developpementdurable.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 56:e7:fd:be:ef:97:ed:de:93:bc:a4:03:de:8a:0d:09 was issued on by GEANT Vereniging.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
Organization unit: Federale Overheidsdienst Kanselarij van de Eerste Minister
Address: Rue de la Loi 16
Postal code: 1000
State / Province: Bruxelles-Capitale
Locality: Bruxelles
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 56:e7:fd:be:ef:97:ed:de:93:bc:a4:03:de:8a:0d:09
Serial Number (int): 115518174788955500287501822119847267593
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: de:45:d8:1a:96:00:81:9f:e8:84:5a:16:1c:ca:61:66:2a:d7:f4:f8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 02:79:45:55:6a:14:73:b0:9a:bb:95:fe:8d:12:1b:b3:0e:52:17:71
Fingerprint (sha256): 58:d1:97:30:4d:51:bc:52:28:47:8a:2e:67:d5:87:ae:ce:5f:b2:4e:6d:76:95:38:db:e1:52:1b:5a:2b:0e:f3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate developpementdurable.be

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developpementdurable.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developpementdurable.be
cidd.be
cidd.belgium.be
dagduurzameontwikkeling.be
duurzameontwikkeling.be
fido.belgium.be
fpssd.belgium.be
icdo.be
icdo.belgium.be
ifdd.belgium.be
journeedeveloppementdurable.be
opdne.belgien.be
poddo.be
poddo.belgie.be
poddo.belgium.be
semainedd.belgium.be
sppdd.be
sppdd.belgique.be
weekdo.belgium.be
www.cidd.be
www.cidd.belgium.be
www.dagduurzameontwikkeling.be
www.developpementdurable.be
www.duurzameontwikkeling.be
www.fido.belgium.be
www.fpssd.belgium.be
www.icdo.be
www.icdo.belgium.be
www.ifdd.belgium.be
www.journeedeveloppementdurable.be
www.opdne.belgien.be
www.poddo.be
www.poddo.belgie.be
www.poddo.belgium.be
www.semainedd.belgium.be
www.sppdd.be
www.sppdd.belgique.be
www.weekdo.belgium.be

Other certificates including the domain name developpementdurable.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for developpementdurable.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115518174788955500287501822119847267593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruxelles-Capitale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rue de la Loi 16'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developpementdurable.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741656399456685698400356093808876594965160885460128294648808006070740192383174430592759886437760948945971046416678495057125078847128104279960995898983389248014989774937916121972947423218053431035279223868936906379892655385922382681304678382834189880706657429711773101313214528224386512911856856171999629859369409674152815997242210405190230113809868587539984780427822102057972552080469223440091064887000185299372846867335348563220849801253908400526465187842074521517033974651671243160922645061923645701213537379991566853563259801512018806440549697212473591818583359035745283031931189934468114641623735540830824581899936250289480299905656157949186873787813444046164332953587087698050568572889880037788844925721507376130786649081021915414601525098576373603137811228594539593681950177741009021000660188993378005280578165108095261279606034068574418806502449775084297929252531506721284623962674925206327750221088152825176177209758930720753044307569471808877056485680127194734496621414879767402378580999338301301361008462590763163440842438304596076094621611816651884437557235676536858252802418774092312424939695610092220842408904990280039288274472325010380022121571083312585820234685622812849999563104518081908410449873332493389247244208197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de45d81a9600819fe8845a161cca61662ad7f4f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weekdo.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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