kbc.eu

- KBC Group NV -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 05:73:82:ea:0d:01:1e:74:dd:61:04:d1:2d:80:bc:12 was issued on by DigiCert Inc.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KBC Group NV

Company registration number: 0403.227.515
Organization: KBC Group NV
State / Province: Brussels
Locality: Brussels
Country: BE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:73:82:ea:0d:01:1e:74:dd:61:04:d1:2d:80:bc:12
Serial Number (int): 7245909374319245477076088225055947794
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3d:9e:52:c3:37:0f:fb:85:15:0d:f3:62:3e:fb:22:e2:7b:9d:9c:0f
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): d8:20:98:aa:31:39:e3:cc:4c:7f:2e:33:75:d7:82:19:89:b1:b6:7d
Fingerprint (sha256): 72:61:81:02:b9:d1:5d:7f:34:af:40:07:cc:3a:19:c8:6f:b7:49:30:ee:7f:8d:86:b6:d2:94:f3:fc:cc:ae:ac

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate kbc.eu

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kbc.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kbc.eu
cbcautolease.be
www.cbccorporate.be
cbccorporate.be
jobs.cbc.be
secure4u.cbc.be
secure4u.kbc.be
m.kbc.be
m.cbc.be
www.cbcagent.be
cbcagent.be
www.kbcagent.be
kbcagent.be
kbc-invest.kbc.be
pb-invest.kbc.be
www.kbcpremiumbanking.be
www.focusfund.be
focusfund.be
www.startitfund.be
www.kbcesop.com
kbcesop.com
www.kbctop.com
kbctop.com
www.kbcsecmar.com
kbcsecmar.com
www.kbctracer.com
www.kbctracer.be
kbctracer.com
kbctracer.be
www.kbcmatchit.com
www.quandvouslesentez.be
www.kbc.eu
www.kbc.com.sg
www.kbc.com.hk
www.9tolive.be
www.9tolife.be
quandvouslesentez.be
privatebanking.kbc.be
privatebanking.cbc.be
kbcvastgoed.com
kbcrealestate.eu
kbcrealestate.com
kbcrealestate.be
kbcmerchantbanking.com
kbcmatchit.com
kbclive.be
kbcleasegroup.be
kbclease.com
kbclease.be
kbcfi.com
kbceconomics.com
kbcdealingroom.com
kbccorporates.com
kbccorporates.be
kbccomfin.be
kbcbankingforbusiness.com
kbcbank.nl
kbcautolease.eu
kbcautolease.com
kbcautolease.be
kbcam.kbc.be
kbcam.lu
kbc.com.sg
kbc.com.hk
www.cbcautolease.be

Other certificates including the domain name kbc.eu

(limited to 100 certificates)
kbc.eu
kbc.eu
kbc.eu
www.kbc.eu
kbc.eu
www.kbc.eu
www.kbc.eu
kbc.eu
www.kbc.eu

Certificate

The complete raw certificate details for kbc.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKyTeYkGHcoyxzRZpCdY
RXmP458TmmdYMrzTCP/oYcsGQs5LTjNgquUhXkTQphfY4gpiF4RXqGhEE5h2w6D+
GhCPd/1TY947vB01Xl/GEgITlA74RmFoEl97ZzDbqV5e4FJkWWOub9SJfAIwb+kS
ZleieoZbXvtvFvLYHIEwpx+cQjlWHHtTeejxrUbqJTsIsaORGvUej3IehcKqdxqw
GysdqUBC93Od8NMXk6LIsc1Q89wEFMMFckVvnsCI8pmKbiUl1pt2VS5JWJ0E5vA8
utvfqtgjuQ3Bp5nuPF46W5bS8dkq+AX+OMd/m5AMVh4OA6dsW7gga/tPrkjgsRwY
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7245909374319245477076088225055947794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0403.227.515'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kbc.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23312948547201453059288017829485347809240448966631346089264173653310516123016251999358990507395074761631215964482920285749276004971166777383525033842697883315593580774931051148773514529682929601504817288289074384297289248393103246990908349190413178058495803934820039612952821979247297832402237108202822380864357122729490070304091986741654478339951244003067174688956619684273622415681869702109901741411661449128389758502790257721191152608614568423938722769955654272857450554353207233457392457676431730627962504208751194040449475589678259670392681590902019680183916125171072869115591293686837087127514623627067018451127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d9e52c3370ffb85150df3623efb22e27b9d9c0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1086 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbc.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbcautolease.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbccorporate.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbccorporate.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.cbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure4u.cbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure4u.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbcagent.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbcagent.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbcagent.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcagent.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbc-invest.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pb-invest.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbcpremiumbanking.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.focusfund.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focusfund.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.startitfund.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbcesop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcesop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbctop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbctop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbcsecmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcsecmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbctracer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbctracer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbctracer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbctracer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbcmatchit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quandvouslesentez.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbc.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbc.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbc.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9tolive.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9tolife.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quandvouslesentez.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.cbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcvastgoed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcrealestate.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcrealestate.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcmerchantbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcmatchit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbclive.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcleasegroup.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbclease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbclease.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbceconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcdealingroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbccorporates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbccorporates.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbccomfin.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcbankingforbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcautolease.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcautolease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcautolease.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcam.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbcam.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbc.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbc.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbcautolease.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001816b7df89500000403004630440220681b4fc1f51ce53921d10b9154511b495ce4769d21b31a34a2257c0bba7235300220438e01ede4accb9ef67ffcf236edddc3177b0efb6a070d1341ce166f1b94b08300770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001816b7df8940000040300483046022100e72e3c46fc5082bfdcb8c37f9c90763d1c6062527228fc4692fa15349acf47e2022100ee876a20000066b886a39b233dd588df279f154c513fb35591f1edfe06cf5e24007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001816b7df8c800000403004830460221009385ab898d7f0ea9557218a1d79c42c006bcda9076f5507e861ff876a37d2d3e022100fd0cf113e66e495c1f0d8d0c082d283c8bb7814598ebc2c38f9b8e65d53bbe1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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