www-a.kbc.com
- KBC Group NV -
Issued by DigiCert EV RSA CA G2
About this certificate
This digital certificate with serial number 05:a9:da:47:cc:1f:63:fc:fe:ad:fa:8a:00:5a:7d:80 was issued on by DigiCert Inc.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
KBC Group NV
Company registration number:
0403.227.515
Organization: KBC Group NV
Organization: KBC Group NV
State / Province:
Brussels
Locality: Brussels
Country: BE
Locality: Brussels
Country: BE
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 05:a9:da:47:cc:1f:63:fc:fe:ad:fa:8a:00:5a:7d:80Serial Number (int): 7528065401682990695836436544618134912
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 0e:f1:60:3e:64:8f:f5:e0:84:ea:05:c0:cd:f7:a3:f5:23:db:5a:4f
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06
Fingerprint (sha1): 28:f8:aa:44:3e:85:c1:b1:ab:7c:50:ad:7d:e8:78:af:63:45:be:89
Fingerprint (sha256): c4:dc:c1:fd:a7:5a:7a:5d:58:f2:47:27:d9:d4:a9:eb:3a:b9:50:46:58:f4:e6:a9:c1:4b:f8:ba:9d:96:d0:f4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl
Check the revocation status for certificate www-a.kbc.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www-a.kbc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www-a.kbc.com
acc.cbcvousinvite.cbc.be
acc.kbcinvites.kbc.be
acc.kbclaedtein.kbc.be
acc.kbcnodigtuit.kbc.be
acc.kbcvousinvite.kbc.be
appyourservice.acc.kbc-group.com
commacc.bolero-crowdfunding.be
commacc.bolero.be
commacc.boleromatti.be
commacc.kbcsecurities.com
design-a.kbc.be
www-a.24plus.be
www-a.kbcsecurities.com
www.acc.boleromatti.be
wwwqa.kbcsecurities.com
wwwrel.kbc2s.com
wwwrelease.bolero.be
acc.cbcvousinvite.cbc.be
acc.kbcinvites.kbc.be
acc.kbclaedtein.kbc.be
acc.kbcnodigtuit.kbc.be
acc.kbcvousinvite.kbc.be
appyourservice.acc.kbc-group.com
commacc.bolero-crowdfunding.be
commacc.bolero.be
commacc.boleromatti.be
commacc.kbcsecurities.com
design-a.kbc.be
www-a.24plus.be
www-a.kbcsecurities.com
www.acc.boleromatti.be
wwwqa.kbcsecurities.com
wwwrel.kbc2s.com
wwwrelease.bolero.be
Other certificates including the domain name kbc.com
(limited to 100 certificates)
kbc.com
carsales.autolease.kbc.com
chat-a.kbc.com
newsroom.kbc.com
www.survey.kbc.com
www-o.kbc.com
www.survey.kbc.com
awareness.kbc.com
portalrel.kbc2s.com
investments.kbc.be
www.kbc.com
www-f.kbc.com
onboarding-a.kbc.com
secmar-o.kbc.com
kbc.com
idea.kbc.com
ul-a.kbc.be
autolease.acc.kbc.com
ul.kbc.be
newsroom.kbc.com
www.survey.kbc.com
newsroom.kbc.com
www-a.kbc.com
kbc.com
portalacc.kbc2s.com
ebics.kbc.com
businessdashboard.kbc.be
newsroom.kbc.com
businessdashboard.kbc.be
ul-a.kbc.be
portalrel.kbc2s.com
www.survey.kbc.com
newsroom.kbc.com
secmar-a.kbc.com
www.kbc.com
research.kbc.com
kbc.com
newsroom.kbc.com
www.newsroom.kbc.com
idp-a.kbc.com
www.kbc.com
secmar-o.kbc.com
ebics.kbc.com
www.kbc.com
idp2-a.kbc.com
autolease.kbc.com
newsroom.kbc.com
www.survey.kbc.com
kbc.com
www.survey.kbc.com
kbc.com
businessdashboard-a.kbc.be
portal.kbc2s.com
chat.kbc.com
tracer-o.kbc.com
scookies-adobe.kbc.com
newsroom.kbc.com
ebics.kbc.com
syndication.kbc.com
scookies-adobe.kbc.com
idp.kbc.com
carsales.autolease.kbc.com
syndication.kbc.com
portalacc.kbc2s.com
newsroom.kbc.com
ul.kbc.be
newsroom.kbc.com
www.newsroom.kbc.com
newsroom.kbc.com
newsroom.kbc.com
carsales.autolease.kbc.com
survey.kbc.com
new-dev.kbc.com
www-f.kbc.com
idp-f.kbc.com
www.kbc.com
scookies-adobe.kbc.com
www.survey.kbc.com
research.kbc.com
chat.kbc.com
research.kbc.com
ul.kbc.be
ebics.kbc.com
tracer-o.kbc.com
ul.kbc.be
ebicsacc.kbc.com
www-a.kbc.com
ul-a.kbc.be
TestiFinance-HK.kbc.com
www.survey.kbc.com
ebics.kbc.com
www-o.kbc.com
www.survey.kbc.com
www.survey.kbc.com
portal.kbc2s.com
newsroom.kbc.com
newsroom.kbc.com
www-a.kbc.com
mm.kbc.com
newsroom.kbc.com
carsales.autolease.kbc.com
chat-a.kbc.com
newsroom.kbc.com
www.survey.kbc.com
www-o.kbc.com
www.survey.kbc.com
awareness.kbc.com
portalrel.kbc2s.com
investments.kbc.be
www.kbc.com
www-f.kbc.com
onboarding-a.kbc.com
secmar-o.kbc.com
kbc.com
idea.kbc.com
ul-a.kbc.be
autolease.acc.kbc.com
ul.kbc.be
newsroom.kbc.com
www.survey.kbc.com
newsroom.kbc.com
www-a.kbc.com
kbc.com
portalacc.kbc2s.com
ebics.kbc.com
businessdashboard.kbc.be
newsroom.kbc.com
businessdashboard.kbc.be
ul-a.kbc.be
portalrel.kbc2s.com
www.survey.kbc.com
newsroom.kbc.com
secmar-a.kbc.com
www.kbc.com
research.kbc.com
kbc.com
newsroom.kbc.com
www.newsroom.kbc.com
idp-a.kbc.com
www.kbc.com
secmar-o.kbc.com
ebics.kbc.com
www.kbc.com
idp2-a.kbc.com
autolease.kbc.com
newsroom.kbc.com
www.survey.kbc.com
kbc.com
www.survey.kbc.com
kbc.com
businessdashboard-a.kbc.be
portal.kbc2s.com
chat.kbc.com
tracer-o.kbc.com
scookies-adobe.kbc.com
newsroom.kbc.com
ebics.kbc.com
syndication.kbc.com
scookies-adobe.kbc.com
idp.kbc.com
carsales.autolease.kbc.com
syndication.kbc.com
portalacc.kbc2s.com
newsroom.kbc.com
ul.kbc.be
newsroom.kbc.com
www.newsroom.kbc.com
newsroom.kbc.com
newsroom.kbc.com
carsales.autolease.kbc.com
survey.kbc.com
new-dev.kbc.com
www-f.kbc.com
idp-f.kbc.com
www.kbc.com
scookies-adobe.kbc.com
www.survey.kbc.com
research.kbc.com
chat.kbc.com
research.kbc.com
ul.kbc.be
ebics.kbc.com
tracer-o.kbc.com
ul.kbc.be
ebicsacc.kbc.com
www-a.kbc.com
ul-a.kbc.be
TestiFinance-HK.kbc.com
www.survey.kbc.com
ebics.kbc.com
www-o.kbc.com
www.survey.kbc.com
www.survey.kbc.com
portal.kbc2s.com
newsroom.kbc.com
newsroom.kbc.com
www-a.kbc.com
mm.kbc.com
newsroom.kbc.com
Certificate
The complete raw certificate details for www-a.kbc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIcDCCB1igAwIBAgIQBanaR8wfY/z+rfqKAFp9gDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBFViBSU0EgQ0EgRzIwHhcNMjMxMjA1MDAwMDAwWhcNMjQxMjAzMjM1 OTU5WjCBrTETMBEGCysGAQQBgjc8AgEDEwJCRTEdMBsGA1UEDwwUUHJpdmF0ZSBP cmdhbml6YXRpb24xFTATBgNVBAUTDDA0MDMuMjI3LjUxNTELMAkGA1UEBhMCQkUx ETAPBgNVBAgTCEJydXNzZWxzMREwDwYDVQQHEwhCcnVzc2VsczEVMBMGA1UEChMM S0JDIEdyb3VwIE5WMRYwFAYDVQQDEw13d3ctYS5rYmMuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCxJ87X6CduMGevdEdN7k9ZPW1nuvLwOB09f BJCm9Z6JNOfVYSaL7f7u11NHsWDa7H2O28Lbd+fgTEoJopLkj7Vg5FXnWc61yEbk UfsMD9xOvPIREFs/ePpwkhiHZd5iSgx6X7P5aH5EXvTgW8peM5F79KA+2ohaPX64 fN3gG6ouW0ndFUYjhys1UKSG/9ZA1+tqWquIMLlQKUqlEqEzmaonnGzR5fIwoTmu BlCepv0bTHv4/Y/1Loo5zNBJhKPn7zrlevzf5pwfSRcfJjqBaWpHP4CcfmHDZrqn tdkh0+3+dowErGnJB5dJK+NAXY4SXNHB+HxsYQ4CcJDKcqTcRQIDAQABo4IE8jCC BO4wHwYDVR0jBBgwFoAUak5Qv5honVt7IHXUWQF5SGaSMgYwHQYDVR0OBBYEFA7x YD5kj/XghOoFwM33o/Uj21pPMIIBtAYDVR0RBIIBqzCCAaeCDXd3dy1hLmtiYy5j b22CGGFjYy5jYmN2b3VzaW52aXRlLmNiYy5iZYIVYWNjLmtiY2ludml0ZXMua2Jj LmJlghZhY2Mua2JjbGFlZHRlaW4ua2JjLmJlghdhY2Mua2Jjbm9kaWd0dWl0Lmti Yy5iZYIYYWNjLmtiY3ZvdXNpbnZpdGUua2JjLmJlgiBhcHB5b3Vyc2VydmljZS5h Y2Mua2JjLWdyb3VwLmNvbYIeY29tbWFjYy5ib2xlcm8tY3Jvd2RmdW5kaW5nLmJl ghFjb21tYWNjLmJvbGVyby5iZYIWY29tbWFjYy5ib2xlcm9tYXR0aS5iZYIZY29t bWFjYy5rYmNzZWN1cml0aWVzLmNvbYIPZGVzaWduLWEua2JjLmJlgg93d3ctYS4y NHBsdXMuYmWCF3d3dy1hLmtiY3NlY3VyaXRpZXMuY29tghZ3d3cuYWNjLmJvbGVy b21hdHRpLmJlghd3d3dxYS5rYmNzZWN1cml0aWVzLmNvbYIQd3d3cmVsLmtiYzJz LmNvbYIUd3d3cmVsZWFzZS5ib2xlcm8uYmUwSgYDVR0gBEMwQTALBglghkgBhv1s AgEwMgYFZ4EMAQEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5j b20vQ1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0RVZSU0FDQUcyLmNybDA0oDKgMIYuaHR0cDovL2NybDQuZGlnaWNl cnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNybDBzBggrBgEFBQcBAQRnMGUwJAYI KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA9BggrBgEFBQcwAoYx aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0RVZSU0FDQUcyLmNy dDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdwDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYw5au8kAAAEAwBIMEYCIQCX 3wJZZadp8EkplZTKbkwT50yPePBfSZZIc65pHS58QAIhAKjX488B2s+mMhMeW5oB 4aS/konGp0yCSMDxay0yW7WgAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGMOWrvEwAABAMARjBEAiAVZHS1nOVFThWt7hKvRoXAYwodrptUEaQP szl05MiEJAIgWwDGhamva9A9SrnU3Xi9VQrhndDwly9ZsUVNd8yOY/QAdQDatr9r P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYw5au8IAAAEAwBGMEQCIDL+ xKaX6rQR1aQ6klNeMIZdoVaHBimTNBxvGVIj4a3sAiABV5e8/lR9xcUpBGluL/W+ pcvzBQS0OsD+A3lFAvffCDANBgkqhkiG9w0BAQsFAAOCAQEAF8XsRfgr4SOuPIDN CDoaxibUAEIBmjhZivqeIF2/JKv0xkQ2Njf3OrV+20FG7rtoAMYv+CBoOcYeAeq0 QrNQYEaf04L6emVtnrvFworSZa+suY70tn2MMiikb9eHK62bxQvVLdnRgH3Ealmt gjnQYSVt277Tc9q2RBKi2plVjczOTX43/nyhmJ9MNbgZtUh32RaNt2K+zbCrKpYU HmK/5y/25ByM6nGqyT4bxFUaWg/Z6YMXUNO0gwVNZaNpx+6PTeg3NgmnF/jq1CKj gOwR2Egs72MEgr9Ley678O2hrxkNE/omddK14+tDS0GuGGu4YlvMiPDhsPUSDeOv eQSGpQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCxJ87X6CduMGevdEdN7 k9ZPW1nuvLwOB09fBJCm9Z6JNOfVYSaL7f7u11NHsWDa7H2O28Lbd+fgTEoJopLk j7Vg5FXnWc61yEbkUfsMD9xOvPIREFs/ePpwkhiHZd5iSgx6X7P5aH5EXvTgW8pe M5F79KA+2ohaPX64fN3gG6ouW0ndFUYjhys1UKSG/9ZA1+tqWquIMLlQKUqlEqEz maonnGzR5fIwoTmuBlCepv0bTHv4/Y/1Loo5zNBJhKPn7zrlevzf5pwfSRcfJjqB aWpHP4CcfmHDZrqntdkh0+3+dowErGnJB5dJK+NAXY4SXNHB+HxsYQ4CcJDKcqTc RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7528065401682990695836436544618134912 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0403.227.515' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-a.kbc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23249687771983816944948622287916917995673968540002577157126049992290960547454096026927401641332553506065203131162155889761503645295762242706243049913187258935450425479361729336999563020598871410581911163552718963445407601235648201806503111665255840252785886889648565599669513518023758808376854984676118929296094978190916065578750733090634546697050532867157863365400317256515365984201866101372937091787751455388898396123816324014140318618148711517784737717783773027130863093649157373019430107556217080816170445145077927872917618155932971182969079314938421692332752529899607124968257234915875773552242790918447945800773 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0ef1603e648ff5e084ea05c0cdf7a3f523db5a4f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (427 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-a.kbc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.cbcvousinvite.cbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.kbcinvites.kbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.kbclaedtein.kbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.kbcnodigtuit.kbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.kbcvousinvite.kbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appyourservice.acc.kbc-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commacc.bolero-crowdfunding.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commacc.bolero.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commacc.boleromatti.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commacc.kbcsecurities.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-a.kbc.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-a.24plus.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-a.kbcsecurities.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acc.boleromatti.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwqa.kbcsecurities.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwrel.kbc2s.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwrelease.bolero.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c396aef24000004030048304602210097df025965a769f049299594ca6e4c13e74c8f78f05f49964873ae691d2e7c40022100a8d7e3cf01dacfa632131e5b9a01e1a4bf9289c6a74c8248c0f16b2d325bb5a000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c396aef1300000403004630440220156474b59ce5454e15adee12af4685c0630a1dae9b5411a40fb33974e4c8842402205b00c685a9af6bd03d4ab9d4dd78bd550ae19dd0f0972f59b1454d77cc8e63f4007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c396aef080000040300463044022032fec4a697eab411d5a43a92535e30865da15687062993341c6f195223e1adec0220015797bcfe547dc5c52904696e2ff5bea5cbf30504b43ac0fe03794502f7df08 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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