kinepolis.megatix.be

Issued by R3

About this certificate

This digital certificate with serial number 04:f4:21:cf:5e:28:cd:4a:06:30:0d:42:39:70:bb:04:06:8b was issued on by Let's Encrypt.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kinepolis.megatix.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f4:21:cf:5e:28:cd:4a:06:30:0d:42:39:70:bb:04:06:8b
Serial Number (int): 431522982494839753765256152247625601779339
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bd:f1:e7:de:f7:ce:22:2d:dd:46:d1:7c:d0:12:06:36:82:1e:70:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:98:8a:c0:69:77:bc:63:d2:03:7c:f5:90:d8:9b:58:7b:72:bd:9a
Fingerprint (sha256): 25:0a:61:1c:a0:0e:d8:41:10:36:c8:e4:1b:53:66:5b:90:2a:47:df:a4:33:e8:c4:04:de:db:ae:5b:81:ad:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kinepolis.megatix.be

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kinepolis.megatix.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atv.brightfish.be
atv.kinepolis.com
bookingapi-kinepolis.megatix.be
bookingapi.kinepolis.megatix.be
cera.megatix.be
cms-kinepolis.megatix.be
cms.kinepolis.megatix.be
full.megatix.be
kinepolis.megatix.be
luxfilmfestfilms.megatix.be
luxfilmfestpass.megatix.be
luxfilmfestproducts.megatix.be
luxfilmfesttickets.megatix.be
movieapi-kinepolis.megatix.be
movieapi.kinepolis.megatix.be
ontour.kinepolis.be
ontourtickets.kinepolis.be
prive.kinepolis.be
prive.kinepolis.ch
prive.kinepolis.es
prive.kinepolis.fr
prive.kinepolis.lu
prive.kinepolis.nl
privetickets.kinepolis.be
privetickets.kinepolis.ch
privetickets.kinepolis.es
privetickets.kinepolis.fr
privetickets.kinepolis.lu
privetickets.kinepolis.nl
prod-bookingapi-kinepolis.megatix.be
prod-kinepolis.megatix.be
prod-klub.megatix.be
prod-tmf.megatix.be
proximus.megatix.be
tickets.fullcinemas.com
tickets.kinepolis.be
tickets.kinepolis.ch
tickets.kinepolis.es
tickets.kinepolis.fr
tickets.kinepolis.lu
tickets.kinepolis.nl
tickets.klubcinema.fr
umbracoapi-kinepolis.megatix.be
umbracoapi.kinepolis.megatix.be

Other certificates including the domain name megatix.be

(limited to 100 certificates)
kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
*.megatix.be
stage-kinepolis.megatix.be
*.megatix.be
www.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
www.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
bookingapi.kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
*.megatix.be
bookingapi.kinepolis.megatix.be
stage-kinepolis.megatix.be
www.megatix.be
stage-kinepolis.megatix.be
*.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
bookingapi.kinepolis.megatix.be
stage-kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
*.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
bookingapi.kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
stage-kinepolis.megatix.be
*.megatix.be
stage-kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
www.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
stage-kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
*.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
kinepolis.megatix.be
stage-kinepolis.megatix.be
kinepolis.megatix.be

Certificate

The complete raw certificate details for kinepolis.megatix.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIdzCCB1+gAwIBAgISBPQhz14ozUoGMA1COXC7BAaLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAyMTkxMjM5NTdaFw0yMTA1MjAxMjM5NTdaMB8xHTAbBgNVBAMT
FGtpbmVwb2xpcy5tZWdhdGl4LmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmcpEZpCssWFi6QpGgqdpJO9j4ne8Y2iCX7ICsTrUT7hVRG60cGb/jNLe
h/2ZVQhMxqEUSb7zeyBsOiqeQPWQbkeyYr1y7nry+Inbw7d2eUd3/Pto/R3wi2BH
D8Uy/inQCLXiy7s7wvUKFRlLqtG0X9TiDd0XZvsUJAjrmZB/IhK4K6iyBpCaTfrm
A6vDuxoXb5KGXrTF6cziEL8iQfCDxQSLmOg26/WofH1h1e4U+bfyzBlm7trF4O31
WuAas8NaPuJK8yyHRiYhqJCW6/wFxRwlhooPbpwB7ptb5IRDFbNtIQHuWMfwHh7k
1VEOrHSwldbQ0LfcmDEG7Og6bln4CwIDAQABo4IFmDCCBZQwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBS98efe984iLd1G0XzQEgY2gh5wojAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCBFkGA1UdEQSCBFAwggRMghFhdHYuYnJpZ2h0ZmlzaC5iZYIRYXR2
LmtpbmVwb2xpcy5jb22CH2Jvb2tpbmdhcGkta2luZXBvbGlzLm1lZ2F0aXguYmWC
H2Jvb2tpbmdhcGkua2luZXBvbGlzLm1lZ2F0aXguYmWCD2NlcmEubWVnYXRpeC5i
ZYIYY21zLWtpbmVwb2xpcy5tZWdhdGl4LmJlghhjbXMua2luZXBvbGlzLm1lZ2F0
aXguYmWCD2Z1bGwubWVnYXRpeC5iZYIUa2luZXBvbGlzLm1lZ2F0aXguYmWCG2x1
eGZpbG1mZXN0ZmlsbXMubWVnYXRpeC5iZYIabHV4ZmlsbWZlc3RwYXNzLm1lZ2F0
aXguYmWCHmx1eGZpbG1mZXN0cHJvZHVjdHMubWVnYXRpeC5iZYIdbHV4ZmlsbWZl
c3R0aWNrZXRzLm1lZ2F0aXguYmWCHW1vdmllYXBpLWtpbmVwb2xpcy5tZWdhdGl4
LmJlgh1tb3ZpZWFwaS5raW5lcG9saXMubWVnYXRpeC5iZYITb250b3VyLmtpbmVw
b2xpcy5iZYIab250b3VydGlja2V0cy5raW5lcG9saXMuYmWCEnByaXZlLmtpbmVw
b2xpcy5iZYIScHJpdmUua2luZXBvbGlzLmNoghJwcml2ZS5raW5lcG9saXMuZXOC
EnByaXZlLmtpbmVwb2xpcy5mcoIScHJpdmUua2luZXBvbGlzLmx1ghJwcml2ZS5r
aW5lcG9saXMubmyCGXByaXZldGlja2V0cy5raW5lcG9saXMuYmWCGXByaXZldGlj
a2V0cy5raW5lcG9saXMuY2iCGXByaXZldGlja2V0cy5raW5lcG9saXMuZXOCGXBy
aXZldGlja2V0cy5raW5lcG9saXMuZnKCGXByaXZldGlja2V0cy5raW5lcG9saXMu
bHWCGXByaXZldGlja2V0cy5raW5lcG9saXMubmyCJHByb2QtYm9va2luZ2FwaS1r
aW5lcG9saXMubWVnYXRpeC5iZYIZcHJvZC1raW5lcG9saXMubWVnYXRpeC5iZYIU
cHJvZC1rbHViLm1lZ2F0aXguYmWCE3Byb2QtdG1mLm1lZ2F0aXguYmWCE3Byb3hp
bXVzLm1lZ2F0aXguYmWCF3RpY2tldHMuZnVsbGNpbmVtYXMuY29tghR0aWNrZXRz
LmtpbmVwb2xpcy5iZYIUdGlja2V0cy5raW5lcG9saXMuY2iCFHRpY2tldHMua2lu
ZXBvbGlzLmVzghR0aWNrZXRzLmtpbmVwb2xpcy5mcoIUdGlja2V0cy5raW5lcG9s
aXMubHWCFHRpY2tldHMua2luZXBvbGlzLm5sghV0aWNrZXRzLmtsdWJjaW5lbWEu
ZnKCH3VtYnJhY29hcGkta2luZXBvbGlzLm1lZ2F0aXguYmWCH3VtYnJhY29hcGku
a2luZXBvbGlzLm1lZ2F0aXguYmUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKa5mVA5
eLds7tF0oMI5DiJIvFUARz/jEAqvVM8GvDIyBTjntNriaAvyA5F17lgqg9o9HAwh
Eq/bNwKui3jShd0FpgywwAXkryoHy6Q9sJ/TmuGWhCMIFoFxNbxlpIQGRW11Me4m
RtaM6AFRAiXgI2IgUiK7r7VeexYJagzyR2ULENLgpSDSG/oJiQQbRLSPsKoCiLyT
q7lVquD7I+ltOEoUj8zhXZP31ifdK7z/h7EgYJOZP8K4bJU6M1YIttSQFpbieptf
R19PtNOaMw2RZgJ5ylC9IDjvdYBX+9EdDFgMEnSN5kKmN1wp1zU2Wi36HwwvQXwD
luxx+Lb2i1qmilc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcpEZpCssWFi6QpGgqdp
JO9j4ne8Y2iCX7ICsTrUT7hVRG60cGb/jNLeh/2ZVQhMxqEUSb7zeyBsOiqeQPWQ
bkeyYr1y7nry+Inbw7d2eUd3/Pto/R3wi2BHD8Uy/inQCLXiy7s7wvUKFRlLqtG0
X9TiDd0XZvsUJAjrmZB/IhK4K6iyBpCaTfrmA6vDuxoXb5KGXrTF6cziEL8iQfCD
xQSLmOg26/WofH1h1e4U+bfyzBlm7trF4O31WuAas8NaPuJK8yyHRiYhqJCW6/wF
xRwlhooPbpwB7ptb5IRDFbNtIQHuWMfwHh7k1VEOrHSwldbQ0LfcmDEG7Og6bln4
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431522982494839753765256152247625601779339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-19 12:39:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 12:39:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kinepolis.megatix.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19414202328628619094001548204412362025332052772017622107380961761679377597177667691651752470982324595692095191684872076883423790967475500830023094483288353106646058212048720617729675224361752757094264925475311734952817202590677205719972241019338749547260374566788696369198859638783402706781601546199613631400657264847785187647065725271651991279653841441350584816139101431143944860290943615418929364707244154062432699507019697265488708204941310358647410981782859403859046069881847008850587734111760786624401797644763471833392916161868389733156951661462550785330315608245283459122724388002183034647253402704116409038859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdf1e7def7ce222ddd46d17cd0120636821e70a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv.brightfish.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv.kinepolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookingapi-kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookingapi.kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cera.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'full.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxfilmfestfilms.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxfilmfestpass.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxfilmfestproducts.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxfilmfesttickets.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieapi-kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieapi.kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontour.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontourtickets.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.kinepolis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.kinepolis.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.kinepolis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privetickets.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privetickets.kinepolis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privetickets.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privetickets.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privetickets.kinepolis.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privetickets.kinepolis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-bookingapi-kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-klub.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-tmf.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proximus.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fullcinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kinepolis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kinepolis.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kinepolis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.klubcinema.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umbracoapi-kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umbracoapi.kinepolis.megatix.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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