finelts.acc.minfin.be

- Service Public Federal Finances -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 37:5c:dd:d8:a8:35:00:f3:1d:e2:a8:53:44:cc:5a:6b was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Service Public Federal Finances

Organization: Service Public Federal Finances
Organization unit: 0308357159
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 37:5c:dd:d8:a8:35:00:f3:1d:e2:a8:53:44:cc:5a:6b
Serial Number (int): 73589730657018646454932631976604883563
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f2:90:16:be:86:f6:8c:d3:b1:d4:0e:f6:53:5a:d7:e0:36:ef:ba:a9
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 64:4b:ed:d5:e0:5d:3c:39:89:c0:26:10:e1:d4:57:67:1c:29:40:51
Fingerprint (sha256): 42:83:94:47:4f:08:55:9d:b0:7d:ba:11:34:06:b7:a2:9c:b4:d2:fe:0f:24:44:c3:bf:91:61:31:8b:36:b8:ea

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate finelts.acc.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for finelts.acc.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

finelts.acc.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for finelts.acc.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHITCCBQmgAwIBAgIQN1zd2Kg1APMd4qhTRMxaazANBgkqhkiG9w0BAQwFADBE
MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE
AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjExMDEzMDAwMDAwWhcNMjIxMDEzMjM1
OTU5WjCBlTELMAkGA1UEBhMCQkUxJzAlBgNVBAgMHkJydXhlbGxlcy1DYXBpdGFs
ZSwgUsOpZ2lvbiBkZTEoMCYGA1UEChMfU2VydmljZSBQdWJsaWMgRmVkZXJhbCBG
aW5hbmNlczETMBEGA1UECxMKMDMwODM1NzE1OTEeMBwGA1UEAxMVZmluZWx0cy5h
Y2MubWluZmluLmJlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuzJX
9V7hKf3KWPE2Jx0As132dGT6/C2O+Y2LJNGUJrfXCRiRSCxye/vRKQNT/t8oqVPI
gilN5ztQtZ71SJmP2sBhzAzSAR4vdMciGNf7ywRy8h2BTdWRyfHbdtAzbu6XyK3R
E4XQkSNsr6keEG6O0BdMCsR1Y4UOnYI1MmqbKhAI9WNqObZX+xtC22HTLQTr3iM4
lnIbs9qRA/fMvrlmNujQlnNrz2MpcyF93vpejt8HvrQidj1+6JUR4SH23mMNBuQX
n5ebFDii6p7V/AtS5801cCqQAT3fn4x16rh2kaMdZ5LhoLA03mU8RQXTgBdrD16h
CbI3yjcXjRDJghKEJfQgt8oDnY0GQwQebXXyfYZKjkIKaWM1+V4dVOEuoiv0XEDJ
3xxuCfFKii0WgnQLHicnKn1F3zsDWxj8CF6KcqV0zv2rkQm0fdb3tHCXBpD9i8ba
L0z/wsjC00jPV8tdB+j+79CMcAaMsAjRWUC2CP7v79YGB1Pi+6AD/TfOW6dhB8aG
gMSZtqZ7kGh4099OTho29ad4AreUoOnjk9cXY4NoyEzhntWJoT2eZKF64ihZZuru
NfLR1UhTAQiBby2KXGaWFHxDf9E4/P0ELumIbj4xGgmKuBJeso6n6O3B6Q3Q+bMp
/SfbUaDgQMB4nZogxQwnAHE3pRcA0F7DAy/AQZ8CAwEAAaOCAbswggG3MB8GA1Ud
IwQYMBaAFG8dNUkQbDL6WaCevIroH5W+cXoMMB0GA1UdDgQWBBTykBa+hvaM07HU
DvZTWtfgNu+6qTAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQIC
TzAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwB
AgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNv
bS9HRUFOVE9WUlNBQ0E0LmNybDB1BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKG
Lmh0dHA6Ly9HRUFOVC5jcnQuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQw
KQYIKwYBBQUHMAGGHWh0dHA6Ly9HRUFOVC5vY3NwLnNlY3RpZ28uY29tMBMGCisG
AQQB1nkCBAMBAf8EAgUAMCAGA1UdEQQZMBeCFWZpbmVsdHMuYWNjLm1pbmZpbi5i
ZTANBgkqhkiG9w0BAQwFAAOCAgEAbx7VCchF4z2ODGUhrLnGSf4kTqO4rxc8900t
54ox0AP9AosJGbIY4WZjiaD+inTbYDB/6/cVVBzrlkx7MQ/EdWFRbTuq0xIXUvq0
heMX/9C4tMXFZ4UZXeGoHhJmMvcwzP1jA1kPX2XF33xLrpO64HzyVaa9G1kJV650
RPeavdx1Kt3Cfu41Sew9K6WzWEWlNKN6lrjsie/cO2iNx1SGVvv+4m89KN/T5/xP
x9npB1GPdj1McbJVvXNbc3NTiSdvbOEdD8MoMeYx8XE1+j+o5wVSxoUSvR1OaXk8
ouVy240Yy2ciOLbyhuYeDR3WHXkypd6lBXXmAQrwYWBp/KoXkAD80KRdAYMgLv4M
dWjSdkBQT0H5DtNIRpOM9JOmt2Bz2pht/aoQ8XF3RwCchoBRnrJf4qmsxxuXvLpd
0OuTLwRLqIARaJmPB86llgprWhGegx9ihumXxJp06DTts6ipe7e3W2YvTvTpPJ2d
Aqk1CyO2o7IYCTiX5DVCs0u9N9cWQpLutGEbMoWSqiIEzcQ8UcCIYVNKPdpeuE47
gHCqsXRFicifnMnShQwIq4Z62NGQOTLV4wzMUwnhCPb3jD/s/FQBUWDh1inAKALO
Nr5ZL95kOhvAcd8IGki1EMPim0dxVCjLJOQ2l3U6JozMN91bWj/leUfpNq48H9jV
BX3dgGA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuzJX9V7hKf3KWPE2Jx0A
s132dGT6/C2O+Y2LJNGUJrfXCRiRSCxye/vRKQNT/t8oqVPIgilN5ztQtZ71SJmP
2sBhzAzSAR4vdMciGNf7ywRy8h2BTdWRyfHbdtAzbu6XyK3RE4XQkSNsr6keEG6O
0BdMCsR1Y4UOnYI1MmqbKhAI9WNqObZX+xtC22HTLQTr3iM4lnIbs9qRA/fMvrlm
NujQlnNrz2MpcyF93vpejt8HvrQidj1+6JUR4SH23mMNBuQXn5ebFDii6p7V/AtS
5801cCqQAT3fn4x16rh2kaMdZ5LhoLA03mU8RQXTgBdrD16hCbI3yjcXjRDJghKE
JfQgt8oDnY0GQwQebXXyfYZKjkIKaWM1+V4dVOEuoiv0XEDJ3xxuCfFKii0WgnQL
HicnKn1F3zsDWxj8CF6KcqV0zv2rkQm0fdb3tHCXBpD9i8baL0z/wsjC00jPV8td
B+j+79CMcAaMsAjRWUC2CP7v79YGB1Pi+6AD/TfOW6dhB8aGgMSZtqZ7kGh4099O
Tho29ad4AreUoOnjk9cXY4NoyEzhntWJoT2eZKF64ihZZuruNfLR1UhTAQiBby2K
XGaWFHxDf9E4/P0ELumIbj4xGgmKuBJeso6n6O3B6Q3Q+bMp/SfbUaDgQMB4nZog
xQwnAHE3pRcA0F7DAy/AQZ8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73589730657018646454932631976604883563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0308357159'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'finelts.acc.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763695721654787698127386170047199991818744290953714986717632270940654744616432709507298862261190028344420966100691910657468940243606757645793678323474151439258001369824569506533127437210748829317933582411425203523266789716617000976834648094914689644214969092224854007007886489767562016244389868715934331017360264375485009932628749239216827452653011277123752621775444449367131772358521691260978588062740989367099162583163390188934067766825002466959792198604376548947485293742539247816890716527247769303157204713686979125642892363444179267268248085608322657338213099074611476361984328452766033511524574619391760090287980153480502695659579477761815737415899275261665898298205351034854342009415090951659069842572614226592521818658647347799968022191478269365201639825192610169745608186941197702419431990937705723827663462711970780038703384587925686780085982581901202739450905434198962618542207772145765277585140687685967666826784959772161162781891535959050175236334214474753516286477122513817655047978405927593069657588366470212417543858129413571557014935474008973075763270701066036322495214808658227112840727855409886578610108321569163729012366999114243922395394386658540346548965683235178289756564685818742687783258290842772474418971039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f29016be86f68cd3b1d40ef6535ad7e036efbaa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finelts.acc.minfin.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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