developpementdurable.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 23:62:40:43:99:96:94:4d:5e:35:75:be:8e:7b:f0:21 was issued on by GEANT Vereniging.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 23:62:40:43:99:96:94:4d:5e:35:75:be:8e:7b:f0:21
Serial Number (int): 47033128374643236534882196890452750369
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: de:45:d8:1a:96:00:81:9f:e8:84:5a:16:1c:ca:61:66:2a:d7:f4:f8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0b:20:75:f7:ee:3e:24:eb:35:15:95:1a:33:1b:c1:74:11:89:42:57
Fingerprint (sha256): 3d:80:f6:29:1f:0c:4e:37:f0:f4:4c:50:46:69:8a:87:4e:7a:17:dd:bb:d4:9e:a0:2c:74:7e:76:02:51:ad:d2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate developpementdurable.be

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developpementdurable.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developpementdurable.be
cidd.be
cidd.belgium.be
dagduurzameontwikkeling.be
duurzameontwikkeling.be
fido.belgium.be
fpssd.belgium.be
icdo.be
icdo.belgium.be
ifdd.belgium.be
journeedeveloppementdurable.be
opdne.belgien.be
poddo.be
poddo.belgie.be
poddo.belgium.be
semainedd.belgium.be
sppdd.be
sppdd.belgique.be
weekdo.belgium.be
www.cidd.be
www.cidd.belgium.be
www.dagduurzameontwikkeling.be
www.developpementdurable.be
www.duurzameontwikkeling.be
www.fido.belgium.be
www.fpssd.belgium.be
www.icdo.be
www.icdo.belgium.be
www.ifdd.belgium.be
www.journeedeveloppementdurable.be
www.opdne.belgien.be
www.poddo.be
www.poddo.belgie.be
www.poddo.belgium.be
www.semainedd.belgium.be
www.sppdd.be
www.sppdd.belgique.be
www.weekdo.belgium.be

Other certificates including the domain name developpementdurable.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for developpementdurable.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47033128374643236534882196890452750369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developpementdurable.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741656399456685698400356093808876594965160885460128294648808006070740192383174430592759886437760948945971046416678495057125078847128104279960995898983389248014989774937916121972947423218053431035279223868936906379892655385922382681304678382834189880706657429711773101313214528224386512911856856171999629859369409674152815997242210405190230113809868587539984780427822102057972552080469223440091064887000185299372846867335348563220849801253908400526465187842074521517033974651671243160922645061923645701213537379991566853563259801512018806440549697212473591818583359035745283031931189934468114641623735540830824581899936250289480299905656157949186873787813444046164332953587087698050568572889880037788844925721507376130786649081021915414601525098576373603137811228594539593681950177741009021000660188993378005280578165108095261279606034068574418806502449775084297929252531506721284623962674925206327750221088152825176177209758930720753044307569471808877056485680127194734496621414879767402378580999338301301361008462590763163440842438304596076094621611816651884437557235676536858252802418774092312424939695610092220842408904990280039288274472325010380022121571083312585820234685622812849999563104518081908410449873332493389247244208197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de45d81a9600819fe8845a161cca61662ad7f4f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weekdo.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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