ssl4all-177.le.ssl.lxweb1.edpnet.net

Issued by R3

About this certificate

This digital certificate with serial number 04:b5:d1:86:81:0d:f1:22:13:9e:42:10:d9:32:fa:e0:66:02 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl4all-177.le.ssl.lxweb1.edpnet.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:d1:86:81:0d:f1:22:13:9e:42:10:d9:32:fa:e0:66:02
Serial Number (int): 410318759176164371624945562136041981240834
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5d:f7:b5:70:b7:6f:fe:c4:af:97:6a:8d:89:ea:db:25:74:b3:f7:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:dc:06:30:cb:41:27:6b:9c:d8:4d:cd:cd:e1:f5:17:52:bb:c0:4b
Fingerprint (sha256): 4f:ff:d1:fa:8b:df:f9:42:0f:0f:d0:78:ba:78:a6:54:7f:73:6a:49:d1:c5:df:75:6d:01:2c:c4:63:ff:6d:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl4all-177.le.ssl.lxweb1.edpnet.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl4all-177.le.ssl.lxweb1.edpnet.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alusta.be
ameelec.be
audex-architecture.be
baa.be
barefootc.be
batterijland.be
betracked.be
boekhoudendodec.be
coralta.be
crlc.be
depaire.be
digimatic.be
digimotec.be
jandhooghe.be
job-beurs.be
marcel-depaire.be
mymessis.be
new.internationalglassfittings.com
papasava.be
quasas.be
rusthuisstrijland.be
schuldbemiddelingwaasland.be
simbios.eu
ssl4all-177.le.ssl.lxweb1.edpnet.net
tandartspraktijkcoremans.be
webpub.be
werkenbijreal.be
www.alusta.be
www.ameelec.be
www.artclub.be
www.artecoiffure.be
www.asitshould.be
www.barefootc.be
www.betracked.be
www.boekhoudendodec.be
www.broekxonweb.be
www.busytec.be
www.coralta.be
www.crlc.be
www.depaire.be
www.digimatic.be
www.digimotec.be
www.formaecolore.be
www.idc.be
www.internationalglassfittings.com
www.jandhooghe.be
www.jmboland.be
www.job-beurs.be
www.jsmc.be
www.karinverplancke.be
www.logo-paintings.com
www.marcel-depaire.be
www.mymessis.be
www.papasava.be
www.pirec.be
www.quasas.be
www.rusthuisstrijland.be
www.simbios.eu
www.simbios.us
www.stephaneevras.com
www.tandartspraktijkcoremans.be
www.vantra.be
www.vematec.be
www.virgin-shoes.com
www.webpub.be
www.werkenbijreal.be

Other certificates including the domain name edpnet.net

(limited to 100 certificates)
ssl4all-177.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
ssl4all-72.le.ssl.lxweb1.edpnet.net
ssl4all-323.le.ssl.lxweb1.edpnet.net
ssl4all-302.le.ssl.lxweb1.edpnet.net
ssl4all-272.le.ssl.lxweb1.edpnet.net
ssl4all-177.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
www.edpnet.net
ssl4all-1.le.ssl.lxextweb.edpnet.net
ssl4all-4.le.ssl.lxextweb.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
ssl4all-317.le.ssl.lxweb1.edpnet.net
ssl4all-34.le.ssl.lxweb1.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
appstesting.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
srv-edpnet-03.edpnet.net
winbu01.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-335.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-141.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-287.le.ssl.lxweb1.edpnet.net
www.edpnet.net
ssl4all-177.le.ssl.lxweb1.edpnet.net
email.edpnet.net
ssl4all-272.le.ssl.lxweb1.edpnet.net
ssl4all-207.le.ssl.lxweb1.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
srv-edpnet-03.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-329.le.ssl.lxweb1.edpnet.net
ssl4all-72.le.ssl.lxweb1.edpnet.net
ssl4all-326.le.ssl.lxweb1.edpnet.net
*.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-338.le.ssl.lxweb1.edpnet.net
ssl4all-287.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-195.le.ssl.lxweb1.edpnet.net
ssl4all-34.le.ssl.lxweb1.edpnet.net
ssl4all-326.le.ssl.lxweb1.edpnet.net
ssl4all-341.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
*.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
ssl4all-347.le.ssl.lxweb1.edpnet.net
ssl4all-141.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-290.le.ssl.lxweb1.edpnet.net
ssl4all-344.le.ssl.lxweb1.edpnet.net
ssl4all-284.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-308.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
ssl4all-317.le.ssl.lxweb1.edpnet.net
ssl4all-195.le.ssl.lxweb1.edpnet.net
ssl4all-344.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-192.le.ssl.lxweb1.edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
*.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-296.le.ssl.lxweb1.edpnet.net
ssl4all-266.le.ssl.lxweb1.edpnet.net
ssl4all-293.le.ssl.lxweb1.edpnet.net
ssl4all-290.le.ssl.lxweb1.edpnet.net
ssl4all-207.le.ssl.lxweb1.edpnet.net
ssl4all-263.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net

Certificate

The complete raw certificate details for ssl4all-177.le.ssl.lxweb1.edpnet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKojCCCYqgAwIBAgISBLXRhoEN8SITnkIQ2TL64GYCMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDIwNzAyMzhaFw0yNDA1MDIwNzAyMzdaMC8xLTArBgNVBAMT
JHNzbDRhbGwtMTc3LmxlLnNzbC5seHdlYjEuZWRwbmV0Lm5ldDCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAJuoziNmvGe4sTmhWf/Gpus9zT//Ekuf9W55
MtVlYAb5Wx46I2hkCpqTyrprKG7Z+TRqW2LqhCvIHU7frThorFqKHvwzCthhciFb
PvLMBmIdDzLkN1cViDd6WYKBg0iSDFXCESkXcSw6gtUHE3845p7kXfmeXUAuK0Vw
H0NfttfZIMTuNAMAYIuhV+1dz1LsKHGtFinAgT6oke+wfXTwFkdIUz7Ehdl/rAMX
7wFd2SOyAr2jgm0gMcksX2BnNdhKKWEeZx5GEC3NrGd9YxOycuxox19Cq6hRZBtV
iFIw3TxDfEJ+ZuluXyA4iDaLvjH3y+frQBGgdMCu0L4fXpI1FBfTxadNNqOqgsz/
pe8EO2WhrXq07q3TdV6WCeaHNuGwLtb848Ktoo+/Y1mIUnY10j8UyUR+aWFTssGA
Ms4788TnI+gWk3m57oN6cVAeoM+fjdl9+Vv8S/wQAxRRiX8EQyZHxPixdU1WSIfq
5f428NXptf0t0BZoNDHvmqCuwAObiZZDiKC9Ogqz0h8lmauQ4Id3eO/juKc0AwXh
jRuPVqzGYhTKZ5qnREbNIOsJdchTJ3/4qH+sxWdb1uy3Xu0e14k+MggtZBrqLr9d
bIJbrfQEPlFiTdNRGEI7q27R8JVbuhXsRYWAZdAaoYKHViSNf3tQ5qtukNh1dYsL
Ra08J4J7AgMBAAGjggazMIIGrzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFF33tXC3
b/7Er5dqjYnq2yV0s/c3MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLG
MFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iu
b3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIEvAYDVR0R
BIIEszCCBK+CCWFsdXN0YS5iZYIKYW1lZWxlYy5iZYIVYXVkZXgtYXJjaGl0ZWN0
dXJlLmJlggZiYWEuYmWCDGJhcmVmb290Yy5iZYIPYmF0dGVyaWpsYW5kLmJlggxi
ZXRyYWNrZWQuYmWCEmJvZWtob3VkZW5kb2RlYy5iZYIKY29yYWx0YS5iZYIHY3Js
Yy5iZYIKZGVwYWlyZS5iZYIMZGlnaW1hdGljLmJlggxkaWdpbW90ZWMuYmWCDWph
bmRob29naGUuYmWCDGpvYi1iZXVycy5iZYIRbWFyY2VsLWRlcGFpcmUuYmWCC215
bWVzc2lzLmJlgiJuZXcuaW50ZXJuYXRpb25hbGdsYXNzZml0dGluZ3MuY29tggtw
YXBhc2F2YS5iZYIJcXVhc2FzLmJlghRydXN0aHVpc3N0cmlqbGFuZC5iZYIcc2No
dWxkYmVtaWRkZWxpbmd3YWFzbGFuZC5iZYIKc2ltYmlvcy5ldYIkc3NsNGFsbC0x
NzcubGUuc3NsLmx4d2ViMS5lZHBuZXQubmV0ght0YW5kYXJ0c3ByYWt0aWprY29y
ZW1hbnMuYmWCCXdlYnB1Yi5iZYIQd2Vya2VuYmlqcmVhbC5iZYINd3d3LmFsdXN0
YS5iZYIOd3d3LmFtZWVsZWMuYmWCDnd3dy5hcnRjbHViLmJlghN3d3cuYXJ0ZWNv
aWZmdXJlLmJlghF3d3cuYXNpdHNob3VsZC5iZYIQd3d3LmJhcmVmb290Yy5iZYIQ
d3d3LmJldHJhY2tlZC5iZYIWd3d3LmJvZWtob3VkZW5kb2RlYy5iZYISd3d3LmJy
b2VreG9ud2ViLmJlgg53d3cuYnVzeXRlYy5iZYIOd3d3LmNvcmFsdGEuYmWCC3d3
dy5jcmxjLmJlgg53d3cuZGVwYWlyZS5iZYIQd3d3LmRpZ2ltYXRpYy5iZYIQd3d3
LmRpZ2ltb3RlYy5iZYITd3d3LmZvcm1hZWNvbG9yZS5iZYIKd3d3LmlkYy5iZYIi
d3d3LmludGVybmF0aW9uYWxnbGFzc2ZpdHRpbmdzLmNvbYIRd3d3LmphbmRob29n
aGUuYmWCD3d3dy5qbWJvbGFuZC5iZYIQd3d3LmpvYi1iZXVycy5iZYILd3d3Lmpz
bWMuYmWCFnd3dy5rYXJpbnZlcnBsYW5ja2UuYmWCFnd3dy5sb2dvLXBhaW50aW5n
cy5jb22CFXd3dy5tYXJjZWwtZGVwYWlyZS5iZYIPd3d3Lm15bWVzc2lzLmJlgg93
d3cucGFwYXNhdmEuYmWCDHd3dy5waXJlYy5iZYINd3d3LnF1YXNhcy5iZYIYd3d3
LnJ1c3RodWlzc3RyaWpsYW5kLmJlgg53d3cuc2ltYmlvcy5ldYIOd3d3LnNpbWJp
b3MudXOCFXd3dy5zdGVwaGFuZWV2cmFzLmNvbYIfd3d3LnRhbmRhcnRzcHJha3Rp
amtjb3JlbWFucy5iZYINd3d3LnZhbnRyYS5iZYIOd3d3LnZlbWF0ZWMuYmWCFHd3
dy52aXJnaW4tc2hvZXMuY29tgg13d3cud2VicHViLmJlghR3d3cud2Vya2VuYmlq
cmVhbC5iZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIEgfME
gfAA7gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjWjXVEkA
AAQDAEYwRAIgRINYEMknMkLWcIS/XxzW8YKZ8jsCHoxTJMJxtb5hZ8sCIFqWc06i
2f0gQFiZJ+JLe/sgKTHC/SMLABdLnXztaF05AHUAouK/1h7eLy8HoNZObTen3GVD
sMa1LqLat4r4mm31F9gAAAGNaNdUUgAABAMARjBEAiBk624NE1m/BQ8STwpqI5o4
nOp7cTjhP7BEIg6NmkZdAQIgKtGvePuIGHyCTIYDX3imKfvvHwl0K4jCC13wf/oI
yR4wDQYJKoZIhvcNAQELBQADggEBAEeMQtDi3yygDxEX2VOiQ4PbeRjqAKmFKg7s
/50eb5YvwqTO5k1oYBtFJ/po7Sk0eOOsaDPAtUrdSeEmhVqPlJZkEo9JdKkR0puM
ul3/jGAwnJnZTAkKtd4ZvVn6BTBLcqS9XW2Q3j5F1o+ZjLy/7fUF5G0tlS5Quv8I
gWVC40/U+Am6FSljxxD6Vq5Lt66yZv2UzY8nIdPSSDFBqBoiIQa+qkkPLQ9UC58m
lVvJU9XCN6H5KN8cM+3x+T29LLoepF2yYcx7htwBFbytIL/S/v6BpHemZ4MOx4lK
0OEvGl0b+G9gLkEu0QxvlivLhuKSxqOMvEdlfRd8ZPrHQvWzDO8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410318759176164371624945562136041981240834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 07:02:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 07:02:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl4all-177.le.ssl.lxweb1.edpnet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635034929159370544771960262289608130552873619596603641622357824843317418357514217390380518171591309186640450866302701650899335098457892935380187370916829942088542748598817614316831009690633627208774448782676873076192708854499438141464094922724516571118870733560471551394897573223577342232558955770670285700075562265777777337484101471535774038687534542093535218127329214537768100736519004419589090875353351017378638299894875481854100118444878414795520742919744820720433683791036942167193219648688611533921859530357820736168407537367706167022033674567675325783724747892229930596431312883410380303620311372385874439251316620616931855451307863852063385392227620744988008210240967029804253488076467706623653117178007568365897758706245304755581005045237684394462356690513806908618220026325107545529838429883730743978092668385986412621786542639601949036365575166361865393408393044350192380811169659187667689891952767212396058425511893919386919461476615464106610844996809801490212563200085814645088809885333491863294816110447157249445689842665699848522995520046475806935514440838791200723818037239052778128990223811102610412483407379234705516183713806424130992139233812103602370930165177886230887332533681528537583003152419568719746342290043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5df7b570b76ffec4af976a8d89eadb2574b3f737
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alusta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameelec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audex-architecture.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barefootc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batterijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betracked.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boekhoudendodec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coralta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crlc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimatic.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimotec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jandhooghe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job-beurs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcel-depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymessis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.internationalglassfittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papasava.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quasas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusthuisstrijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuldbemiddelingwaasland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simbios.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl4all-177.le.ssl.lxweb1.edpnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandartspraktijkcoremans.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werkenbijreal.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alusta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ameelec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artclub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artecoiffure.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asitshould.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barefootc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betracked.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boekhoudendodec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broekxonweb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busytec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crlc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimatic.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimotec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formaecolore.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationalglassfittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jandhooghe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmboland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.job-beurs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jsmc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karinverplancke.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logo-paintings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcel-depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymessis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papasava.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pirec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quasas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rusthuisstrijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simbios.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simbios.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephaneevras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandartspraktijkcoremans.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantra.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vematec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virgin-shoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webpub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werkenbijreal.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d68d754490000040300463044022044835810c9273242d67084bf5f1cd6f18299f23b021e8c5324c271b5be6167cb02205a96734ea2d9fd2040589927e24b7bfb202931c2fd230b00174b9d7ced685d39007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d68d754520000040300463044022064eb6e0d1359bf050f124f0a6a239a389cea7b7138e13fb044220e8d9a465d0102202ad1af78fb88187c824c86035f78a629fbef1f09742b88c20b5df07ffa08c91e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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