tna-git.minfin.be
- Service Public Federal Finances -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number ce:04:e4:0e:09:8d:c8:4b:0e:45:ae:dd:b3:6d:5a:21 was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Service Public Federal Finances
Organization:
Service Public Federal Finances
State / Province:
Bruxelles-Capitale, Région de
Country: BE
Country: BE
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): ce:04:e4:0e:09:8d:c8:4b:0e:45:ae:dd:b3:6d:5a:21Serial Number (int): 273846361820667486396044330832537410081
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 29:a9:0e:7f:dc:29:33:7b:ef:fe:97:94:b7:b8:34:02:0a:66:be:6d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 26:56:ef:1c:ed:4d:75:95:09:35:e4:20:21:95:eb:67:74:43:44:e2
Fingerprint (sha256): 76:20:40:c8:93:12:b8:02:85:5b:49:4d:1e:2b:fb:4d:52:cc:26:fc:af:2a:dc:90:8e:98:cf:8c:ab:5c:3f:e0
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate tna-git.minfin.be
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tna-git.minfin.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tna-git.minfin.be
Other certificates including the domain name minfin.be
(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be
Certificate
The complete raw certificate details for tna-git.minfin.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIcDCCBligAwIBAgIRAM4E5A4JjchLDkWu3bNtWiEwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIxMDkxNTAwMDAwMFoXDTIyMDkxNTIz NTk1OVowfDELMAkGA1UEBhMCQkUxJzAlBgNVBAgMHkJydXhlbGxlcy1DYXBpdGFs ZSwgUsOpZ2lvbiBkZTEoMCYGA1UEChMfU2VydmljZSBQdWJsaWMgRmVkZXJhbCBG aW5hbmNlczEaMBgGA1UEAxMRdG5hLWdpdC5taW5maW4uYmUwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDY11k2FWVYZ0XoLMh6fF8VFkg46vkMGuK3P7j9 /F4dNY/bHfDVI9KWfIR5ocH7JcAkOseTA8FeR8z57aLELFB3lPq+S6FAGAZfqYuF GhATDcUHeaI+heBvpK3xafIo6BTblqqqVT3yIOWFKpf1zkeXkbW9VVz7dfXkKe33 0R/7Rsn92/4DfGkrTaBOcYXxTYaAvBxlqTQL3Z9FMko8nfmb2VTZlQ5vqk0ju7iS obGiO3z7Zuu4Sl19XpLOEIKaCK42BptjhAj1L3kAcEIBeL/OuVYrrxi0W2kHyL/O ugbcL7Y2ZquTybzmJHGRUgBQKVbcxiuyZjhUZj/OyfBbDcuKHyjB0+lfQ9BPi1g/ ocGWw3VX4sr4gLr+y91Zta+Ia/8QY6PgB0cAqO27yLEiGlxTevpsQnwR58gM1JKX YZOs8hfXNFxX4qJosTKvl6kUZkpZJS8/3aVB+xY+SjQS+9cpl6ld9mzsj9UvMa1/ a2VLgScvd/Ehj4ikBRm1BBiVuwGgVTFe/lvNXSPVr3XDEtJiJr3uBcWkvt1tRL3v yc540kfPJ1DpVnmWV4MLpLALuXYoqebJ638b22dk2m/x5U05Rmn/5sTKzw+PlS7+ ce+V3Iczuj3qtTdbkeDktnpyLB0xxTr4luY2G5c0oS+68Q+w0VajXcRnty+txN4C QoINaQIDAQABo4IDIzCCAx8wHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5x egwwHQYDVR0OBBYEFCmpDn/cKTN77/6XlLe4NAIKZr5tMA4GA1UdDwEB/wQEAwIF oDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJ BgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8v c2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRw Oi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsG AQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdv LmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5U Lm9jc3Auc2VjdGlnby5jb20wggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AEal Vet1+pEgMLWiiWn0830RLEF0vv1JuIWr8vxw/m1HAAABe+jklfcAAAQDAEcwRQIh AJ4gHG904fLhi7BFfOww3NbXs34W3s8fkSkSeKqww1bRAiBf8wlEj+I9BjwnBkWY qk/EOeRxhp552iNI7fpjHZKPOgB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do 8JBilgb2AAABe+jklbMAAAQDAEcwRQIhAP0Qfv550TYO3a9QzLZzTsTHNPQyBMJX j7C3OFGvkLc9AiAXC7DWyEoUrMm4BKU4CVu+tBtmmc1u2G4BoT80JJewQgB1ACl5 vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABe+jklY4AAAQDAEYwRAIg Ulg1UUJqRF6BPya+0TG1eIcDI/NG+J8SsaEmu1mcGscCIGtJgMcloNL5wO0TDqnp C6Wta5TN36x9t97+d76qR+7kMBwGA1UdEQQVMBOCEXRuYS1naXQubWluZmluLmJl MA0GCSqGSIb3DQEBDAUAA4ICAQCBcFnNbBWORA/NvRTaqy36R6qzaxx7cspr6o7o 7qWMN9dNXNUYqT3IO36b0LkY0Ls8XgE87/U32tTp5U0f5VSJOHrdZ/jn3wGK3nQ8 h3JPFonIwLaFEp/mhQrBSiolt3ELyG6CR3oBruD7o206gknupe3Ex+/OiXJLGEGd vN4JNRREAAclDACkwMJLKodhA+D5QNPcSI8ndjz9P4QhGg+cUR3oNiwpnXxBNoRz g07p4KMIvLV91sd/fhIk2y3NTOBdlcEWmNJE8nJF88mCGV/BQUEFXMwysSEQRleW TzCs0VscRDtVHzvwj33NSolYImH8jbfdN+zwGA7VwazhwDY5dZBda+E2gM4thwV1 jSDzLIw+5X/OctNvlpdb6gz5ICmg6RdYitfBIX5pld5xoOSURtweg7vXTuEuQWsa dFOVCrzXwD9PJ5gZO1Dg02LuEFNqTwaWMRweHqr0c11kYsJI1Ks/4GcpD1F9eLHT VOypS9PWSfDp1k/vSBtxAgMMVXZM6tTjFiO19U97Z15uL6TBUeNPYzLn4vBS+e/5 UAwhlIongLIRuxjjyPNzdAJoyX/FlTqxLqdttpa7JCojepvcbE+KZ7FJW8R7eBYd 7oAa81obYTds+3xkKcVxYNJQRjCkhYBZrUtwEjbzNkpLokH0vJwme2CFc3Zym40L qEtpmA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2NdZNhVlWGdF6CzIenxf FRZIOOr5DBritz+4/fxeHTWP2x3w1SPSlnyEeaHB+yXAJDrHkwPBXkfM+e2ixCxQ d5T6vkuhQBgGX6mLhRoQEw3FB3miPoXgb6St8WnyKOgU25aqqlU98iDlhSqX9c5H l5G1vVVc+3X15Cnt99Ef+0bJ/dv+A3xpK02gTnGF8U2GgLwcZak0C92fRTJKPJ35 m9lU2ZUOb6pNI7u4kqGxojt8+2bruEpdfV6SzhCCmgiuNgabY4QI9S95AHBCAXi/ zrlWK68YtFtpB8i/zroG3C+2Nmark8m85iRxkVIAUClW3MYrsmY4VGY/zsnwWw3L ih8owdPpX0PQT4tYP6HBlsN1V+LK+IC6/svdWbWviGv/EGOj4AdHAKjtu8ixIhpc U3r6bEJ8EefIDNSSl2GTrPIX1zRcV+KiaLEyr5epFGZKWSUvP92lQfsWPko0EvvX KZepXfZs7I/VLzGtf2tlS4EnL3fxIY+IpAUZtQQYlbsBoFUxXv5bzV0j1a91wxLS Yia97gXFpL7dbUS978nOeNJHzydQ6VZ5lleDC6SwC7l2KKnmyet/G9tnZNpv8eVN OUZp/+bEys8Pj5Uu/nHvldyHM7o96rU3W5Hg5LZ6ciwdMcU6+JbmNhuXNKEvuvEP sNFWo13EZ7cvrcTeAkKCDWkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 273846361820667486396044330832537410081 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tna-git.minfin.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884634935704488920485198441084524352464655859602843636042780578256557458426454416162538472695553077584819435678798522893792665073678915285578963019805411342128764055655624290568550366440821328772130454347880240812453571931812871704769199004649864975635334539621932648112420110625753344261310699543616351276762789086814960218431936374279592814847416430815876418000566042521452149670764594309702853049546324515468206410750524244976459898061998669930253584797881187015670775710544913203500650469645020864822397554232923708630062542789923659718639989836720916270773993397218818987834844602932924315734350510563800244494481746858957084764093032043070647833243863283456654676909437739879855060285808177464703766933885522979867270878067778283677145987052235295579569893735732910451426113597099748794422541037717372377662671465486258581726358624526762033183383156129455591389286424966477444770793890134814233996135470471043864192884895180071906176905673235514038971600987689616919273428787417756956564213955932527125374347039515068188819994318910335955252272424007575810511856168543364723287768422624583826958849076715795391271937391509785672959052352607967897642484607383370455492795678355267616336326901778855710034335216062469801653701993 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 29a90e7fdc29337beffe9794b7b834020a66be6d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tna-git.minfin.be' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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