test-eservices.minfin.be
- 0308357159 -
Issued by Government CA
About this certificate
This digital certificate with serial number 01:00:00:00:00:01:4c:75:4c:d2:95:9d:04:1e was issued on byGovernment CA.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
- KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [emailProtection serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
- The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
0308357159
Organization:
0308357159
Organization unit: Federal Public Service Finances
Organization unit: Federal Public Service Finances
State / Province:
Brussels
Locality: Brussels
Country: BE
Locality: Brussels
Country: BE
Government CA
Company registration number: 201401
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 01:00:00:00:00:01:4c:75:4c:d2:95:9d:04:1eSerial Number (int): 20282409603675626562207455446046
Serial Number lenght: 105 bits, 14 octets
SubjectKeyId: 3d:70:51:ed:78:1e:6b:72:92:28:6b:9e:98:b0:8c:03:7c:76:f4:e3
AuthorityKeyId: 10:bd:02:30:7f:1d:89:ea:db:d2:b5:50:16:81:2d:1c:e4:23:e9:7b
Fingerprint (sha1): 58:64:79:8a:2b:ab:ce:01:65:5e:0e:3a:6d:fd:fd:3c:04:f0:4a:67
Fingerprint (sha256): 2b:c6:e2:6c:ea:56:7d:93:8a:a7:5c:38:a1:f4:dd:a2:d0:5c:1f:c1:58:77:97:c1:78:57:ba:fc:7f:76:f8:b5
Issuing Certificate URL: http://certs.pki.belgium.be/belgiumrs3.crt
Revocation information
OCSP Server: http://ocsp.pki.belgium.be/2CRL Distribution Point: http://crl.pki.belgium.be/government201401.crl
Check the revocation status for certificate test-eservices.minfin.be
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test-eservices.minfin.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Content Commitment
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Email Protection
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name minfin.be
(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
Certificate
The complete raw certificate details for test-eservices.minfin.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCjCCA/KgAwIBAgIOAQAAAAABTHVM0pWdBB4wDQYJKoZIhvcNAQEFBQAwNjEL MAkGA1UEBhMCQkUxFjAUBgNVBAMTDUdvdmVybm1lbnQgQ0ExDzANBgNVBAUTBjIw MTQwMTAeFw0xNTA0MDExNDEwMDZaFw0xNjA3MDExNDEwMDZaMIG/MSEwHwYDVQQD Exh0ZXN0LWVzZXJ2aWNlcy5taW5maW4uYmUxCzAJBgNVBAYTAkJFMSgwJgYJKoZI hvcNAQkBFhlzZXJ2aWNlZGVza0BtaW5maW4uZmVkLmJlMREwDwYDVQQHEwhCcnVz c2VsczERMA8GA1UECBMIQnJ1c3NlbHMxKDAmBgNVBAsTH0ZlZGVyYWwgUHVibGlj IFNlcnZpY2UgRmluYW5jZXMxEzARBgNVBAoTCjAzMDgzNTcxNTkwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMSCqcE89PLHuE9KZLqsBvOCx0KcZxNyC IepMuGWBZJb+r5gH5sk3ozABDqUEImgGFyDXfRpbAruFb/3zLZ+NzYl3WlgXUUBE iRyMD03JnflkBq7m1JSgt7z5jhwNvqkJF2GpBRtZNVAzS9Hp2yK5ktXMVAl0eerL gfDZegUvRHzIvDVBZGuGLVaHTy3rJYqOVvCQyopnHSLD3PWlYr613HPfQ+R4qX0J RQXMn5CWXAhG8b29QyWJ8ouWvNKzvpU0Z6i09gOV/G9Ic8jcqpoV7nNTTZiGWJsN hTvAghXZcLitlOm4XbuSGeiggHwTKa/EDZIsumcsZGasHux6FKfxAgMBAAGjggGK MIIBhjAfBgNVHSMEGDAWgBQQvQIwfx2J6tvStVAWgS0c5CPpezBwBggrBgEFBQcB AQRkMGIwNgYIKwYBBQUHMAKGKmh0dHA6Ly9jZXJ0cy5wa2kuYmVsZ2l1bS5iZS9i ZWxnaXVtcnMzLmNydDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AucGtpLmJlbGdp dW0uYmUvMjAJBgNVHRMEAjAAMEQGA1UdIAQ9MDswOQYHYDgKAQEDAjAuMCwGCCsG AQUFBwIBFiBodHRwOi8vcmVwb3NpdG9yeS5wa2kuYmVsZ2l1bS5iZTA/BgNVHR8E ODA2MDSgMqAwhi5odHRwOi8vY3JsLnBraS5iZWxnaXVtLmJlL2dvdmVybm1lbnQy MDE0MDEuY3JsMA4GA1UdDwEB/wQEAwIE8DARBglghkgBhvhCAQEEBAMCBWAwHQYD VR0OBBYEFD1wUe14HmtykihrnpiwjAN8dvTjMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDBDANBgkqhkiG9w0BAQUFAAOCAgEAUHM6nUkcATG3prRivwHyY8f8 6wyArC63d261yzb+UB8NQtUF9s2KqnmGFVYICZwq9v4ytfv5DNNyyXe6YZie7lLu OyledbbaPYzkGK8JKD924AIKAkJ76U+hv0qE+I98kMA4zvsn7Lf/jA6ZV4U6OM4j u8HriELNJoKdVwAk+8ut/6yYvPZ2xy3NhiORriHQFC+Vq+lGw0tHlz+xtUtVWn7R PlD/0Lekd5VrTzItU8q5hEn7XlV6yHwOGPPkVwwteIwsLkCOvo0ehaXOQOfBTS3r fzDhQ1VFAy7v6mBTvVR1xKkxGuJZbXGHAJ5XbOCDPmnndjG1MOq9zF3I/rOizfNl UFfnRzHoFaOJERCSSBpP3ymT2WLqb1piL1d83l/OTBvKR3r9tKET5UEAv9cYCf99 sNPdUm6mtW97cNB4YIZIxtCIK8BXoENa+lIfhR9gsj/pvQlHsAHLE2jS2YmMd2Iw sugZf5UgUxwqsc7E4hUfjAVZaM+QGJCHy9qLaTVakNWSsWjJSSckj28ZzmRyRobu Vs/HDaHZ2Bym35rKoKm5zGDarudcWwojRoNCeBMzKmysjgdlWYzfCY1IGVMgz3R/ pZn5RRnixOUxknn+aExHLuQpRJOCOP2mqT2NhtID5EROD2GNq5P1xa/Tq6iNAzu4 J1uoo2AcErQfBxZ1guE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjEgqnBPPTyx7hPSmS6r AbzgsdCnGcTcgiHqTLhlgWSW/q+YB+bJN6MwAQ6lBCJoBhcg130aWwK7hW/98y2f jc2Jd1pYF1FARIkcjA9NyZ35ZAau5tSUoLe8+Y4cDb6pCRdhqQUbWTVQM0vR6dsi uZLVzFQJdHnqy4Hw2XoFL0R8yLw1QWRrhi1Wh08t6yWKjlbwkMqKZx0iw9z1pWK+ tdxz30PkeKl9CUUFzJ+QllwIRvG9vUMlifKLlrzSs76VNGeotPYDlfxvSHPI3Kqa Fe5zU02YhlibDYU7wIIV2XC4rZTpuF27khnooIB8EymvxA2SLLpnLGRmrB7sehSn 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603675626562207455446046 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '201401' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-01 14:10:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-01 14:10:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-eservices.minfin.be' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Public Service Finances' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0308357159' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24514456886219832286060349574687240436615490945731728210439229095995119628727239675385482499976917175450056950286756097994937814047219713570523172434759036044322164470435908911232349255509721785474551966257595917191719753416033051179875435755938500389140826323068019494819331668619073381098804610766714490604171220952652651373534214419590407495520247185189951826505261587748358518361554303533246070386333143895382582207982469002059590524757283384379118517738010643880905706100188178744270622137991306404481810998642565192587803527746920268161931625860092324060055649560746178531945506118765930415552284519756253669361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 10bd02307f1d89eadbd2b55016812d1ce423e97b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.pki.belgium.be/belgiumrs3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.belgium.be/2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.56.10.1.1.3.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.pki.belgium.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.belgium.be/government201401.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 0560 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3d7051ed781e6b7292286b9e98b08c037c76f4e3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0050733a9d491c0131b7a6b462bf01f263c7fceb0c80ac2eb7776eb5cb36fe501f0d42d505f6cd8aaa7986155608099c2af6fe32b5fbf90cd372c977ba61989eee52ee3b295e75b6da3d8ce418af09283f76e0020a02427be94fa1bf4a84f88f7c90c038cefb27ecb7ff8c0e9957853a38ce23bbc1eb8842cd26829d570024fbcbadffac98bcf676c72dcd862391ae21d0142f95abe946c34b47973fb1b54b555a7ed13e50ffd0b7a477956b4f322d53cab98449fb5e557ac87c0e18f3e4570c2d788c2c2e408ebe8d1e85a5ce40e7c14d2deb7f30e1435545032eefea6053bd5475c4a9311ae2596d7187009e576ce0833e69e77631b530eabdcc5dc8feb3a2cdf3655057e74731e815a389111092481a4fdf2993d962ea6f5a622f577cde5fce4c1bca477afdb4a113e54100bfd71809ff7db0d3dd526ea6b56f7b70d078608648c6d0882bc057a0435afa521f851f60b23fe9bd0947b001cb1368d2d9898c776230b2e8197f9520531c2ab1cec4e2151f8c055968cf90189087cbda8b69355a90d592b168c94927248f6f19ce64724686ee56cfc70da1d9d81ca6df9acaa0a9b9cc60daaee75c5b0a234683427813332a6cac8e0765598cdf098d48195320cf747fa599f94519e2c4e5319279fe684c472ee42944938238fda6a93d8d86d203e4444e0f618dab93f5c5afd3aba88d033bb8275ba8a3601c12b41f07167582e1