ssl4all-177.le.ssl.lxweb1.edpnet.net

Issued by R3

About this certificate

This digital certificate with serial number 04:bc:fc:2d:7a:31:3e:fe:51:f4:50:b4:ab:6e:ed:d8:15:17 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl4all-177.le.ssl.lxweb1.edpnet.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bc:fc:2d:7a:31:3e:fe:51:f4:50:b4:ab:6e:ed:d8:15:17
Serial Number (int): 412757430294829497718313423360486316446999
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:b2:50:26:82:d1:69:31:4d:bc:5e:8a:c7:85:e0:6a:67:9b:69:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:50:e4:30:4b:42:6f:f3:28:1b:2c:1a:9f:fb:11:97:8b:24:2a:7b
Fingerprint (sha256): e0:f3:35:79:e6:7d:83:44:b9:cd:d9:de:be:ee:2a:22:87:88:d2:fb:25:10:68:66:ac:13:1d:49:a1:a3:28:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl4all-177.le.ssl.lxweb1.edpnet.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl4all-177.le.ssl.lxweb1.edpnet.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alusta.be
ameelec.be
audex-architecture.be
baa.be
barefootc.be
batterijland.be
betracked.be
boekhoudendodec.be
coralta.be
crlc.be
depaire.be
digimatic.be
digimotec.be
jandhooghe.be
job-beurs.be
marcel-depaire.be
mymessis.be
new.internationalglassfittings.com
papasava.be
quasas.be
rusthuisstrijland.be
schuldbemiddelingwaasland.be
simbios.eu
ssl4all-177.le.ssl.lxweb1.edpnet.net
tandartspraktijkcoremans.be
webpub.be
werkenbijreal.be
www.alusta.be
www.ameelec.be
www.artclub.be
www.artecoiffure.be
www.asitshould.be
www.barefootc.be
www.betracked.be
www.boekhoudendodec.be
www.broekxonweb.be
www.busytec.be
www.coralta.be
www.crlc.be
www.depaire.be
www.digimatic.be
www.digimotec.be
www.formaecolore.be
www.idc.be
www.internationalglassfittings.com
www.jandhooghe.be
www.jmboland.be
www.job-beurs.be
www.jsmc.be
www.karinverplancke.be
www.logo-paintings.com
www.marcel-depaire.be
www.mymessis.be
www.papasava.be
www.pirec.be
www.quasas.be
www.rusthuisstrijland.be
www.simbios.eu
www.simbios.us
www.stephaneevras.com
www.tandartspraktijkcoremans.be
www.vantra.be
www.vematec.be
www.virgin-shoes.com
www.webpub.be
www.werkenbijreal.be

Other certificates including the domain name edpnet.net

(limited to 100 certificates)
ssl4all-177.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
ssl4all-72.le.ssl.lxweb1.edpnet.net
ssl4all-323.le.ssl.lxweb1.edpnet.net
ssl4all-302.le.ssl.lxweb1.edpnet.net
ssl4all-272.le.ssl.lxweb1.edpnet.net
ssl4all-177.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
www.edpnet.net
ssl4all-1.le.ssl.lxextweb.edpnet.net
ssl4all-4.le.ssl.lxextweb.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
ssl4all-317.le.ssl.lxweb1.edpnet.net
ssl4all-34.le.ssl.lxweb1.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
appstesting.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
srv-edpnet-03.edpnet.net
winbu01.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-335.le.ssl.lxweb1.edpnet.net
ssl4all-314.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-141.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-269.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-287.le.ssl.lxweb1.edpnet.net
www.edpnet.net
ssl4all-177.le.ssl.lxweb1.edpnet.net
email.edpnet.net
ssl4all-272.le.ssl.lxweb1.edpnet.net
ssl4all-207.le.ssl.lxweb1.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
srv-edpnet-03.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-329.le.ssl.lxweb1.edpnet.net
ssl4all-72.le.ssl.lxweb1.edpnet.net
ssl4all-326.le.ssl.lxweb1.edpnet.net
*.edpnet.net
ssl4all-106.le.ssl.lxweb1.edpnet.net
ssl4all-338.le.ssl.lxweb1.edpnet.net
ssl4all-287.le.ssl.lxweb1.edpnet.net
edpnet.net
ssl4all-195.le.ssl.lxweb1.edpnet.net
ssl4all-34.le.ssl.lxweb1.edpnet.net
ssl4all-326.le.ssl.lxweb1.edpnet.net
ssl4all-341.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
*.edpnet.net
ssl4all-224.le.ssl.lxweb1.edpnet.net
ssl4all-347.le.ssl.lxweb1.edpnet.net
ssl4all-141.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-290.le.ssl.lxweb1.edpnet.net
ssl4all-344.le.ssl.lxweb1.edpnet.net
ssl4all-284.le.ssl.lxweb1.edpnet.net
ssl4all-159.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-308.le.ssl.lxweb1.edpnet.net
ssl4all-299.le.ssl.lxweb1.edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
ssl4all-317.le.ssl.lxweb1.edpnet.net
ssl4all-195.le.ssl.lxweb1.edpnet.net
ssl4all-344.le.ssl.lxweb1.edpnet.net
ssl4all-260.le.ssl.lxweb1.edpnet.net
ssl4all-248.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-192.le.ssl.lxweb1.edpnet.net
ssl4all-144.le.ssl.lxweb1.edpnet.net
ssl4all-186.le.ssl.lxweb1.edpnet.net
ssl4all-278.le.ssl.lxweb1.edpnet.net
*.edpnet.net
ssl4all-275.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net
extra.edpnet.net
ssl4all-296.le.ssl.lxweb1.edpnet.net
ssl4all-266.le.ssl.lxweb1.edpnet.net
ssl4all-293.le.ssl.lxweb1.edpnet.net
ssl4all-290.le.ssl.lxweb1.edpnet.net
ssl4all-207.le.ssl.lxweb1.edpnet.net
ssl4all-263.le.ssl.lxweb1.edpnet.net
ssl4all-257.le.ssl.lxweb1.edpnet.net

Certificate

The complete raw certificate details for ssl4all-177.le.ssl.lxweb1.edpnet.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412757430294829497718313423360486316446999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 07:02:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 07:02:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl4all-177.le.ssl.lxweb1.edpnet.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803561827169550242059971174461375370822851110026626526312980601320316362173257589572019828430860519162336255835645178868775027264115780417237282764298784460650307954126460693353802954909099096054088468751764481763303101454679157474172491984655545550845535303475993739611675369848678574834706857094608896210856564616972303398173824547700675524458820410501577242685428684343870387704816408588285152876843040640791190632393142608151124308959374053273726290969361084612648126911474018822069623876802724380318614633674303877907058506090535647464786412140464866090421278579961323893591030965327204441114490242504184445662677785159231752878475996046370980141638060803749774531693583536482310558179982701310508255312916171963365701858680397155980033867472524061523743271046014363832392563094670679805199711390201364934144372740938341006452145046873531045941977443238909604951709996643863905920927871968413075389300473037962344857591015314733916685323087421712959023124607203887312208403738857796803631631339282937400219999996880049293057632529787880209688432120561359386604040706622355313305831947655836274464080123009833006256048670958262286859438100593000156080015856137817773169538948438083657943467559099430695408162334766560756753074749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56b2502682d169314dbc5e8ac785e06a679b69c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alusta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameelec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audex-architecture.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barefootc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batterijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betracked.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boekhoudendodec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coralta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crlc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimatic.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimotec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jandhooghe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job-beurs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcel-depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymessis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.internationalglassfittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papasava.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quasas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusthuisstrijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuldbemiddelingwaasland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simbios.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl4all-177.le.ssl.lxweb1.edpnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandartspraktijkcoremans.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werkenbijreal.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alusta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ameelec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artclub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artecoiffure.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asitshould.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barefootc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betracked.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boekhoudendodec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broekxonweb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busytec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coralta.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crlc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimatic.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimotec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.formaecolore.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationalglassfittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jandhooghe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jmboland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.job-beurs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jsmc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karinverplancke.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logo-paintings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcel-depaire.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymessis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papasava.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pirec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quasas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rusthuisstrijland.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simbios.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simbios.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stephaneevras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandartspraktijkcoremans.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantra.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vematec.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virgin-shoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webpub.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werkenbijreal.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c33d9cfc1000004030046304402205914d8cb062634d77a9ac11664f75daaf2ae91956cdb41a22611b9c9fdf20bf6022003f3344d3983d13b702cd8f3811a095f75c4f1469216ae5db49df9c1ad5b20c600760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c33d9d0c60000040300473045022044636f63a4ba7538d60ec70e4eae3e4d8c4505bc7041667718ca9f99aa7aaad5022100bf986bbcdbcd49374ec3a73ac32e202c94c0a8f7cc977ca18394819bd7c037b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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