*.ibz.be

- Federale Overheidsdienst Binnenlandse Zaken -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number bb:d3:ec:37:59:33:13:16:87:7a:31:c9:8e:e4:d4:cc was issued on by GEANT Vereniging.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Binnenlandse Zaken

Organization: Federale Overheidsdienst Binnenlandse Zaken
Organization unit: Federal Public Service Interior
Address: Rue de Louvain 1
Postal code: 1000
State / Province: Bruxelles
Locality: Bruxelles
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): bb:d3:ec:37:59:33:13:16:87:7a:31:c9:8e:e4:d4:cc
Serial Number (int): 249666000882751428172844245427429889228
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 90:fd:5a:89:37:f1:6c:4b:dd:4e:90:29:de:1a:57:ce:ea:45:c1:f4
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 87:46:07:07:97:77:a9:23:be:2c:9b:a5:30:b7:c7:83:9e:8d:84:70
Fingerprint (sha256): 47:2b:f8:2a:f2:de:cd:3a:dc:f4:2d:6f:b4:04:d2:e0:99:94:e4:20:4e:e9:81:0e:7a:74:69:18:35:e9:10:69

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.ibz.be

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibz.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibz.be
autodiscover.ibz.fgov.be
autodiscover.mibz.fgov.be
ibz.fgov.be
mibz.fgov.be

Other certificates including the domain name ibz.be

(limited to 100 certificates)
PPT-AIR.IBZ.BE
ibz.be
ibz.be
icmsystem.be
ibz.be
ibz.be
box.ibz.be
box.ibz.be
PPT-AIR.IBZ.BE
ibz.be
2016.ibz.be
dofi.ibz.be
*.ibz.be
PPT-AIR.IBZ.BE
ibz.be
ibz.be
ibz.be
*.ibz.be
DVZRRNWS.IBZ.BE
*.ibz.be
arrivalcenterappointment.ibz.be
ibz.be
ibz.be
ibz.be
*.ibz.be
ibz.be
www.mariageblanc.be
ibz.be
icmsystemprod.ibz.be
ibz.be
ibz.be
*.ibz.be
evigilis-uat.ibz.be
dofi.ibz.be
ibz.be
binnenland.fgov.be
www.rampen.be
ibz.be
*.ibz.be
ibz.be
dofi.ibz.be
services-dvzoe.ibz.be
binnenland.fgov.be
pnr-navitaire-test.ibz.be
*.ibz.be
2016.ibz.be
PPT-AIR.cust1.IBZ.BE
ibz.be
TestJMH.ibz.be
encryption.services-acc-dvzoe.ibz.be
www.xn--calamits-h1a.be
dofi.ibz.be
sts.ibz.be
*.ibz.be
ibz.be
ibz.be
icmsystemacc.ibz.be
ibz.be
ibz.be
*.ibz.be
emm.ibz.be
2016.ibz.be
ibz.be
2016.ibz.be
ibz.be
evigilis.ibz.be
services-acc-dvzoe.ibz.be
2016.ibz.be
ibz.be
ibz.be
*.ibz.be
*.ibz.be
*.IBZ.BE
ibz.be
services-tst-dvzoe.ibz.be
ibz.fgov.be
ibz.be

Certificate

The complete raw certificate details for *.ibz.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuYn7lU3y/06X23EVNxDD
8hKr4qiQcnd6zvYHjB/h3wsk+QTVLTReAUCMHU/w4eUDxj+5gXHqVkLJr3MQc2mv
AacrNGSAxLuY5sU6njDJSn77hURUHtC+U1FBXo9piq2ScUc+S1IrFQHSyplUf94E
FU0NEzdAjABZVTxioT3o13hGK3Fgp3rA+GsArzh5yxUIVHUrvGMmlhe2DVLi9Y4E
I0uBxsYSsO6/u+hJ4vh8bmtr1HmwQP/iSslgahgFSZZ1Fa0QsN5j/XLPyJqIz43K
fwsTQWFcPNNawSN4b/MwXVHIDk1EnYQm7XR0big1poYcG1Sw4d3i/c49ifl7XEIz
Z1k0ZMOAbzIDFcUtqfPxMzGmTuujeHQUif6dT2l4eJhvSeXPSbFexGR7heGhmNX5
v+h3gDwosQ+3hJfWlYjRxl4gnF2h5/OHWqRJ74QbG6O5EE+xya2y3rTfHncDhgnx
McTCRiGjRR/dGXUBdK/V9ANhX/XXvYevgKHsVXhpNm3FPFHFVwoCC+n8D3mFUxP1
XmlmxkAs1LhXZFFziqgQ+8vxg2PmM9ZJ9PHI2K/duEssCM6GkpPE9qFTdU6P3TE7
ZA7NOw13BAVmRUPf5N0bWPwkHz7zqbBK3U/7Gdtg2Dxww/KmmdgMqjCio9w1Fvrq
OYBT0gsYy8tcrQTaWZMsSf8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249666000882751428172844245427429889228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rue de Louvain 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Binnenlandse Zaken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Public Service Interior'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibz.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756933060767735072637745225514087706042115290471332469163837604091600459201130001460535822238997523177810625469876180816864887069853946222288920561046318821843220630151546349226158202299789320052645816670316659675423273261621381345671644952798591029419642550064606783101068107423383187521246516944396800367983381474616649227656221035515924941898192182045559167992519167734640098518740793029755697970292281040410914586926030191190041432606676228002138478076865547087406032194752609332932902130920385188242662036682159590270384580816008964886694367991959825370719159504667220997890569968686227151991631855288436737197951668217520140919928553237014140689967424226387024273153918415298285702051139645384089148759298034082035058198327141428252068722771914529895970196160478711228087345003378742597328771805971589881692129764939425375726926059225802825100952839155588779419960093635913545108386043831127866759864137234293078546620095180706228348525048919757126679589812967224368687796761058192043313560292540650510305861302442476599770125492140463827253074210779796711218744909960177621341161112648635715402364373378538624034084057179065548174453926469221036070488188251405632449978251698771971518605272486115100911840065223932414815652351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90fd5a8937f16c4bdd4e9029de1a57ceea45c1f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibz.fgov.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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