vpnao.minfin.be
- Service Public Federal Finances -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 0b:14:be:cb:cb:6d:2d:9a:ce:32:f6:cd:86:37:6d:90 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Service Public Federal Finances
Organization:
Service Public Federal Finances
State / Province:
Bruxelles-Capitale, Région de
Country: BE
Country: BE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:14:be:cb:cb:6d:2d:9a:ce:32:f6:cd:86:37:6d:90Serial Number (int): 14729223694903900637773138556542741904
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e5:6d:fc:ab:c0:43:6a:34:e7:9a:68:18:50:d1:9c:8a:76:32:29:0a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): f6:e4:69:dd:37:98:12:6e:98:b3:d9:f6:cc:70:42:58:90:f0:c2:9a
Fingerprint (sha256): 35:b4:c3:84:23:47:1e:33:a4:78:03:57:6d:b4:57:df:49:69:20:84:20:3b:d6:d5:84:e0:1c:b5:e8:1b:54:a2
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate vpnao.minfin.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vpnao.minfin.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vpnao.minfin.be
www.vpnao.minfin.be
www.vpnao.minfin.be
Other certificates including the domain name minfin.be
(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
Certificate
The complete raw certificate details for vpnao.minfin.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIgjCCBmqgAwIBAgIQCxS+y8ttLZrOMvbNhjdtkDANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwNzI3MDAwMDAwWhcNMjMwNzI3MjM1 OTU5WjB6MQswCQYDVQQGEwJCRTEnMCUGA1UECAweQnJ1eGVsbGVzLUNhcGl0YWxl LCBSw6lnaW9uIGRlMSgwJgYDVQQKEx9TZXJ2aWNlIFB1YmxpYyBGZWRlcmFsIEZp bmFuY2VzMRgwFgYDVQQDEw92cG5hby5taW5maW4uYmUwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDDSOVUV88ioOdO8uP+LGe7FjlzS6mW0IOqPSy5FDtI 9Iq2nWteEzIVfO5ygeY06VkMy1EPHPg4gN9YzMYVvHLXfD7XaCPvXhaxa/qPsFwh s+ciMRaUKUFeKWTPQjMKUGyc2JF3aZuc5pA2qp3HJgWuXLoIpNv6GpkXIgXZuF0z AVm+ljJvQX8M6RBa/YZ6JW736qViw7nFSYPa3lYsUhr5CrNrG5F7zrbHZZaOCHb2 62TeMmGEcgGpbDn8fSew6a4vROujYXGX7l/dKdpZ3acZI1zJbwgDoJK6r5IaLK6u dNnAulxvQIMW7zzjFXxIoYUa8am/9P2fkka5iddNsM3yvcK9bhoM9KX1D9dOKYfM YyweCyAY0jQEW5ofA+JLtqJ+4h7keO7851gI0B+zhbtoJMwNwm5jORGhnyN0AyY1 CZij72BMXIyYEsSiVZwTPisIJP2/ijc05TgHl7LVrpIOCleiVY0sIhHGxznSajzH DEFf2pGRa/fLh3umKjhQwwxVlRR7dkyZrtKm98gAaOz8itPAqjhlzWpeB4p1f8MC b06XGhllBsD6UakhM+Oay22ailV9MpfN+5CINGVok0eKHLSphD2B0pEcRR1aZqtE ZgGZMC6Rw8Hpv7bnc1alMUBMWjeFtFflOmFbobgUgSdWzC69KALhgAq+D8bhlQPw qwIDAQABo4IDODCCAzQwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegww HQYDVR0OBBYEFOVt/KvAQ2o055poGFDRnIp2MikKMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV HSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj dGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v R0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUF BwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNv bS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9j c3Auc2VjdGlnby5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AK33vvp8 /xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABgkCFpXQAAAQDAEcwRQIgKQ2g WsiT43PMyzHS+AOtwsLDTdCoqEePBe7EWNWC8+4CIQCSKInJB+5EG9uA9K3PxQZu 5VfSbQjNz4Oq+g7mcoHUtQB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlej UutSAAABgkCFpkIAAAQDAEcwRQIgDilZ+XFsW65NWQ2tOpNP9/XqlTU7TWWuepog 4WPjePICIQCloQyjaNuns7LejnSafFQw/pnWX4wdU0qHesPtqmP4RQB3AOg+0No+ 9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgkCFpVQAAAQDAEgwRgIhAKcP shAMHiM6I9TKOlJjCjZd3dmXBB1NGXC5hPAUdgjWAiEAw75H+3iI9vDdXtdEpxiv oPDaZ99hLQYmY7fCuipupV8wLwYDVR0RBCgwJoIPdnBuYW8ubWluZmluLmJlghN3 d3cudnBuYW8ubWluZmluLmJlMA0GCSqGSIb3DQEBDAUAA4ICAQBXvVgr4W6uvW12 3iF2eMrk/5Uyw8Z+HSLPlRjzuluZSgGDrwnTYcMFJyFVsHJ7YTRAIB+enRjvx1tK IWO8krL70AKLzxxwPc6DvAw5zprOSnu8VUy5K7dV5Lc25T7Red7HoDU5orll2h4g 8U0uAkVKBHNd30xmDvPx2FUvjYYkMuUCfPe56pCXmaD0FChPdyoNRscvdohcOwg7 VRyius2xRtgAMv4ovX/vEXDq8MYf38e8xJ3nQSKp+jwtukKdvTzPHkXY0ekS7OGI mDgPNvtjmlkA8Sp1zHfOZpRfzQ6KX/+K/xXGG0Koeb3v4IK12/pJFwETU2YhN3zb RmcVsIF5Kd4pfKVB2lv+oLYlcodIrkWkh1qx7BMyZUucUQTyFRXwYwMBE4UJmNip Y1Q7vFBDVMu4L0ilAB4pQNYCzcSfx1eeWWyTGzTv3NUqbkDrjS7ch7VbZEsvbZRu jZCMJBKxwhGIE+fQyCnl5dH8Czf68V9eOvD0pWc9WUvvqCVHxsFUF/Thv+SVbAXU 934WCCOmbzqdOKyF2i2SxmuRdCcRpCpT+AC34Dli5+vurCx+8xbk+AvzwJyrC5nk IRu/CfmIDoNjP2oQY7WYq2aqj2qBNg5uMVQpsS7YyH3emDPQAmbJrUgqja+vH5Z/ Ypb1BQ6xiFjaZn+pBVyaG3DzKIUTOw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw0jlVFfPIqDnTvLj/ixn uxY5c0upltCDqj0suRQ7SPSKtp1rXhMyFXzucoHmNOlZDMtRDxz4OIDfWMzGFbxy 13w+12gj714WsWv6j7BcIbPnIjEWlClBXilkz0IzClBsnNiRd2mbnOaQNqqdxyYF rly6CKTb+hqZFyIF2bhdMwFZvpYyb0F/DOkQWv2GeiVu9+qlYsO5xUmD2t5WLFIa +QqzaxuRe862x2WWjgh29utk3jJhhHIBqWw5/H0nsOmuL0Tro2Fxl+5f3SnaWd2n GSNcyW8IA6CSuq+SGiyurnTZwLpcb0CDFu884xV8SKGFGvGpv/T9n5JGuYnXTbDN 8r3CvW4aDPSl9Q/XTimHzGMsHgsgGNI0BFuaHwPiS7aifuIe5Hju/OdYCNAfs4W7 aCTMDcJuYzkRoZ8jdAMmNQmYo+9gTFyMmBLEolWcEz4rCCT9v4o3NOU4B5ey1a6S DgpXolWNLCIRxsc50mo8xwxBX9qRkWv3y4d7pio4UMMMVZUUe3ZMma7SpvfIAGjs /IrTwKo4Zc1qXgeKdX/DAm9OlxoZZQbA+lGpITPjmsttmopVfTKXzfuQiDRlaJNH ihy0qYQ9gdKRHEUdWmarRGYBmTAukcPB6b+253NWpTFATFo3hbRX5TphW6G4FIEn VswuvSgC4YAKvg/G4ZUD8KsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14729223694903900637773138556542741904 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpnao.minfin.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796692269015461151170925651869139076686776137684507578417734018168218393417022162825683521185533517816776635620291596459820436572546650091036169645265836407895645186506937296221067272720359405466133864829256985168876515811870813834651446498095602917475191212072683154905412905787694263780559019316421166388264034242271384153497289095725516755922798455192441885912145961386173850923684292281268567656484571207252222061489537338721671098491438162174067147628226295970861934313688448142006969950938636608884365684049696640307352453396843242098379842919776723979795255292279960159687631037486202087836541300777299617639753653169980211037778666343669831298191534191711827953987302251559968963389861118888235118073458409760796535761306024132982976071126243736704012089774877794213125922108457914275603317075844253483947525904713959315742099178378775365875362720865537697947620516473532483700035627615804421787938842380110364030612264887966666954634695604877091566773599608062166071417309752588247879308747149343649040304427007487447506837012664252557078569978503499999824938003784900265461686470265756775195064151745534919776012388174276536430950677232890194540555820304326589219420149761169314442771972808267596925597104703251939814797483 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e56dfcabc0436a34e79a681850d19c8a7632290a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnao.minfin.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpnao.minfin.be' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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