vpnao.minfin.be

- Service Public Federal Finances -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 0b:14:be:cb:cb:6d:2d:9a:ce:32:f6:cd:86:37:6d:90 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Service Public Federal Finances

Organization: Service Public Federal Finances
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:14:be:cb:cb:6d:2d:9a:ce:32:f6:cd:86:37:6d:90
Serial Number (int): 14729223694903900637773138556542741904
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:6d:fc:ab:c0:43:6a:34:e7:9a:68:18:50:d1:9c:8a:76:32:29:0a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): f6:e4:69:dd:37:98:12:6e:98:b3:d9:f6:cc:70:42:58:90:f0:c2:9a
Fingerprint (sha256): 35:b4:c3:84:23:47:1e:33:a4:78:03:57:6d:b4:57:df:49:69:20:84:20:3b:d6:d5:84:e0:1c:b5:e8:1b:54:a2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate vpnao.minfin.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpnao.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpnao.minfin.be
www.vpnao.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for vpnao.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIgjCCBmqgAwIBAgIQCxS+y8ttLZrOMvbNhjdtkDANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwNzI3MDAwMDAwWhcNMjMwNzI3MjM1
OTU5WjB6MQswCQYDVQQGEwJCRTEnMCUGA1UECAweQnJ1eGVsbGVzLUNhcGl0YWxl
LCBSw6lnaW9uIGRlMSgwJgYDVQQKEx9TZXJ2aWNlIFB1YmxpYyBGZWRlcmFsIEZp
bmFuY2VzMRgwFgYDVQQDEw92cG5hby5taW5maW4uYmUwggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQDDSOVUV88ioOdO8uP+LGe7FjlzS6mW0IOqPSy5FDtI
9Iq2nWteEzIVfO5ygeY06VkMy1EPHPg4gN9YzMYVvHLXfD7XaCPvXhaxa/qPsFwh
s+ciMRaUKUFeKWTPQjMKUGyc2JF3aZuc5pA2qp3HJgWuXLoIpNv6GpkXIgXZuF0z
AVm+ljJvQX8M6RBa/YZ6JW736qViw7nFSYPa3lYsUhr5CrNrG5F7zrbHZZaOCHb2
62TeMmGEcgGpbDn8fSew6a4vROujYXGX7l/dKdpZ3acZI1zJbwgDoJK6r5IaLK6u
dNnAulxvQIMW7zzjFXxIoYUa8am/9P2fkka5iddNsM3yvcK9bhoM9KX1D9dOKYfM
YyweCyAY0jQEW5ofA+JLtqJ+4h7keO7851gI0B+zhbtoJMwNwm5jORGhnyN0AyY1
CZij72BMXIyYEsSiVZwTPisIJP2/ijc05TgHl7LVrpIOCleiVY0sIhHGxznSajzH
DEFf2pGRa/fLh3umKjhQwwxVlRR7dkyZrtKm98gAaOz8itPAqjhlzWpeB4p1f8MC
b06XGhllBsD6UakhM+Oay22ailV9MpfN+5CINGVok0eKHLSphD2B0pEcRR1aZqtE
ZgGZMC6Rw8Hpv7bnc1alMUBMWjeFtFflOmFbobgUgSdWzC69KALhgAq+D8bhlQPw
qwIDAQABo4IDODCCAzQwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegww
HQYDVR0OBBYEFOVt/KvAQ2o055poGFDRnIp2MikKMA4GA1UdDwEB/wQEAwIFoDAM
BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV
HSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj
dGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v
R0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUF
BwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNv
bS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9j
c3Auc2VjdGlnby5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AK33vvp8
/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABgkCFpXQAAAQDAEcwRQIgKQ2g
WsiT43PMyzHS+AOtwsLDTdCoqEePBe7EWNWC8+4CIQCSKInJB+5EG9uA9K3PxQZu
5VfSbQjNz4Oq+g7mcoHUtQB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlej
UutSAAABgkCFpkIAAAQDAEcwRQIgDilZ+XFsW65NWQ2tOpNP9/XqlTU7TWWuepog
4WPjePICIQCloQyjaNuns7LejnSafFQw/pnWX4wdU0qHesPtqmP4RQB3AOg+0No+
9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgkCFpVQAAAQDAEgwRgIhAKcP
shAMHiM6I9TKOlJjCjZd3dmXBB1NGXC5hPAUdgjWAiEAw75H+3iI9vDdXtdEpxiv
oPDaZ99hLQYmY7fCuipupV8wLwYDVR0RBCgwJoIPdnBuYW8ubWluZmluLmJlghN3
d3cudnBuYW8ubWluZmluLmJlMA0GCSqGSIb3DQEBDAUAA4ICAQBXvVgr4W6uvW12
3iF2eMrk/5Uyw8Z+HSLPlRjzuluZSgGDrwnTYcMFJyFVsHJ7YTRAIB+enRjvx1tK
IWO8krL70AKLzxxwPc6DvAw5zprOSnu8VUy5K7dV5Lc25T7Red7HoDU5orll2h4g
8U0uAkVKBHNd30xmDvPx2FUvjYYkMuUCfPe56pCXmaD0FChPdyoNRscvdohcOwg7
VRyius2xRtgAMv4ovX/vEXDq8MYf38e8xJ3nQSKp+jwtukKdvTzPHkXY0ekS7OGI
mDgPNvtjmlkA8Sp1zHfOZpRfzQ6KX/+K/xXGG0Koeb3v4IK12/pJFwETU2YhN3zb
RmcVsIF5Kd4pfKVB2lv+oLYlcodIrkWkh1qx7BMyZUucUQTyFRXwYwMBE4UJmNip
Y1Q7vFBDVMu4L0ilAB4pQNYCzcSfx1eeWWyTGzTv3NUqbkDrjS7ch7VbZEsvbZRu
jZCMJBKxwhGIE+fQyCnl5dH8Czf68V9eOvD0pWc9WUvvqCVHxsFUF/Thv+SVbAXU
934WCCOmbzqdOKyF2i2SxmuRdCcRpCpT+AC34Dli5+vurCx+8xbk+AvzwJyrC5nk
IRu/CfmIDoNjP2oQY7WYq2aqj2qBNg5uMVQpsS7YyH3emDPQAmbJrUgqja+vH5Z/
Ypb1BQ6xiFjaZn+pBVyaG3DzKIUTOw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14729223694903900637773138556542741904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpnao.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796692269015461151170925651869139076686776137684507578417734018168218393417022162825683521185533517816776635620291596459820436572546650091036169645265836407895645186506937296221067272720359405466133864829256985168876515811870813834651446498095602917475191212072683154905412905787694263780559019316421166388264034242271384153497289095725516755922798455192441885912145961386173850923684292281268567656484571207252222061489537338721671098491438162174067147628226295970861934313688448142006969950938636608884365684049696640307352453396843242098379842919776723979795255292279960159687631037486202087836541300777299617639753653169980211037778666343669831298191534191711827953987302251559968963389861118888235118073458409760796535761306024132982976071126243736704012089774877794213125922108457914275603317075844253483947525904713959315742099178378775365875362720865537697947620516473532483700035627615804421787938842380110364030612264887966666954634695604877091566773599608062166071417309752588247879308747149343649040304427007487447506837012664252557078569978503499999824938003784900265461686470265756775195064151745534919776012388174276536430950677232890194540555820304326589219420149761169314442771972808267596925597104703251939814797483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e56dfcabc0436a34e79a681850d19c8a7632290a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001824085a57400000403004730450220290da05ac893e373cccb31d2f803adc2c2c34dd0a8a8478f05eec458d582f3ee022100922889c907ee441bdb80f4adcfc5066ee557d26d08cdcf83aafa0ee67281d4b50076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001824085a642000004030047304502200e2959f9716c5bae4d590dad3a934ff7f5ea95353b4d65ae7a9a20e163e378f2022100a5a10ca368dba7b3b2de8e749a7c5430fe99d65f8c1d534a877ac3edaa63f845007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001824085a5540000040300483046022100a70fb2100c1e233a23d4ca3a52630a365dddd997041d4d1970b984f0147608d6022100c3be47fb7888f6f0dd5ed744a718afa0f0da67df612d062663b7c2ba2a6ea55f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnao.minfin.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpnao.minfin.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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