ssl4all-335.le.ssl.lxweb1.edpnet.net

Issued by R3

About this certificate

This digital certificate with serial number 03:7d:1b:e4:79:a6:6c:81:ea:18:b4:84:12:c1:d0:70:13:f4 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl4all-335.le.ssl.lxweb1.edpnet.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7d:1b:e4:79:a6:6c:81:ea:18:b4:84:12:c1:d0:70:13:f4
Serial Number (int): 303909229127325004999262155464604556202996
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:9b:12:ba:03:a0:80:a1:16:71:05:91:fb:f6:88:bc:f5:13:9d:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:91:78:a9:92:06:29:af:e5:ab:7f:27:f1:06:a3:9e:1b:a7:77:7b
Fingerprint (sha256): 37:e7:0f:4b:31:b0:1c:d4:ad:5f:7c:b1:65:58:f0:c5:af:7d:e9:47:90:71:9c:48:f9:81:51:a9:6b:f8:b7:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl4all-335.le.ssl.lxweb1.edpnet.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl4all-335.le.ssl.lxweb1.edpnet.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alusta.be
ameelec.be
aqcis.eu
audex-architecture.be
baa.be
barefootc.be
batterijland.be
betracked.be
boekhoudendodec.be
circusrmmalter.com
coralta.be
crlc.be
depaire.be
digimatic.be
digimotec.be
dku-betrieb.eu
excitit.eu
guidance-parentale.eu
handtekening.zpw.be
jandhooghe.be
manumoreau.com
marcel-depaire.be
papasava.be
quasas.eu
rusthuisstrijland.be
schuldbemiddelingwaasland.be
ssl4all-335.le.ssl.lxweb1.edpnet.net
switchngo.be
webpub.be
www.alusta.be
www.ameelec.be
www.aqcis.eu
www.artclub.be
www.artecoiffure.be
www.asitshould.be
www.barefootc.be
www.betracked.be
www.boekhoudendodec.be
www.broekxonweb.be
www.busytec.be
www.circusrmmalter.com
www.coralta.be
www.crlc.be
www.digimatic.be
www.digimotec.be
www.dku-betrieb.eu
www.excitit.eu
www.formaecolore.be
www.guidance-parentale.eu
www.hpx.eu
www.idc.be
www.jandhooghe.be
www.jmboland.be
www.jsmc.be
www.karinverplancke.be
www.manumoreau.com
www.papasava.be
www.pirec.be
www.quasas.eu
www.recursive.biz
www.rusthuisstrijland.be
www.stapsteenreynaert.be
www.stapsteenreynaert.net
www.vantra.be
www.vematec.be
www.webpub.be

Other certificates including the domain name edpnet.net

(limited to 100 certificates)
ssl4all-177.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
ssl4all-72.le.ssl.lxweb1.edpnet.net
ssl4all-323.le.ssl.lxweb1.edpnet.net
ssl4all-302.le.ssl.lxweb1.edpnet.net
ssl4all-272.le.ssl.lxweb1.edpnet.net
ssl4all-177.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
www.edpnet.net
ssl4all-1.le.ssl.lxextweb.edpnet.net
ssl4all-4.le.ssl.lxextweb.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
ssl4all-317.le.ssl.lxweb1.edpnet.net
ssl4all-34.le.ssl.lxweb1.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
appstesting.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
srv-edpnet-03.edpnet.net
winbu01.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-335.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-355.le.ssl.lxweb1.edpnet.net
ssl4all-141.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-287.le.ssl.lxweb1.edpnet.net
www.edpnet.net
ssl4all-177.le.ssl.lxweb1.edpnet.net
email.edpnet.net
ssl4all-272.le.ssl.lxweb1.edpnet.net
ssl4all-207.le.ssl.lxweb1.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net
ssl4all-335.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
srv-edpnet-03.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-329.le.ssl.lxweb1.edpnet.net
ssl4all-72.le.ssl.lxweb1.edpnet.net
ssl4all-326.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
*.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-338.le.ssl.lxweb1.edpnet.net
ssl4all-287.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-195.le.ssl.lxweb1.edpnet.net
ssl4all-34.le.ssl.lxweb1.edpnet.net
ssl4all-326.le.ssl.lxweb1.edpnet.net
ssl4all-341.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
*.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
ssl4all-347.le.ssl.lxweb1.edpnet.net
ssl4all-141.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-290.le.ssl.lxweb1.edpnet.net
ssl4all-344.le.ssl.lxweb1.edpnet.net
ssl4all-284.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-308.le.ssl.lxweb1.edpnet.net
ssl4all-358.le.ssl.lxweb1.edpnet.net
ssl4all-338.le.ssl.lxweb1.edpnet.net
ssl4all-311.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
ssl4all-317.le.ssl.lxweb1.edpnet.net
ssl4all-195.le.ssl.lxweb1.edpnet.net
ssl4all-344.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-192.le.ssl.lxweb1.edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
*.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net

Certificate

The complete raw certificate details for ssl4all-335.le.ssl.lxweb1.edpnet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303909229127325004999262155464604556202996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 08:02:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 08:02:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl4all-335.le.ssl.lxweb1.edpnet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777634070314486785741317531079269485730728458288279483013628475505838490517624860413052118966672368897863362434540898926358418583904450760240595600832752009010650617853178719277638442607749821857852690082711650227155766697929309842276870473431063430798945905057972989818037716393562768877767953336708419154847298782070821505962445087230072438345883289411328023332457634266947277207422129501108291947144057608993790287734245141905115275549165079065102583989316436376199542242386968381053797671540699549456309539080500103665437200014441487683192011487751883427515156978124254566546990607935118732986970009024559203098633390567920995566665329235855884059705021581184452854241535847681763445616845543963999204858474936143609045836646341341607265045208274949181498240747734661927756712220903286222050609912502522358758090121240193083037938255708089601429333158446043819146246514208141330303218976290932135044743767977884917357472031571551088104247310751612287105099606391191109368567841200490991942691635535309972002595733610079227937024930871156727543178460635120484329120505766964185150819709208573912161676406247363941650487127571138065459892691801113475871246409966731921020731354094844203822244542958251714780684286822876543091894057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e9b12ba03a080a116710591fbf688bcf5139d4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alusta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameelec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqcis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audex-architecture.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barefootc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batterijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betracked.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boekhoudendodec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circusrmmalter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coralta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crlc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimatic.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimotec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dku-betrieb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excitit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidance-parentale.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handtekening.zpw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jandhooghe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manumoreau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcel-depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papasava.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quasas.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusthuisstrijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuldbemiddelingwaasland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl4all-335.le.ssl.lxweb1.edpnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchngo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alusta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ameelec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aqcis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artclub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artecoiffure.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asitshould.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barefootc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betracked.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boekhoudendodec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broekxonweb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busytec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circusrmmalter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crlc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimatic.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimotec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dku-betrieb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excitit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formaecolore.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidance-parentale.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpx.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jandhooghe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmboland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jsmc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karinverplancke.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manumoreau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papasava.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pirec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quasas.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recursive.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rusthuisstrijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stapsteenreynaert.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stapsteenreynaert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantra.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vematec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webpub.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9e0b49fd0000040300483046022100c945b759f3dada63bd688a2397840ff7edc3bcb38deac40be09e0c5f933cb00f022100aef279a40d81ec11678ea8898441e86814b3d2f2a8d8152866e2bde705676da100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9e0b4a4f0000040300473045022100b7f03e3a9d2795aaf0bc843df8fe1875f25aa90aa5f9cd98508714197b5ed2ee02204fa1810c989ed00ba25abb48570ea86f4cf21cfbbee7dafe633ace683e259834
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074694a1f346da6026391c05b8c63f70fa82b486bacfcaddaab3959adb8fc46d6be0ae7df39acfa85d852e9f251276869f7903b3ac23b4cea2139b2572bb326c586d3d956fe129f32bd5995c7b00eb9bbed0436d4bbc09f0b4d580cfdf27b1e16b4b87c03488c1797740d32c9f19b7fc7103f8948c133b120ce837f5581b4c122f89ea8cfd30ced92c4d1e640643a41e3b634eb9c7e57691f0d908cebfdd7b06aef51403b6a18f3976c5273a0556fe40acbd6c826e177c35065a9cf032db094dce1b6d27cae6fd8d9eb047ebad31cb137a51ad42efbc4f97ad91baaab7badd7d39989b2ec60074cb6e2c9f2a8ae54b63ca442a67bc64dacc5a8ea8ac6fd44758e