premier.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a8:35:1b:2e:df:61:49:0d:51:5f:8e:a0:e4:32:10:ba was issued on by GEANT Vereniging.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): a8:35:1b:2e:df:61:49:0d:51:5f:8e:a0:e4:32:10:ba
Serial Number (int): 223586046364055754736499732170784510138
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 74:b7:04:ee:62:6a:e0:b4:f9:6b:e9:90:eb:a2:6e:4c:a1:07:1c:86
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c1:29:9b:ed:c3:0c:be:c2:ff:3c:9d:88:98:62:91:06:09:ec:00:62
Fingerprint (sha256): 67:08:7e:bc:4d:ca:3b:7e:cf:97:c3:dd:8d:8a:4d:c5:f1:f2:de:23:a8:9c:ba:b4:b4:ab:36:88:7d:37:af:47

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate premier.be

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premier.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premier.be
16-loi.be
16-wet.be
16ruedelaloi.be
1er-ministre.be
1erministre.be
1ste-minister.be
1steminister.be
chancellerie.be
eerste-minister.be
eersteminister.be
ict.chancellerie.be
ict.kanselarij.be
kanselarij.be
premier-ministre.be
premier.belgie.be
premier.belgien.be
premier.belgique.be
premier.belgium.be
premier.fed.be
premier.fgov.be
premier.premier.be
premiere-minister.be
premiere-ministre.be
premiere.be
premiere.belgique.be
premiere.belgium.be
premiere.fed.be
premiere.fgov.be
premiereminister.be
premiereministre.be
premierminister.be
premierministre.be
primeminister.be
ruedelaloi-16.be
ruedelaloi.be
ruedelaloi16.be
wetstraat-16.be
wetstraat.be
www.chancellerie.be
www.chancellerie.belgium.be
www.chancellery.belgium.be
www.eerste-minister.be
www.eersteminister.be
www.ict.chancellerie.be
www.ict.kanselarij.be
www.kanselarij.be
www.kanselarij.belgium.be
www.kanzlei.belgium.be
www.premier-ministre.be
www.premier.be
www.premier.belgie.be
www.premier.belgien.be
www.premier.belgique.be
www.premier.belgium.be
www.premier.fgov.be
www.premiereministre.be
www.premierminister.be
www.premierministre.be
www.primeminister.be
www.ruedelaloi-16.be
www.ruedelaloi.be
www.wetstraat-16.be
www.wetstraat.be
xn--premire-ministre-xpb.be
xn--premireministre-ymb.be

Other certificates including the domain name premier.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for premier.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINrzCCC5egAwIBAgIRAKg1Gy7fYUkNUV+OoOQyELowDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIyMDkyMjAwMDAwMFoXDTIzMDkyMjIz
NTk1OVowgZAxCzAJBgNVBAYTAkJFMScwJQYDVQQIDB5CcnV4ZWxsZXMtQ2FwaXRh
bGUsIFLDqWdpb24gZGUxQzBBBgNVBAoTOkZlZGVyYWxlIE92ZXJoZWlkc2RpZW5z
dCBLYW5zZWxhcmlqIHZhbiBkZSBFZXJzdGUgTWluaXN0ZXIxEzARBgNVBAMTCnBy
ZW1pZXIuYmUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAtKwMR9sP
mg3gw5/oVWGpe3jcO7GaVy/O9OzP/6Aa3iPC96m62SOkV94Fzoaw3QH/H3uKxtzO
43bqnfbu+D0fiWzGXxC+e8jL88JFVdogB1bG5MOKRB5cii2y3qXZyht2Wvv65T0/
B3rbM1TZIz/uMG4KB1x7vyF/MFGBvalqCwcttDzRjiBp16WknFGAn4CqoRG+cK7p
K0ZtsbnJFdk3Tbt4Tt7LUI1HIG2PftY9e0ljbfPexPVQWuRMSP2QTjaoH5B7Dl4m
700LV3LsrLrxr4uPrlhIYHfhAwq4v4ZFfC8SFKs+twhFIp//fbHnZIrVbr4IKUaf
rnfR2mVEpN0fGpBl14JL8XDcwI3t49ueDcpZeHiG7RIBiio9xjPWKKfDODtyqe/N
3E/AEnQEURfR2UF8O+ZcmoSJ1Fuada58RbeRMtaPKirev/M3t9FG3UARUogbMkdH
MTqOPlqKi3u7Aq92dKEvNPyr8H8fWn3s+jRJ+zaB7WoJz+ATiWBkyOiFIx5RhB4U
cilytivWCv6/DOFzmMPTbUWq3DQlwzhiIaHnpb8JJOxV8yxgCg36cq0vBNpXMcyu
N8HYcTfqv04X3NbuET/evW/JwHQMOaAqvOr6sOFL/sPVh7po+9J+30FZzUma8KED
FqEc2T2xOSRmiZ7e7w7HJZjXGOyGoqzi6QIDAQABo4IITTCCCEkwHwYDVR0jBBgw
FoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYDVR0OBBYEFHS3BO5iauC0+WvpkOui
bkyhBxyGMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUw
IwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/
BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dF
QU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0
cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggr
BgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGlnby5jb20wggF/BgorBgEE
AdZ5AgQCBIIBbwSCAWsBaQB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr
3IKKAAABg2Khd/IAAAQDAEYwRAIgKqPq+wouSugy2kunlveWCqJKMIEYfW2VUoKY
QHKQLG0CIBBrz6NOWyLjSIAES/U/P6zqAh4cjEmfnqH6J4i5Hu3tAHcAejKMVNi3
LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGDYqF36gAABAMASDBGAiEAujub
57nJIQuBNm0nAnKLnOoNbHosAGCC1QwNpR9kVx4CIQDoD8WZ7/gphi2EcMqBR6BJ
Ss2GvwU/SnypJqlx0uSdagB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31t
Br1uAAABg2Khd40AAAQDAEgwRgIhAOM9w13NTTWjKGJAx5WmmmXZUUvXN8q5lupm
PiX41Li9AiEAnScIavXNBGZ1j7E8io/xgf00ol1jr4uWcLAOKmqCSk4wggVCBgNV
HREEggU5MIIFNYIKcHJlbWllci5iZYIJMTYtbG9pLmJlggkxNi13ZXQuYmWCDzE2
cnVlZGVsYWxvaS5iZYIPMWVyLW1pbmlzdHJlLmJlgg4xZXJtaW5pc3RyZS5iZYIQ
MXN0ZS1taW5pc3Rlci5iZYIPMXN0ZW1pbmlzdGVyLmJlgg9jaGFuY2VsbGVyaWUu
YmWCEmVlcnN0ZS1taW5pc3Rlci5iZYIRZWVyc3RlbWluaXN0ZXIuYmWCE2ljdC5j
aGFuY2VsbGVyaWUuYmWCEWljdC5rYW5zZWxhcmlqLmJlgg1rYW5zZWxhcmlqLmJl
ghNwcmVtaWVyLW1pbmlzdHJlLmJlghFwcmVtaWVyLmJlbGdpZS5iZYIScHJlbWll
ci5iZWxnaWVuLmJlghNwcmVtaWVyLmJlbGdpcXVlLmJlghJwcmVtaWVyLmJlbGdp
dW0uYmWCDnByZW1pZXIuZmVkLmJlgg9wcmVtaWVyLmZnb3YuYmWCEnByZW1pZXIu
cHJlbWllci5iZYIUcHJlbWllcmUtbWluaXN0ZXIuYmWCFHByZW1pZXJlLW1pbmlz
dHJlLmJlggtwcmVtaWVyZS5iZYIUcHJlbWllcmUuYmVsZ2lxdWUuYmWCE3ByZW1p
ZXJlLmJlbGdpdW0uYmWCD3ByZW1pZXJlLmZlZC5iZYIQcHJlbWllcmUuZmdvdi5i
ZYITcHJlbWllcmVtaW5pc3Rlci5iZYITcHJlbWllcmVtaW5pc3RyZS5iZYIScHJl
bWllcm1pbmlzdGVyLmJlghJwcmVtaWVybWluaXN0cmUuYmWCEHByaW1lbWluaXN0
ZXIuYmWCEHJ1ZWRlbGFsb2ktMTYuYmWCDXJ1ZWRlbGFsb2kuYmWCD3J1ZWRlbGFs
b2kxNi5iZYIPd2V0c3RyYWF0LTE2LmJlggx3ZXRzdHJhYXQuYmWCE3d3dy5jaGFu
Y2VsbGVyaWUuYmWCG3d3dy5jaGFuY2VsbGVyaWUuYmVsZ2l1bS5iZYIad3d3LmNo
YW5jZWxsZXJ5LmJlbGdpdW0uYmWCFnd3dy5lZXJzdGUtbWluaXN0ZXIuYmWCFXd3
dy5lZXJzdGVtaW5pc3Rlci5iZYIXd3d3LmljdC5jaGFuY2VsbGVyaWUuYmWCFXd3
dy5pY3Qua2Fuc2VsYXJpai5iZYIRd3d3LmthbnNlbGFyaWouYmWCGXd3dy5rYW5z
ZWxhcmlqLmJlbGdpdW0uYmWCFnd3dy5rYW56bGVpLmJlbGdpdW0uYmWCF3d3dy5w
cmVtaWVyLW1pbmlzdHJlLmJlgg53d3cucHJlbWllci5iZYIVd3d3LnByZW1pZXIu
YmVsZ2llLmJlghZ3d3cucHJlbWllci5iZWxnaWVuLmJlghd3d3cucHJlbWllci5i
ZWxnaXF1ZS5iZYIWd3d3LnByZW1pZXIuYmVsZ2l1bS5iZYITd3d3LnByZW1pZXIu
Zmdvdi5iZYIXd3d3LnByZW1pZXJlbWluaXN0cmUuYmWCFnd3dy5wcmVtaWVybWlu
aXN0ZXIuYmWCFnd3dy5wcmVtaWVybWluaXN0cmUuYmWCFHd3dy5wcmltZW1pbmlz
dGVyLmJlghR3d3cucnVlZGVsYWxvaS0xNi5iZYIRd3d3LnJ1ZWRlbGFsb2kuYmWC
E3d3dy53ZXRzdHJhYXQtMTYuYmWCEHd3dy53ZXRzdHJhYXQuYmWCG3huLS1wcmVt
aXJlLW1pbmlzdHJlLXhwYi5iZYIaeG4tLXByZW1pcmVtaW5pc3RyZS15bWIuYmUw
DQYJKoZIhvcNAQEMBQADggIBAAQ5oJr+yyvolE0X/zjU8Fj+/tJk8PO3W1Z9+xjl
HVBqtviSB6bX3hukDWVaferf5zEPWGuiaPRRmfeUuIKxhhi7qTFv5nVeBG1PWUmd
AYGMr9bAT0Z72hHxAmnNzT4zYVU+aSqoum/NzNRCCkkfBn2My/mGfqEde1iiPyHR
i8I/kDmG1ysPfQ88HEM6/p2v1Il6xa9zbjn0h5r7YJMUTHBFqhME3DvG5VWHISe1
q1u7LR0xtoWom60Lg7QROXImJtyt0bpcZ0+7LgDan664kRQxw6Gstnw9Cc5uxqf4
ZFs/DxTtNlBr66wPcEZJpzp3q7lJMHMSVOqfAgoPxHlcfKCBZPm06768JdzwPivZ
xyCJJqJTXoytGy6kNNUCKlEHAT1tRWKSEGVcx4lb0RE8nVHOcqMJATHtJrxoVe5s
hhpAr6dHHIucIy44hhs9r6ksmXLA7kucX5zleBK+bN4qlco5F3uZLN+8onptPF2q
ibwHdwl5cgu8NhEhKSET24XD/9vvqxgge8SM7E0ixgiWO/3jh31thuHExGpPfOrp
cD77ZDm9/Uugj2SAuSDfNsR3+eJDKQbqLy3s7be8nPO6+ipCfbCuadD82bBRuFED
XcaHWkvLtoXIp+5g3U+ztMVtYA37Cs1IFwdV+qd5LxovpWAQTmkiMfNu256oIZyO
P0N7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLSsDEfbD5oN4MOf6FVh
qXt43DuxmlcvzvTsz/+gGt4jwveputkjpFfeBc6GsN0B/x97isbczuN26p327vg9
H4lsxl8QvnvIy/PCRVXaIAdWxuTDikQeXIotst6l2cobdlr7+uU9Pwd62zNU2SM/
7jBuCgdce78hfzBRgb2pagsHLbQ80Y4gadelpJxRgJ+AqqERvnCu6StGbbG5yRXZ
N027eE7ey1CNRyBtj37WPXtJY23z3sT1UFrkTEj9kE42qB+Qew5eJu9NC1dy7Ky6
8a+Lj65YSGB34QMKuL+GRXwvEhSrPrcIRSKf/32x52SK1W6+CClGn6530dplRKTd
HxqQZdeCS/Fw3MCN7ePbng3KWXh4hu0SAYoqPcYz1iinwzg7cqnvzdxPwBJ0BFEX
0dlBfDvmXJqEidRbmnWufEW3kTLWjyoq3r/zN7fRRt1AEVKIGzJHRzE6jj5aiot7
uwKvdnShLzT8q/B/H1p97Po0Sfs2ge1qCc/gE4lgZMjohSMeUYQeFHIpcrYr1gr+
vwzhc5jD021Fqtw0JcM4YiGh56W/CSTsVfMsYAoN+nKtLwTaVzHMrjfB2HE36r9O
F9zW7hE/3r1vycB0DDmgKrzq+rDhS/7D1Ye6aPvSft9BWc1JmvChAxahHNk9sTkk
Zome3u8OxyWY1xjshqKs4ukCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 223586046364055754736499732170784510138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premier.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786170870855098009250392439773962348721701703927884685722817652379295196149097145945337086824871228362051363468371592609087534866594468578414584426954515029149374307638805271795733974522252341543297821547966500088053905463874795450469087174800990309000568029654657081587487052920574503959690717459435237998068981538229294110722132337064348316765182470452646738789400680135509341221292407189667539347466960609007094038360627401774162772844124715538652902930041927789557449345835739585857795123258841201089306081225292959274432911751276256506879105715242785488791611837680070133115943056405794226926690622484943327727240641805475364765851028375812031785533442513785224846993212059540856285326130505183165958800871186380367772613277942795301537508850520590742062157013306924570011891094906075181461138701347193709943083483077163668992792229143783975139779109250887731354131550899128401941866588446851064224990866089109168741702696327689537573415211055959211666258224359429268805149642996664948342202677367806791530974116127416181276099526671915024740201056388290798220536986995505832901974240069376330811033395773778866581659239384153673928374602687569508414019483999924641782842267596703621726728210954818488233414728112509031868588777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74b704ee626ae0b4f96be990eba26e4ca1071c86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16-loi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16-wet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16ruedelaloi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1er-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1erministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1ste-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1steminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eerste-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eersteminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ict.chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ict.kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.premier.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiereminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiereministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruedelaloi-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruedelaloi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruedelaloi16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetstraat-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetstraat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellerie.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellery.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eerste-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eersteminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ict.chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ict.kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanselarij.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanzlei.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiereministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premierminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premierministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primeminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruedelaloi-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruedelaloi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wetstraat-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wetstraat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--premire-ministre-xpb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--premireministre-ymb.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		000439a09afecb2be8944d17ff38d4f058fefed264f0f3b75b567dfb18e51d506ab6f89207a6d7de1ba40d655a7deadfe7310f586ba268f45199f794b882b18618bba9316fe6755e046d4f59499d01818cafd6c04f467bda11f10269cdcd3e3361553e692aa8ba6fcdccd4420a491f067d8ccbf9867ea11d7b58a23f21d18bc23f903986d72b0f7d0f3c1c433afe9dafd4897ac5af736e39f4879afb6093144c7045aa1304dc3bc6e555872127b5ab5bbb2d1d31b685a89bad0b83b41139722626dcadd1ba5c674fbb2e00da9faeb8911431c3a1acb67c3d09ce6ec6a7f8645b3f0f14ed36506bebac0f704649a73a77abb94930731254ea9f020a0fc4795c7ca08164f9b4ebbebc25dcf03e2bd9c7208926a2535e8cad1b2ea434d5022a5107013d6d45629210655cc7895bd1113c9d51ce72a3090131ed26bc6855ee6c861a40afa7471c8b9c232e38861b3dafa92c9972c0ee4b9c5f9ce57812be6cde2a95ca39177b992cdfbca27a6d3c5daa89bc07770979720bbc361121292113db85c3ffdbefab18207bc48cec4d22c608963bfde3877d6d86e1c4c46a4f7ceae9703efb6439bdfd4ba08f6480b920df36c477f9e2432906ea2f2decedb7bc9cf3bafa2a427db0ae69d0fcd9b051b851035dc6875a4bcbb685c8a7ee60dd4fb3b4c56d600dfb0acd48170755faa7792f1a2fa560104e692231f36edb9ea8219c8e3f437b