VPNAO-DEV.minfin.be

- Federal Public Service Finance -

Issued by QuoVadis Europe SSL CA G1

About this certificate

This digital certificate with serial number 58:de:d4:28:a1:fd:a1:04:6d:22:48:c6:07:04:64:96:7e:33:c1:11 was issued on by QuoVadis Trustlink BVBA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Public Service Finance

Organization: Federal Public Service Finance
State / Province: Brussel-Hoofdstad
Locality: Schaarbeek
Country: BE

QuoVadis Trustlink BVBA

Organization: QuoVadis Trustlink BVBA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 58:de:d4:28:a1:fd:a1:04:6d:22:48:c6:07:04:64:96:7e:33:c1:11
Serial Number (int): 507360434897806510724980131619697059361801355537
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f1:6d:62:a9:fc:cb:a2:87:3c:bb:76:47:df:f3:9a:93:52:31:13:08
AuthorityKeyId: 42:d3:87:73:e1:9e:d3:3e:5c:fe:b0:70:bb:ca:de:21:ba:24:79:36

Fingerprint (sha1): 78:dc:4a:d6:73:02:3e:b8:2d:a5:18:d4:bc:8c:4c:64:41:d8:d1:55
Fingerprint (sha256): 25:a4:75:0b:f5:c6:cd:aa:99:55:b9:3f:e3:eb:cd:aa:bf:4a:32:87:44:00:65:a6:8c:68:87:f5:b7:ae:3f:39

Issuing Certificate URL: http://trust.quovadisglobal.com/qveussl1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qveussl1.crl

Check the revocation status for certificate VPNAO-DEV.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for VPNAO-DEV.minfin.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

VPNAO-DEV.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for VPNAO-DEV.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLzCCBBegAwIBAgIUWN7UKKH9oQRtIkjGBwRkln4zwREwDQYJKoZIhvcNAQEL
BQAwUzELMAkGA1UEBhMCQkUxIDAeBgNVBAoTF1F1b1ZhZGlzIFRydXN0bGluayBC
VkJBMSIwIAYDVQQDExlRdW9WYWRpcyBFdXJvcGUgU1NMIENBIEcxMB4XDTE4MDcx
MzE0MDI1NloXDTIwMDcxMzE0MTIwMFowgYUxCzAJBgNVBAYTAkJFMRowGAYDVQQI
DBFCcnVzc2VsLUhvb2Zkc3RhZDETMBEGA1UEBwwKU2NoYWFyYmVlazEnMCUGA1UE
CgweRmVkZXJhbCBQdWJsaWMgU2VydmljZSBGaW5hbmNlMRwwGgYDVQQDDBNWUE5B
Ty1ERVYubWluZmluLmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
+Wa46R8Og5toLgpIajkzPdB8g0qf21MUU6pR+ecwvV+YPl5QAo+90I8yIvJTeV25
tVE3I9dfW6oIo5qx+ak9B4lMyRsVazo/Ypl75sXOrOkBWKxloVSRBls9l4H8GiCg
Y9hLZWOaWmkgD0c7884k85gZD/uKK91yb0479ydUCGSjhwn8mHejLeasAvAIggML
xIWflsiz4MDGMDnxnj5Q8PcNFJs3fWpO4wF39N5Dxyn3zx8JaC48OzUgx0Oaz3wS
+FEYAmJJ6UOvXR9wiogB+Uu+OpaEpmm48sgNYmcnWQfxZ4zn6b7DCnkab5Yy44tH
kHYOxam1N0e3seIr4UMLhQIDAQABo4IBxjCCAcIwdAYIKwYBBQUHAQEEaDBmMDgG
CCsGAQUFBzAChixodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2ZXVz
c2wxLmNydDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwu
Y29tMB0GA1UdDgQWBBTxbWKp/Muihzy7dkff85qTUjETCDAMBgNVHRMBAf8EAjAA
MB8GA1UdIwQYMBaAFELTh3PhntM+XP6wcLvK3iG6JHk2MFsGA1UdIARUMFIwRgYM
KwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNn
bG9iYWwuY29tL3JlcG9zaXRvcnkwCAYGZ4EMAQICMDsGA1UdHwQ0MDIwMKAuoCyG
Kmh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29tL3F2ZXVzc2wxLmNybDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMB4GA1Ud
EQQXMBWCE1ZQTkFPLURFVi5taW5maW4uYmUwEwYKKwYBBAHWeQIEAwEB/wQCBQAw
DQYJKoZIhvcNAQELBQADggIBADecgYtw8RxnpEYQBnmtPhx/icldWLbR6c4otps0
tvTPSqcnlWO7sYwEZoXe+NFc4ymDGgyHF+jT1kBlg8YiIlPNGzBaaPTFm/pjQfTQ
hF9WEiRuWTJkVqFE7IbtHmYtlMmNi94Up1/6vVWaAHE9DaKRMBQoK1Kx/fQrVX2y
On4FpBQxskki4nuBII/O1tokPwkAvmzWFeYqhrvOLIuNpVkSshbdYhetxymV/H8C
xqwSUylz42l7jsnQVxglHhiNZuhHFteBbZ+iHV3QkawzBBavFHjQH7IAn/Jbjoi9
JAhGKTPW0SuWWGcdIP+5YI4/ydzB5E76o/+uPND6pR+3MqRzhcMMJtPlcSnS0PqC
8Id8oxWi572X13YQPA8yXHidC/VwnTzq8P8n3V9iFMdBpC2MNc4VvlwP11ettnYB
EB+WYp0Ww3RfmN/GRR30LJF12wddCyg7AabMsRAfj6lyELz/94jvog9RSqPJsoAH
8h8ESgcHeNHl+IJQEbRkUHedGNzBoFAH58KSmnp+7Mwx9/qmPlWKkP+YnW6KDSdi
NwtWqbzd1aMPpDbVaZV5vUJrOmPZzAwNBbJV6yX5T0hbv+e0+H53Wn9IXUsZSHju
222GrYlbGZG7NjN4rS2wG+HNQHq19/3QqddyZmgJrAXiiifSOFU21DNGFTItGDqO
iI0T
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Wa46R8Og5toLgpIajkz
PdB8g0qf21MUU6pR+ecwvV+YPl5QAo+90I8yIvJTeV25tVE3I9dfW6oIo5qx+ak9
B4lMyRsVazo/Ypl75sXOrOkBWKxloVSRBls9l4H8GiCgY9hLZWOaWmkgD0c7884k
85gZD/uKK91yb0479ydUCGSjhwn8mHejLeasAvAIggMLxIWflsiz4MDGMDnxnj5Q
8PcNFJs3fWpO4wF39N5Dxyn3zx8JaC48OzUgx0Oaz3wS+FEYAmJJ6UOvXR9wiogB
+Uu+OpaEpmm48sgNYmcnWQfxZ4zn6b7DCnkab5Yy44tHkHYOxam1N0e3seIr4UML
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 507360434897806510724980131619697059361801355537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Trustlink BVBA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Europe SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 14:02:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-13 14:12:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brussel-Hoofdstad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schaarbeek'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Public Service Finance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VPNAO-DEV.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31483992194113790046939828703191897570722410824133337400162925748415165715692677163620320831876341560676765859821976240325273779521795590623642291605953301076642999626211805339876035717734623014546418930353597676266251550066452170523299045863783048365007577871039763735417461739975823925370629629608899613078678981770039957120097661599316684933004631103832503292055519113804259966103281685278073962174004131744988865135438327774992685457925058552933079594642019505459843425356786067838764898043295194392778739915127537112177633544873915099771568270367460130655735847405447364454124644580114166121204593380748282760069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qveussl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f16d62a9fccba2873cbb7647dff39a9352311308
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42d38773e19ed33e5cfeb070bbcade21ba247936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qveussl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'VPNAO-DEV.minfin.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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