificates including the domain name fgov.be

(limited to 100 certificates)
kruispuntbank.fgov.be
eservices.minfin.fgov.be
dabs-acc.ext.wss.just.fgov.be
bpp.economie.fgov.be
www.business.belgium.be
minfin.be
eolf.economie.fgov.be
cap.mobilit.fgov.be
wwwacc.capac-hvw.fgov.be
ilite.wss.just.fgov.be
air.mobilit.fgov.be
justsignal-acc.client.just.fgov.be
www.rsvz.fgov.be
webdwtc01.rrn.fgov.be
jft-acc.wss.just.fgov.be
www.capac-hvw.fgov.be
www.incc.fgov.be
sdvampf001.intra.just.fgov.be
spvwebtpi001.intra.just.fgov.be
webdwtc01.rrn.fgov.be
portal.health.fgov.be
HVB-Liege.just.fgov.be
apptst.riziv.fgov.be
moncomptedevacances.be
*.ehealth-09.paas.cloud.ehealth.fgov.be
www.ehealth.fgov.be
natgw-eessi.ksz-bcss.fgov.be
wahlen.fgov.be
c-b2b.SPFETCS-FODWASO.fgov.be
www.likiv.fgov.be
www.capac-hvw.fgov.be
appsoc.caami-hziv.fgov.be
bibforum.fgov.be
*.statbel.fgov.be
appsoc.caami-hziv.fgov.be
ccff02.minfin.fgov.be
handicap.belgium.be
news.sfpd.fgov.be
ede.onssrszlss.fgov.be
hbca.client.just.fgov.be
savdiv000.intra.just.fgov.be
eucertificates.economie.fgov.be
handicap.belgium.be
residencepalace.be
archi.ccecrb.fgov.be
auth-signing.sigedis.fgov.be
premier.be
www.mybenefits.fgov.be
auth.minfin.fgov.be
www.rsvz.be
vsp.smals.be
forfaitdebase.economie.fgov.be
login.dev.mobilit.fgov.be
mailings.ibz.fgov.be
FODJ-STS-Token-Signing-2018.just.fgov.be
bel1fedlaeaacc01.fed.oncsfm.com
meldpunt.belgie.be
ibz.be
telework.just.fgov.be
circa.health.fgov.be
PAUTH.riziv.fgov.be
e.koba.be
accreditation-new.belgium.be
b2b-tst.rsvz-inasti.fgov.be
stvjira000.intra.just.fgov.be
spvnpsradius001.intra.just.fgov.be
auth.meta.fgov.be
ede.onssrszlss.fgov.be
emm.rrn.fgov.be
*.vpn2.fanc.fgov.be
kce.fgov.be
savelasticb000.intra.just.fgov.be
appsoc.caami-hziv.fgov.be
rsvz-inasti.fgov.be
adldsacc.integration.just.fgov.be
spvxwiki000.intra.just.fgov.be
bgcturn.intra.just.fgov.be
biblio.intra.just.fgov.be
arttiepe.intra.just.fgov.be
www.sigedis.fgov.be
fgov.be
www.riziv.fgov.be
savsdstatbe000.intra.just.fgov.be
viewportal.integration.just.fgov.be
www.decroo.belgie.be
bel1fedlaeaacc01.fed.oncsfm.com
www.capac-hvw.fgov.be
HVB-Mons-test.just.fgov.be
nrmobility.mobilit.fgov.be
infradocs.just.fgov.be
ccff02.minfin.fgov.be
test.ehealthplatform.info
www.caami-hziv.fgov.be
ibz.be
acc-cjcsr.just.fgov.be
www.webapp.rrn.fgov.be
*.apps-acc.mobilit.fgov.be
casfactory-dev.intra.just.fgov.be
enigloket.acc.mobilit.fgov.be
DAC-X3.rsvz-inasti.fgov.be

Certificate

The complete raw certificate details for ondvauth.riziv.fgov.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51Jli4RUVTEDBxvx2HfO
AJ8slxMZiA1RNPAKRhW5mKtfOrl02bBj/5TO+q28EdQMyAu0OkFVm9xr18CjVh0v
NZVccyZDOJOIYyL9ctUx7j3wxXeT1Dra/I5TA1nFkNDq7VmLMk7+w6M2KommGoN4
jVAxXztlpaUYZPMTgeCxih9FRySnlptCGC7rGUOB5DMPN4rvLXR2pPA4CsDYz7Nm
3cPkURIQ8WZ0LsX32amag5BjBb3e01EDTiypuZthvdFcuEGrFgWhkeJDtee5AQth
/zH8JR0sT0xUY0Ji2H3HcHIcCC/b36YHKOAVJN53Se8XOFOC9FShujvTmhbNp28Q
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603675101783214657151467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2011'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-04 13:24:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 13:24:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ondvauth.riziv.fgov.be'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Servers&[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRUSSELS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRUSSELS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RIZIV-INAMI-LIKIV'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29201679754608919807621008498305728149964573465930124305068486011187944175932872949007242234867878628523116333205098584567368193857844391559776547253869650817420695575822731434492763542867743613437756501124966597167527458944489314157217903614960742874404410037473042445524580732600123416377773823154163273756904198283419837554079902983321714781838948231417725170457661900678310324922769004563693271724476776560553579722049878869168868988091692483793742286414808056451967403416153190225850392968342736346779180264887677292789931676358372204261610762624254176837219420416724718756521974660175534611630433953685638680827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c7a34699eea8b7e87d25f99fe99a4575d4ce537a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.pki.belgium.be/belgiumrs2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.belgium.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.56.9.1.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.pki.belgium.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.belgium.be/government2011.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							0560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9c6fac4c8cda17cffb6106cc7179e8b530f3a1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvauth.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvauth.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvsts.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvsts.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp00.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp00.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp01.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp01.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp02.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp02.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp03.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp03.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp04.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp04.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp05.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp05.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp06.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp06.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp07.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp07.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp08.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp08.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp09.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp09.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp10.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp10.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp11.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp11.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp12.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp12.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp13.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp13.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp14.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp14.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp15.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp15.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp16.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp16.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp17.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp17.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp18.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp18.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp19.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp19.riziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp20.inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondvapp20.riziv.fgov.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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