premier.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d7:85:a0:07:0e:a9:03:51:16:0e:53:6e:54:15:b3:e1 was issued on by GEANT Vereniging.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): d7:85:a0:07:0e:a9:03:51:16:0e:53:6e:54:15:b3:e1
Serial Number (int): 286477840320612880879919990010985952225
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 59:a6:bb:7c:33:32:32:94:aa:74:2d:15:e5:ff:c4:6d:7d:b5:30:b2
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 65:be:27:71:41:0c:89:6e:0d:71:55:5e:38:d6:e0:e1:08:d9:03:dd
Fingerprint (sha256): 76:af:0f:3a:0b:b4:c8:3f:b4:94:4e:10:a0:db:4f:6a:b6:e5:99:19:e5:db:da:b2:b9:37:83:fe:6f:ac:0d:b8

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate premier.be

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premier.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premier.be
16-loi.be
16-wet.be
16ruedelaloi.be
1er-ministre.be
1erministre.be
1ste-minister.be
1steminister.be
chancellerie.be
eerste-minister.be
eersteminister.be
ict.chancellerie.be
ict.kanselarij.be
kanselarij.be
premier-ministre.be
premier.belgie.be
premier.belgien.be
premier.belgique.be
premier.belgium.be
premier.fed.be
premier.fgov.be
premier.premier.be
premiere-minister.be
premiere-ministre.be
premiere.be
premiere.belgique.be
premiere.belgium.be
premiere.fed.be
premiere.fgov.be
premiereminister.be
premiereministre.be
premierminister.be
premierministre.be
primeminister.be
ruedelaloi-16.be
ruedelaloi.be
ruedelaloi16.be
wetstraat-16.be
wetstraat.be
www.chancellerie.be
www.chancellerie.belgium.be
www.chancellery.belgium.be
www.eerste-minister.be
www.eersteminister.be
www.ict.chancellerie.be
www.ict.kanselarij.be
www.kanselarij.be
www.kanselarij.belgium.be
www.kanzlei.belgium.be
www.premier-ministre.be
www.premier.be
www.premier.belgie.be
www.premier.belgien.be
www.premier.belgique.be
www.premier.belgium.be
www.premier.fgov.be
www.premiereministre.be
www.premierminister.be
www.premierministre.be
www.primeminister.be
www.ruedelaloi-16.be
www.ruedelaloi.be
www.wetstraat-16.be
www.wetstraat.be
xn--premire-ministre-xpb.be
xn--premireministre-ymb.be

Other certificates including the domain name premier.be

(limited to 100 certificates)
premier.be
premier.be
premier.be
premier.be
premier.be
premier.be
archive.premier.be
premier.be
premier.be
eersteminister.be
premier.be
premier.be
*.archive.premier.be
premier.be
www.premier.be
eersteminister.be
premier.be

Certificate

The complete raw certificate details for premier.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286477840320612880879919990010985952225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premier.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790590765041419518195307597976970470326038169698498561505101196028961052790833990121047897566337517016063749758569430175257667250334299937813246144597346513770612193957987250116977883957085996866764260691607687746241594067663592895307979967322475857436701014444706208043463491495221052982852564148929467235345752811275216659119739364628804085768244896147934555439604209095694433340526691902396199176451623098052772940767767841105240375615880041071770935429339263686586820617193569696309441888027169142510225617259042478792166809125930510728645999311545740236038237714836499688147985158132375347877880270264890939972084766774530944539602169447698929019282064687657151479762365707139002828010176268264005791227592127170378399182833654897103696425299842137303373403988412528755867973436828775857879476682006981509790274944788511093641680510041070108651527366789794711594764914448158542808748188621126413462462269961743444149668907655172802801812255848206151629398279985886364839521605506039246357621361218326838804351875232766661715860429418302272674799253946109056774552791127141821031961813944405656306428247380234558344178293376809943602269866532596408710871265982670794063274311044982411063362637670617754939536510474620025703558971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59a6bb7c33323294aa742d15e5ffc46d7db530b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16-loi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16-wet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16ruedelaloi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1er-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1erministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1ste-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1steminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eerste-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eersteminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ict.chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ict.kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.premier.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.fed.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiere.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiereminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiereministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruedelaloi-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruedelaloi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruedelaloi16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetstraat-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetstraat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellerie.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellery.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eerste-minister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eersteminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ict.chancellerie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ict.kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanselarij.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanselarij.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanzlei.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier-ministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premier.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiereministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premierminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premierministre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primeminister.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruedelaloi-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruedelaloi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wetstraat-16.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wetstraat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--premire-ministre-xpb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--premireministre-ymb.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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