*.staging.ap.be

- Artesis Plantijn Hogeschool Antwerpen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number db:42:15:eb:52:c3:2b:8a:81:8e:df:ba:83:35:74:8f was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Artesis Plantijn Hogeschool Antwerpen

Organization: Artesis Plantijn Hogeschool Antwerpen
Address: Lange Nieuwstraat 101
Postal code: 2000
State / Province: Antwerpen
Locality: ANTWERPEN
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): db:42:15:eb:52:c3:2b:8a:81:8e:df:ba:83:35:74:8f
Serial Number (int): 291444067244393459283535235295135233167
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b9:b9:48:31:36:d0:eb:9a:79:24:6e:89:70:bc:a7:69:b9:2f:3a:07
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 1d:93:d1:4a:c5:b3:10:5d:51:cf:61:c5:36:bc:c3:fe:47:6b:50:a3
Fingerprint (sha256): 39:5e:b0:13:5c:8e:8f:cc:94:80:9d:72:c1:e4:73:be:a4:fa:05:65:6b:9a:e1:1c:bc:7d:d3:47:f1:bc:68:e1

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.staging.ap.be

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.ap.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.ap.be
*.ap.be
*.dev.ap.be

Other certificates including the domain name ap.be

(limited to 100 certificates)
inda.ap.be
ictpedia.ap.be
msimagine.ap.be
journalistiek.ap.be
journalistieknamen.ap.be
msimagine.ap.be
zorgneticuro.ap.be
inclusiedag.ap.be
showandtell.ap.be
gdm.ap.be
securelogin.ap.be
marketingshop.ap.be
eaict.ap.be
workshopweb.ap.be
senseofhome.ap.be
senseofhome.ap.be
eps.ap.be
eps.ap.be
feedback.ap.be
*.ap.be
e-campus.ap.be
inda.ap.be
eaict.ap.be
stats.ap.be
senseofhome.ap.be
filewave.ap.be
feedback.ap.be
msimagine.ap.be
sts.ap.be
ibamaflex.ap.be
showandtell.ap.be
beta.eaict.ap.be
marketingblog.ap.be
workathome.ap.be
antivirus.ap.be
msimagine.ap.be
journalistieknamen.ap.be
blokkenloop.ap.be
ai.ap.be
sr18.ap.be
feedback.ap.be
journalistiek.ap.be
wpnet.ap.be
jou3blog.ap.be
jou3blog.ap.be
blokkenloop.ap.be
journalistieknamen.ap.be
*.ap.be
stats.ap.be
aui.ap.be
stats.ap.be
dialoog.ap.be
*.ap.be
marketingblog.ap.be
senseofhome.ap.be
evasys.ap.be
surveys.ap.be
marketingblog.ap.be
surveys.ap.be
eps.ap.be
showandtell.ap.be
inda.ap.be
articulate.ap.be
blackboard.ap.be
journalistiek.ap.be
inclusiedag.ap.be
ai.ap.be
sr18.ap.be
eaict.ap.be
learning.ap.be
msimagine.ap.be
gdm.ap.be
ictpedia.ap.be
dialoog.ap.be
msimagine.ap.be
ictpedia.ap.be
webdeposit.ap.be
gitlab.ap.be
surveys.ap.be
rancher.ap.be
*.ap.be
*.dev.ap.be
ai.ap.be
blackboard.ap.be
inda.ap.be
stats.ap.be
cbbc.ap.be
ictpedia.ap.be
webmail.ap.be
cbbc.ap.be
ai.ap.be
*.staging.ap.be
showandtell.ap.be
ibamaflex.ap.be
jou3blog.ap.be
senseofhome.ap.be
journalistiek.ap.be
learning.ap.be
marketingblog.ap.be
inda.ap.be

Certificate

The complete raw certificate details for *.staging.ap.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHPzCCBSegAwIBAgIRANtCFetSwyuKgY7fuoM1dI8wDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIwMTExODAwMDAwMFoXDTIxMTExODIz
NTk1OVowga4xCzAJBgNVBAYTAkJFMQ0wCwYDVQQREwQyMDAwMRIwEAYDVQQIEwlB
bnR3ZXJwZW4xEjAQBgNVBAcTCUFOVFdFUlBFTjEeMBwGA1UECRMVTGFuZ2UgTmll
dXdzdHJhYXQgMTAxMS4wLAYDVQQKEyVBcnRlc2lzIFBsYW50aWpuIEhvZ2VzY2hv
b2wgQW50d2VycGVuMRgwFgYDVQQDDA8qLnN0YWdpbmcuYXAuYmUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvwzeKezgwJNXaF/0Xms/Bye7k2iKdew6
zKMmybr1E7SVzh7ARqxfO34AgjKzrVkOlm1FhPKFJLiQJLZOe79lYoxMK0zhdJf7
KYx5oiJMT+C47xsCsSvYEBhy5FxcD2mvpTSqoWSmLGcp7BMUqJfs4PAWSSxXQS2k
FQzh9IwVj3vD4To9Gmi5JYqoVyMdxUCr9O8FZhobPyCH1WdfP/uVXG9twlxS4SjE
m74QhR/4oihnPmLBaGs/AzpSgPcQqabzczdecLckAVsBVQhfWfLl1t37EP1u8uAt
YjO/RvFiyUyeiuuPh1I3A9qXU+LY0CZDH9N82xBh/zTwqDx3LYiHAgMBAAGjggK/
MIICuzAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQU
ublIMTbQ65p5JG6JcLynabkvOgcwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC
MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYL
KwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9D
UFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwu
c2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoG
CCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZS
U0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdv
LmNvbTCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AH0+8viP/4hVaCTCwMqeUol5
K8UOeAl/LmqXaJl+IvDXAAABddq/Y/EAAAQDAEcwRQIhANkQVDLWqjHUAErlgA8V
nAkkOZu3EjkU6h1DVNEIR1b6AiAHa3/7fKrLGJxugNZ4xW7Af0AfujRW7KGMwk0/
ClhUrwB3AJQgvB6O1Y1siHMfgosiLA3R2k1ebE+UPWHbTi9YTaLCAAABddq/ZIAA
AAQDAEgwRgIhAOcdS0e80FKX8EGW0f8kaHKNYTJ+JN/8F/TAv2+N9lVXAiEAwqJN
XH4iQROCqFNIXVGsroKupL5aikoay4aFvZp8mWgwMAYDVR0RBCkwJ4IPKi5zdGFn
aW5nLmFwLmJlggcqLmFwLmJlggsqLmRldi5hcC5iZTANBgkqhkiG9w0BAQwFAAOC
AgEAjM+BP4xg5k1nveUGi9WaGKWW3NAm/YvkSfyi5POD+Q0Rp9ktHYKVfm7uyI6s
YWlXeOdx56T82JaDX0o3YjI+CQKS43sF4W+y22JsMcxqvNcFkNRwaWOEhsnbt0Pp
2S+gntI3JrFQPN3s9bkKD5KcMkvo+0DJwLlVSBVwMn0iiihTuVV5xmch9aYIUadj
IJAEerlrGI/6vvfY7+NTGOtlBtEWgBwl2/5E8W7ti2opjNpXb1e4nqJeRKrqX75Y
rwmgRuaQqxzdl36O+8FnlE87Yz4WWW5yF74aBrOUeqDNmNJmAezeIgrs3ISV/Gax
xQ1ev3i0XZWllwb7AeljkH7/uiqtmfWAr/e3iaJ5S9QYyWlOIBp7P1sKs9wAxH59
H564gn185UPyhuvR2NqY5UVTgUCUPAruiaxVBP/MZMszshtkgC0XQPHx8wc75IyS
d7XMSsAQo89sh9PcZCykVrTzJ+XUyhPlICbZiHf/CGnD81YM4lIKOJKKGVjJqyUc
97FjMM/+xSD8M0bR3DfvrY/shcNLLCvweuQ0+4ig87oK0GyhyArxpes/XlOb67Lv
5wMwwOvf7tKnbSPK1EMiYxgNgJxviQRUCqIxJanQzp+RMWK4Wz5YZT0cuqp6stOp
pF5RZV9yeJFo0nZyX9DsMmJZgDT69qA69jfojV7YsAHddYc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr8M3ins4MCTV2hf9F5r
Pwcnu5NoinXsOsyjJsm69RO0lc4ewEasXzt+AIIys61ZDpZtRYTyhSS4kCS2Tnu/
ZWKMTCtM4XSX+ymMeaIiTE/guO8bArEr2BAYcuRcXA9pr6U0qqFkpixnKewTFKiX
7ODwFkksV0EtpBUM4fSMFY97w+E6PRpouSWKqFcjHcVAq/TvBWYaGz8gh9VnXz/7
lVxvbcJcUuEoxJu+EIUf+KIoZz5iwWhrPwM6UoD3EKmm83M3XnC3JAFbAVUIX1ny
5dbd+xD9bvLgLWIzv0bxYslMnorrj4dSNwPal1Pi2NAmQx/TfNsQYf808Kg8dy2I
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291444067244393459283535235295135233167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ANTWERPEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lange Nieuwstraat 101'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Artesis Plantijn Hogeschool Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.ap.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21554722241146445812391504574998919264240418631447788903062843013179980183391501042762503392163221558442849746486056844297959154608039644350017985419148162878207803547008758733038145385660378583018472402245103137752573463177488404005823701969102332550730396573250414298213239400224096420878193937688173114124513248478074524165332569121384997562819040109312445596702757446401191914237714383477996995653817932301285721911821101395990163505050548959322559696713643849133777358667709292124533898591822024366281759846853518295742410090596232498765421466186917065469924304211255657939341045890142228230780399248837677254791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9b9483136d0eb9a79246e8970bca769b92f3a07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000175dabf63f10000040300473045022100d9105432d6aa31d4004ae5800f159c0924399bb7123914ea1d4354d1084756fa0220076b7ffb7caacb189c6e80d678c56ec07f401fba3456eca18cc24d3f0a5854af0077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000175dabf64800000040300483046022100e71d4b47bcd05297f04196d1ff2468728d61327e24dffc17f4c0bf6f8df65557022100c2a24d5c7e22411382a853485d51acae82aea4be5a8a4a1acb8685bd9a7c9968
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ap.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008ccf813f8c60e64d67bde5068bd59a18a596dcd026fd8be449fca2e4f383f90d11a7d92d1d82957e6eeec88eac61695778e771e7a4fcd896835f4a3762323e090292e37b05e16fb2db626c31cc6abcd70590d47069638486c9dbb743e9d92fa09ed23726b1503cddecf5b90a0f929c324be8fb40c9c0b955481570327d228a2853b95579c66721f5a60851a7632090047ab96b188ffabef7d8efe35318eb6506d116801c25dbfe44f16eed8b6a298cda576f57b89ea25e44aaea5fbe58af09a046e690ab1cdd977e8efbc167944f3b633e16596e7217be1a06b3947aa0cd98d26601ecde220aecdc8495fc66b1c50d5ebf78b45d95a59706fb01e963907effba2aad99f580aff7b789a2794bd418c9694e201a7b3f5b0ab3dc00c47e7d1f9eb8827d7ce543f286ebd1d8da98e545538140943c0aee89ac5504ffcc64cb33b21b64802d1740f1f1f3073be48c9277b5cc4ac010a3cf6c87d3dc642ca456b4f327e5d4ca13e52026d98877ff0869c3f3560ce2520a38928a1958c9ab251cf7b16330cffec520fc3346d1dc37efad8fec85c34b2c2bf07ae434fb88a0f3ba0ad06ca1c80af1a5eb3f5e539bebb2efe70330c0ebdfeed2a76d23cad4432263180d809c6f8904540aa23125a9d0ce9f913162b85b3e58653d1cbaaa7ab2d3a9a45e51655f72789168d276725fd0ec3262598034faf6a03af637e88d5ed8b001dd7587