bel1fedlaeaacc01.fed.oncsfm.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 3f:96:b4:75:d8:73:04:6a was issued on by GoDaddy.com, Inc..

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=bel1fedlaeaacc01.fed.oncsfm.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:96:b4:75:d8:73:04:6a
Serial Number (int): 4582048089131648106
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 2e:94:54:ad:7e:c6:fe:46:35:b2:99:8a:65:6b:ff:b3:91:dc:fe:35
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 68:b2:e2:b0:35:aa:c5:88:90:2d:6b:63:81:13:25:27:5d:8b:40:99
Fingerprint (sha256): 3f:ee:25:fc:38:43:3c:3b:17:72:83:c5:c0:76:4d:7e:cd:e7:8f:08:8e:6d:b9:68:6b:12:7d:2c:fc:5d:9a:3f

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-5847.crl

Check the revocation status for certificate bel1fedlaeaacc01.fed.oncsfm.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bel1fedlaeaacc01.fed.oncsfm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.fagg-afmps.be
bel2fedlaecacc01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
www.bel1fedlaeaacc01.fed.oncsfm.com
sip.economie.fgov.be
bel1fedlaebwcon01.fed.oncsfm.com
sip.bosa.fgov.be
bel2fedlaebacc01.fed.oncsfm.com
bel1fedlaedacc01.fed.oncsfm.com
sip.mi-is.be
bel2fedlaeewcon01.fed.oncsfm.com
sip.health.fgov.be
sip.famiwal.be
bel2fedlaecwcon01.fed.oncsfm.com
sip.minfin.fed.be
bel1fedlaeewcon01.fed.oncsfm.com
bel2fedlaedacc01.fed.oncsfm.com
sip.ehealth.fgov.be
sip.fed.oncsfm.com
sip.sfpd.fgov.be
bel1fedlaeeacc01.fed.oncsfm.com
bel1fedlaecwcon01.fed.oncsfm.com
sip.minsoc.fed.be
sip.sigedis.fgov.be
sip.federaalombudsman.be
sip.favv-afsca.be
sip.onssrszlss.fgov.be
sip.smals.be
sip.riziv-inami.fgov.be
bel2fedlaedwcon01.fed.oncsfm.com
bel1fedlaecacc01.fed.oncsfm.com
sip.buildingsagency.be
sip.caami-hziv.fgov.be
bel2fedlaeeacc01.fed.oncsfm.com
bel2fedlaebwcon01.fed.oncsfm.com
access.fed.oncsfm.com
sip.fedris.be
bel1fedlaebacc01.fed.oncsfm.com
sip.ksz-bcss.fgov.be
sip.rvaonem.fgov.be
sip.onva-rjv.fgov.be
bel1fedlaedwcon01.fed.oncsfm.com
sip.meta.fgov.be

Other certificates including the domain name oncsfm.com

(limited to 100 certificates)
bel2fedlfeawebex01.fed.oncsfm.com
ap05scjlfeawebex01.scj.oncsfm.com
eu08scjlaeaacc01.scj.oncsfm.com
bel1fedgengax.fed.oncsfm.com
bel1fedgenucs.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
ap04scjowwebex01.scj.oncsfm.com
eu08scjlaeaacc01.scj.oncsfm.com
na09scjlfeawebex01.scj.oncsfm.com
fed.fbu.oncsfm.com
bel2fedgengax.fed.oncsfm.com
bel1fedgengax.fed.oncsfm.com
eu08scjlaeaacc01.scj.oncsfm.com
bel1fedowwebex01.fed.oncsfm.com
eu06scjowwebex01.scj.oncsfm.com
na09sollaeaacc01.sol.oncsfm.com
fed.sat.oncsfm.com
*.fed.oncsfm.com
eu08scjowwebex01.scj.oncsfm.com
ap05scjowwebex01.scj.oncsfm.com
na09sollfeawebex01.sol.oncsfm.com
bel2fedowwebex01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
*.qtc.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
*.scj.oncsfm.com
ap04scjlfeawebex01.scj.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
*.fed.oncsfm.com
na09sollfeawebex01.sol.oncsfm.com
fed.sol.oncsfm.com
eu08scjlfeawebex01.scj.oncsfm.com
na09solowwebex01.sol.oncsfm.com
na09scjlfeawebex01.scj.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
bel2fedowwebex01.fed.oncsfm.com
bel2fedlaeaacc01.fed.oncsfm.com
*.fed.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
na01l01webex01.l01.oncsfm.com
ap05scjlaeaacc01.scj.oncsfm.com
bel1fedlaebacc01.fed.oncsfm.com
bel1fedowwebex01.fed.oncsfm.com
eu08scjlfeapool.scj.csfm.global
bel1fedlaeaacc01.fed.oncsfm.com
*.fed.oncsfm.com
bel1fedlaebacc01.fed.oncsfm.com
bel2fedlfeawebex01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
eu08scjlfeawebex01.scj.oncsfm.com
na09scjlfeawebex01.scj.oncsfm.com
*.scj.oncsfm.com
ap05scjlfeapool.scj.csfm.global
bel1fedlfeawebex01.fed.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
na12scjowwebex01.scj.oncsfm.com
na09sollaeaacc01.sol.oncsfm.com
na09scjowwebex01.scj.oncsfm.com
fed.sol.oncsfm.com
scj.oncsfm.com
eu06scjlfeawebex01.scj.oncsfm.com
*.fed.oncsfm.com
na09scjowwebex01.scj.oncsfm.com
ap05scjowwebex01.scj.oncsfm.com
bel2fedlaeaacc01.fed.oncsfm.com
sol.oncsfm.com
na09sollfeapool.sol.csfm.global
bel2fedgenucs.fed.oncsfm.com
ap03scjlfeapool.scj.csfm.global
fed.np1.oncsfm.com
ap03scjlaeaacc01.scj.oncsfm.com
*.fed.oncsfm.com
ap04scjlfeapool.scj.csfm.global
*.fed.oncsfm.com
*.z01.oncsfm.com
bel1fedlfeawebex01.fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
sol.oncsfm.com
na12scjlfeapool.scj.csfm.global
bel1fedlfeawebex01.fed.oncsfm.com
na12scjlaeaacc01.scj.oncsfm.com
*.fed.oncsfm.com
*.z01.oncsfm.com
na09scjlaeaacc01.scj.oncsfm.com
na09sollaeaacc01.sol.oncsfm.com
bel1fedowwebex01.fed.oncsfm.com
bel2fedowwebex01.fed.oncsfm.com
fed.oncsfm.com
bel1fedlaeaacc01.fed.oncsfm.com
bel1fedlaebacc01.fed.oncsfm.com
na12scjlfeawebex01.scj.oncsfm.com
na09sollfeawebex01.sol.oncsfm.com
ap03scjlfeawebex01.scj.oncsfm.com
fed.stn.oncsfm.com
*.z01.oncsfm.com
eu06scjowwebex01.scj.oncsfm.com
bel1fedlaebacc01.fed.oncsfm.com
eu06scjlfeapool.scj.csfm.global

Certificate

The complete raw certificate details for bel1fedlaeaacc01.fed.oncsfm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK3jCCCcagAwIBAgIIP5a0ddhzBGowDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz
LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1
cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNTI1MTIzNjQ2WhcN
MjQwNjI1MTIzNjQ2WjAqMSgwJgYDVQQDEx9iZWwxZmVkbGFlYWFjYzAxLmZlZC5v
bmNzZm0uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuObB1Ia1
u+tmmgrmvXiIgc8SKTvBC86AILdRAEvM5W6m++L0TbgKIQe2bmZhL/7qze2fbYB3
2wOfT1yiEyuUxRHT1bOvOCweLmumMXYWWjXloZQiQyH5BWzYSVEZGbfnPRXw0WWy
1halzBzBl8Ann605kHOgpvui3R0CuSkp8ecvb/bcsPA4kx49HUgqgtDppdoyQM2D
M0V/uB8/NthRXCT9h6hfv/mq9mspP/EEOAaNpzq4bB38yvyK/hZ/x3krhso1twkh
/dj5ZDK7JeCbfOkE3Ew1ob/bHzSknrpTa0eM/zWK6m/P/cWqw4gIWZ24hVd+tKox
RLtA0nv7OfEWiwIDAQABo4IHezCCB3cwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w
LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS01ODQ3LmNybDBd
BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j
ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG
CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j
b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t
L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts
s/C0LIDOMIIEYwYDVR0RBIIEWjCCBFaCEXNpcC5mYWdnLWFmbXBzLmJlgh9iZWwy
ZmVkbGFlY2FjYzAxLmZlZC5vbmNzZm0uY29tgh9iZWwxZmVkbGFlYWFjYzAxLmZl
ZC5vbmNzZm0uY29tgiN3d3cuYmVsMWZlZGxhZWFhY2MwMS5mZWQub25jc2ZtLmNv
bYIUc2lwLmVjb25vbWllLmZnb3YuYmWCIGJlbDFmZWRsYWVid2NvbjAxLmZlZC5v
bmNzZm0uY29tghBzaXAuYm9zYS5mZ292LmJlgh9iZWwyZmVkbGFlYmFjYzAxLmZl
ZC5vbmNzZm0uY29tgh9iZWwxZmVkbGFlZGFjYzAxLmZlZC5vbmNzZm0uY29tggxz
aXAubWktaXMuYmWCIGJlbDJmZWRsYWVld2NvbjAxLmZlZC5vbmNzZm0uY29tghJz
aXAuaGVhbHRoLmZnb3YuYmWCDnNpcC5mYW1pd2FsLmJlgiBiZWwyZmVkbGFlY3dj
b24wMS5mZWQub25jc2ZtLmNvbYIRc2lwLm1pbmZpbi5mZWQuYmWCIGJlbDFmZWRs
YWVld2NvbjAxLmZlZC5vbmNzZm0uY29tgh9iZWwyZmVkbGFlZGFjYzAxLmZlZC5v
bmNzZm0uY29tghNzaXAuZWhlYWx0aC5mZ292LmJlghJzaXAuZmVkLm9uY3NmbS5j
b22CEHNpcC5zZnBkLmZnb3YuYmWCH2JlbDFmZWRsYWVlYWNjMDEuZmVkLm9uY3Nm
bS5jb22CIGJlbDFmZWRsYWVjd2NvbjAxLmZlZC5vbmNzZm0uY29tghFzaXAubWlu
c29jLmZlZC5iZYITc2lwLnNpZ2VkaXMuZmdvdi5iZYIYc2lwLmZlZGVyYWFsb21i
dWRzbWFuLmJlghFzaXAuZmF2di1hZnNjYS5iZYIWc2lwLm9uc3Nyc3psc3MuZmdv
di5iZYIMc2lwLnNtYWxzLmJlghdzaXAucml6aXYtaW5hbWkuZmdvdi5iZYIgYmVs
MmZlZGxhZWR3Y29uMDEuZmVkLm9uY3NmbS5jb22CH2JlbDFmZWRsYWVjYWNjMDEu
ZmVkLm9uY3NmbS5jb22CFnNpcC5idWlsZGluZ3NhZ2VuY3kuYmWCFnNpcC5jYWFt
aS1oeml2LmZnb3YuYmWCH2JlbDJmZWRsYWVlYWNjMDEuZmVkLm9uY3NmbS5jb22C
IGJlbDJmZWRsYWVid2NvbjAxLmZlZC5vbmNzZm0uY29tghVhY2Nlc3MuZmVkLm9u
Y3NmbS5jb22CDXNpcC5mZWRyaXMuYmWCH2JlbDFmZWRsYWViYWNjMDEuZmVkLm9u
Y3NmbS5jb22CFHNpcC5rc3otYmNzcy5mZ292LmJlghNzaXAucnZhb25lbS5mZ292
LmJlghRzaXAub252YS1yanYuZmdvdi5iZYIgYmVsMWZlZGxhZWR3Y29uMDEuZmVk
Lm9uY3NmbS5jb22CEHNpcC5tZXRhLmZnb3YuYmUwHQYDVR0OBBYEFC6UVK1+xv5G
NbKZimVr/7OR3P41MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYhS7EOkAAAEAwBHMEUCIGSvnF72
+yQsrIn1cqMgDOrptB/u3iqUZIgPUO6RwYtfAiEAieby0n1e9+qDgDF80vNdfJ8m
8wwKowQneVBtUDc3tH8AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAYhS7EUTAAAEAwBHMEUCIEy6odEyD7zXf9iDsAi80vhagVDJNP/+zrHXl2kD
O24iAiEA6JAeuUFdeqLwy4SFhCUM9pwsdWY8kdrFIAa7L9R0LiMAdgDatr9rP7W2
Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYhS7EaHAAAEAwBHMEUCICu+BpBt
mN989Rwj1ywI2p4w6c6K6y++4odbCypqYan2AiEAiUZyP9+4uHhgBamqxo1a6x7+
KVaoqcH5HkamEztfdoAwDQYJKoZIhvcNAQELBQADggEBAFQbfquUn3REM0z8R/pN
OxtzCPMf9EQgAWthe4wEjjOZB4c6uO0kzM/cTAX+OQYgTlbi61hdPAFrbbnJW/sU
y3Q5ZNHst6tAU4CQD+YixLLgTefwrixVLcU0Y9UhAaFr51uI924vtHEvfcb1ZgBB
aKO4Nf5GbKWEpPsSg4PHGUaJQ6OE82AuZ26AHEmD5WjhyA6QNO90sXttsh/R+UB5
cEzSBT/J6FF8+29havRRb1C7ZPAB5wMTaRwBT7IyLbU9oQVia1L2RiDkEFiRXNTp
HJCfjavioSULi/u3JS9d5vvjnSaWhgAW3wGpOlzEj68hPUH+HUrPRkCZm/SGTua8
6c8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuObB1Ia1u+tmmgrmvXiI
gc8SKTvBC86AILdRAEvM5W6m++L0TbgKIQe2bmZhL/7qze2fbYB32wOfT1yiEyuU
xRHT1bOvOCweLmumMXYWWjXloZQiQyH5BWzYSVEZGbfnPRXw0WWy1halzBzBl8An
n605kHOgpvui3R0CuSkp8ecvb/bcsPA4kx49HUgqgtDppdoyQM2DM0V/uB8/NthR
XCT9h6hfv/mq9mspP/EEOAaNpzq4bB38yvyK/hZ/x3krhso1twkh/dj5ZDK7JeCb
fOkE3Ew1ob/bHzSknrpTa0eM/zWK6m/P/cWqw4gIWZ24hVd+tKoxRLtA0nv7OfEW
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4582048089131648106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 12:36:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 12:36:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bel1fedlaeaacc01.fed.oncsfm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23341638705030426912214176769128752733811620848379410981736182391143685277699640534099057689955260626908056885127317396975102924191117854616739300314860894580890592851276571616474366863641586946241280168103413606662801657134970336733236854301180875197975296527510311096585986670135399728738278256450703967064766831394644828968792163061702397282688977009481783620121913155998388745276123065518192484255298092498265347287466333820558930278289928774809815488008885206887914454255848689933428484861216529461623333128130040933503317714934476362407004606233479843928512673439930629952662315043909094228144147189590714816139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-5847.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fagg-afmps.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaecacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeaacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bel1fedlaeaacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.economie.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaebwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bosa.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaebacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaedacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mi-is.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaeewcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.health.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.famiwal.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaecwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minfin.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeewcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaedacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ehealth.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sfpd.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaeeacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaecwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minsoc.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sigedis.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.federaalombudsman.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.favv-afsca.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.onssrszlss.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.smals.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.riziv-inami.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaedwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaecacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.buildingsagency.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.caami-hziv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaeeacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel2fedlaebwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fedris.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaebacc01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ksz-bcss.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rvaonem.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.onva-rjv.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bel1fedlaedwcon01.fed.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.meta.fgov.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e9454ad7ec6fe4635b2998a656bffb391dcfe35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018852ec43a40000040300473045022064af9c5ef6fb242cac89f572a3200ceae9b41feede2a9464880f50ee91c18b5f02210089e6f2d27d5ef7ea8380317cd2f35d7c9f26f30c0aa3042779506d503737b47f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018852ec4513000004030047304502204cbaa1d1320fbcd77fd883b008bcd2f85a8150c934fffeceb1d79769033b6e22022100e8901eb9415d7aa2f0cb848584250cf69c2c75663c91dac52006bb2fd4742e23007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018852ec4687000004030047304502202bbe06906d98df7cf51c23d72c08da9e30e9ce8aeb2fbee2875b0b2a6a61a9f60221008946723fdfb8b8786005a9aac68d5aeb1efe2956a8a9c1f91e46a6133b5f7680
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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