*.ap.be

- Artesis Plantijn Hogeschool Antwerpen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f1:07:79:f0:6d:89:2e:2c:73:43:e4:a8:62:7a:4e:8c was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Artesis Plantijn Hogeschool Antwerpen

Organization: Artesis Plantijn Hogeschool Antwerpen
State / Province: Antwerpen
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): f1:07:79:f0:6d:89:2e:2c:73:43:e4:a8:62:7a:4e:8c
Serial Number (int): 320382766282395221395414036554316402316
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9f:3c:f8:e1:12:29:a4:81:77:36:ab:8c:ad:0f:bb:76:b7:de:8a:ce
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): e6:b4:fd:99:03:99:53:93:7e:8d:fc:7f:61:46:50:46:e1:35:51:c1
Fingerprint (sha256): 31:b4:a4:b5:80:f7:03:c8:99:ca:2e:de:16:0b:fb:df:2f:21:bf:ff:29:a1:35:ae:42:e0:e4:c1:ca:b7:63:42

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.ap.be

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ap.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ap.be
*.dev.ap.be
*.staging.ap.be

Other certificates including the domain name ap.be

(limited to 100 certificates)
inda.ap.be
ictpedia.ap.be
msimagine.ap.be
journalistiek.ap.be
journalistieknamen.ap.be
msimagine.ap.be
zorgneticuro.ap.be
inclusiedag.ap.be
showandtell.ap.be
gdm.ap.be
securelogin.ap.be
marketingshop.ap.be
eaict.ap.be
workshopweb.ap.be
senseofhome.ap.be
senseofhome.ap.be
eps.ap.be
eps.ap.be
feedback.ap.be
*.ap.be
e-campus.ap.be
inda.ap.be
eaict.ap.be
stats.ap.be
senseofhome.ap.be
filewave.ap.be
feedback.ap.be
msimagine.ap.be
sts.ap.be
ibamaflex.ap.be
showandtell.ap.be
beta.eaict.ap.be
marketingblog.ap.be
workathome.ap.be
antivirus.ap.be
msimagine.ap.be
journalistieknamen.ap.be
blokkenloop.ap.be
ai.ap.be
sr18.ap.be
feedback.ap.be
journalistiek.ap.be
wpnet.ap.be
jou3blog.ap.be
jou3blog.ap.be
blokkenloop.ap.be
journalistieknamen.ap.be
*.ap.be
stats.ap.be
aui.ap.be
stats.ap.be
dialoog.ap.be
*.ap.be
marketingblog.ap.be
senseofhome.ap.be
evasys.ap.be
surveys.ap.be
marketingblog.ap.be
surveys.ap.be
eps.ap.be
showandtell.ap.be
inda.ap.be
articulate.ap.be
blackboard.ap.be
journalistiek.ap.be
inclusiedag.ap.be
ai.ap.be
sr18.ap.be
eaict.ap.be
learning.ap.be
msimagine.ap.be
gdm.ap.be
ictpedia.ap.be
dialoog.ap.be
msimagine.ap.be
ictpedia.ap.be
webdeposit.ap.be
gitlab.ap.be
surveys.ap.be
rancher.ap.be
*.ap.be
*.dev.ap.be
ai.ap.be
blackboard.ap.be
inda.ap.be
stats.ap.be
cbbc.ap.be
ictpedia.ap.be
webmail.ap.be
cbbc.ap.be
ai.ap.be
*.staging.ap.be
showandtell.ap.be
ibamaflex.ap.be
jou3blog.ap.be
senseofhome.ap.be
journalistiek.ap.be
learning.ap.be
marketingblog.ap.be
inda.ap.be

Certificate

The complete raw certificate details for *.ap.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHbDCCBVSgAwIBAgIRAPEHefBtiS4sc0PkqGJ6TowwDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMTExMDAwMDAwMFoXDTI0MTEwOTIz
NTk1OVowYzELMAkGA1UEBhMCQkUxEjAQBgNVBAgTCUFudHdlcnBlbjEuMCwGA1UE
ChMlQXJ0ZXNpcyBQbGFudGlqbiBIb2dlc2Nob29sIEFudHdlcnBlbjEQMA4GA1UE
AwwHKi5hcC5iZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANJbMeKl
Y183xSxFKMQD9FuSsNJ5FahuSmT9aawBakyxbpoXSk+/Bqg0NRZAnyQ+g9C2PFfY
acsu/qiixLQNc/NZJ/8O5eQwnvhd+jpiYy0EYNGDumfVz3mx4nj5+yDv5Ugly1RC
nmdzuOM5RFtNEuZrhP+SgtG91ThTdv9d7NlpEINF6wqaOTBlRz2lq8RutG6uKN2g
za2RP/hBZR/Oj9yP5E04qQMyc/rVNREDQdojVyRbz19Ere9DsX/e5umLwuPicUPN
Kma2L+ePppMo+OPsIfZRRHBFleVUabNuN7nWJ8w5AblvccUS1iRRt7hYR15EXAG7
/54Mn0GYxXFTBe0CAwEAAaOCAzgwggM0MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCe
vIroH5W+cXoMMB0GA1UdDgQWBBSfPPjhEimkgXc2q4ytD7t2t96KzjAOBgNVHQ8B
Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdo
dHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKg
MIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNy
bDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQu
c2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6
Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFq
AWgAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYu4YC5hAAAE
AwBHMEUCIGa7+IM2kc1Ilybtc22lzM1WUytDxYhKK3SQfBvjpu2vAiEA/W5NTuwG
7LW0HQ7pz1PWA/YgLOps7bIgsV+IrqTV1kQAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3
fx+FauvBvyiF7PhkbgAAAYu4YC8eAAAEAwBHMEUCIQCNiv0R9jlNYtYKbjODrzhN
O/bp2xDJCfD/KydehzCF+QIgSgR40WlqbqxutNyvCWkmiOK4xAcwb5q44CwZiNWA
gLIAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYu4YC7VAAAE
AwBHMEUCIFgI1mzqXMuObOaYTeJedi1i2ikTiVMAEsJleFzNCTsBAiEAhfJUVWa2
x3RIHy2maqT9Wfo6r0OHhm2wgjMRlmCbjGQwMAYDVR0RBCkwJ4IHKi5hcC5iZYIL
Ki5kZXYuYXAuYmWCDyouc3RhZ2luZy5hcC5iZTANBgkqhkiG9w0BAQwFAAOCAgEA
ioZ7xPPYpOArh5ZhnnTrwUdLIKlQNg7AfVHHGW/XFZyHmpL0JPs/Yv18CXzmYLu/
qOOv4Er7hoPtL5kIX64As+SF2ucizk4Jg7Z/bwTdYKuXWxrSJRYVNS44Po8eoD/r
KZGnCdLwfsOh2cbShF8ytT1aP6ttGGdCgFQdGSnipA0dpa0I1MAJ8EkHj0Y62t9r
6X1thIe1dMDlLlGHpCA96xm05lquiG4U1gkgbVJsKigygGd7Ra6NaOPWgrcyNkRm
IGw60CoYNxi0s+A+STDCNVF1akb3VpaIv9ti14/DDdQ9GTnaLIuh6VR2Td+PjReQ
w0HCTh4pncuCS1ECSnVsH7G1XiavG9SYdqUtaGgI0+FwN9yvYTqEXEhhJpHp+Mhz
5sda/QswMxBqfdv7tuz3dLf5tYuzUUegcLlbzkcQdwvbV2NFsk6afHi+fD25Tome
4VzU9+ffe/MU4zAiqKTJkjE82j6PILoBGKcOH6uTAWEeroGUBzOmuEmEeXaWsFAA
5JBWoclWJCo/V9dFwM0QwEHGyXirmAA2a+wJKQEe41JCW+hmtaXsryushmFhT8mC
tEbltSYJlld+YlYoEANo7ZsPb8MakK3G8U4tMvHW4fVY/uhVFBHg0j/bzfjboj9D
0za/gTnesgc+zbP5563i+Wf8u5QR+h6y8ASmRvzs16k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lsx4qVjXzfFLEUoxAP0
W5Kw0nkVqG5KZP1prAFqTLFumhdKT78GqDQ1FkCfJD6D0LY8V9hpyy7+qKLEtA1z
81kn/w7l5DCe+F36OmJjLQRg0YO6Z9XPebHiePn7IO/lSCXLVEKeZ3O44zlEW00S
5muE/5KC0b3VOFN2/13s2WkQg0XrCpo5MGVHPaWrxG60bq4o3aDNrZE/+EFlH86P
3I/kTTipAzJz+tU1EQNB2iNXJFvPX0St70Oxf97m6YvC4+JxQ80qZrYv54+mkyj4
4+wh9lFEcEWV5VRps243udYnzDkBuW9xxRLWJFG3uFhHXkRcAbv/ngyfQZjFcVMF
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320382766282395221395414036554316402316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Artesis Plantijn Hogeschool Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ap.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26555013906653502077346955865079133195098252422349740680560461354874645499277685719768285184339659396617214326444279793018957277568890097783797855049379926980010886741594462691521998495862651932609183750132568652899525360990665689254006385271783496718674023463751212848551779785931271660509449164088234393780589212654114671233839710588199911642550145918059043048100007969701060226611954569803408766792953005217896743284694359462196353992295017326908085262967328093883797407406140313767170846914854216170000048835296214871612293547517312614153300891766346596546171320084440517949987696414035002161897093272071467894253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f3cf8e11229a4817736ab8cad0fbb76b7de8ace
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bb8602e610000040300473045022066bbf8833691cd489726ed736da5cccd56532b43c5884a2b74907c1be3a6edaf022100fd6e4d4eec06ecb5b41d0ee9cf53d603f6202cea6cedb220b15f88aea4d5d6440076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018bb8602f1e00000403004730450221008d8afd11f6394d62d60a6e3383af384d3bf6e9db10c909f0ff2b275e873085f902204a0478d1696a6eac6eb4dcaf09692688e2b8c407306f9ab8e02c1988d58080b2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bb8602ed5000004030047304502205808d66cea5ccb8e6ce6984de25e762d62da291389530012c265785ccd093b0102210085f2545566b6c774481f2da66aa4fd59fa3aaf4387866db082331196609b8c64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.ap.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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