webmail.facilicom.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 54:f5:3c:f0:97:d4:a6:d6:2a:ed:bd:8c:3d:c2:39:61 was issued on by Sectigo Limited.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=webmail.facilicom.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 54:f5:3c:f0:97:d4:a6:d6:2a:ed:bd:8c:3d:c2:39:61
Serial Number (int): 112928500382598505236890355776364886369
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c8:f6:4d:6d:4b:c9:25:17:27:b7:44:8a:48:a5:85:44:0c:17:72:20
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): f2:51:52:cd:41:fc:d6:fb:52:c0:94:98:74:f8:09:66:7d:4d:bb:90
Fingerprint (sha256): e4:8f:14:27:d0:ae:fa:46:f4:94:65:8d:40:a8:29:be:d7:4c:77:52:17:e2:ee:7c:42:13:69:bc:46:3d:da:6a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate webmail.facilicom.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.facilicom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.facilicom.com
anywhere.facilicom.com
autodiscover.airportcaddy.nl
autodiscover.atapersonenalarmering.nl
autodiscover.axxicom.be
autodiscover.axxicom.nl
autodiscover.axxicomthuishulp.nl
autodiscover.breijer.nl
autodiscover.btosociaalutrecht.nl
autodiscover.buurtteamsvolwassenen.nl
autodiscover.city360.nl
autodiscover.cordaanthuisdiensten.nl
autodiscover.crowdsupport.nl
autodiscover.degenaar.eu
autodiscover.degenaar.nl
autodiscover.dezorgcentrale.nl
autodiscover.embracehospitality.nl
autodiscover.eventtravel.nl
autodiscover.facilicom.be
autodiscover.facilicom.com
autodiscover.facilicom.nl
autodiscover.facilicombuitengewoon.nl
autodiscover.facilicomfoundation.nl
autodiscover.facilicomfs.be
autodiscover.facilicomwwf.nl
autodiscover.fipzorgcontact.nl
autodiscover.foodandi.be
autodiscover.foodandi.nl
autodiscover.glazenwassers.nl
autodiscover.gom.be
autodiscover.gom.nl
autodiscover.gomdirect.nl
autodiscover.incluzio.nl
autodiscover.incluziozaanstad.nl
autodiscover.ivon.nl
autodiscover.kcev.nl
autodiscover.onlineticket.nl
autodiscover.prorest.be
autodiscover.prorest.nl
autodiscover.radaruitvoering.nl
autodiscover.safetygroup.nl
autodiscover.samensterkergezond.nl
autodiscover.stadsteambackup.nl
autodiscover.tapwacht.nl
autodiscover.trafficsupport.nl
autodiscover.trigion.be
autodiscover.trigion.nl
autodiscover.venlovrijwilligerswerk.nl
autodiscover.vervoersprojecten.nl
autodiscover.wijzijnbuitengewoon.nl
autodiscover.wmoradar.nl
failover.facilicom.com
legacy.facilicom.be
legacy.facilicom.com
legacy.facilicom.nl
utodiscover.buurtteamsvolwassenen.nl
webmail.facilicom.be
webmail.facilicom.nl

Other certificates including the domain name facilicom.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for webmail.facilicom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a/R4mN8RLUx4U7STkob
s+bf1Fcrp/1l4i8rcZsTGCGVVUoZtdYuWYurrzpPWiTPPZe1sfdYtz3cL3DlWdkz
6guBPsQ9bdjbNer7+ZhaJLTkazy5836vMuzS/Sq5C6H8K2qi3fdpWVInatdwv844
5UV1P/maB+nWNEi/4wAVpYPd7Lo+xxvx9m0eFGNiGMTF5A8cW2ES0y90mDOCpkV+
RHJNTpuNfjmuGbjzBAhWIGXYBldfIW98wae/Yi6yOQly/J4rPxDz68Y5cCO1zwWm
l8MbqqXQmtJQobbxrKCMRP1HP+as3E5rmfkgl9GCUJNT+Omx7ud+fg1huD/45aB/
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112928500382598505236890355776364886369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.facilicom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30005178281603783220128680532450474215188255987435794551840146715114331884156647460828504354120143819044468482680835008227061873058729764414764587809183292231850990001483005156692181910217262991912657422014125930543464703741680627376572847475300905393098095727434738185018316579893441578390615786182419196678410566006158342790655052829056349729621541148966250287025645081904900855749120617075688010018546918415571629111288391807799280967312861526233589619199764997126403850111509515290953470745770310319704064232184274422440196349031922762798258853225743386569954064331535159544653916503330705230659123400336570613601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8f64d6d4bc9251727b7448a48a585440c177220
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000189067b4030000004030047304502207b844569b7d12620d000d3407a5a1cae7633fe69856a2e72384e99136353dcab022100f92ede8aca0f191b1437a4d6487fa67852da526bf8707b9005e494e820e62d65007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189067b4084000004030047304502200793f8c881911e6a01308137f208327a3a9eb54260a1c0e087c6fca393ff9a2f022100fdb307913eacf65a157640ca4b3a83fb8bf3d7054d4451471570f6b80d421f2b007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189067b405d000004030046304402203713d24881ac4e1d19cbf674e123638d85303ac2047807a767940252745fdaec022077da360ec8eb8f9d9efc0f612398eefe1ba07fe3d1760ae8d80d81a1797090c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1677 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.facilicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anywhere.facilicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.airportcaddy.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.atapersonenalarmering.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.axxicom.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.axxicom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.axxicomthuishulp.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.breijer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.btosociaalutrecht.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.buurtteamsvolwassenen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.city360.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cordaanthuisdiensten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.crowdsupport.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.degenaar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.degenaar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dezorgcentrale.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.embracehospitality.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eventtravel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.facilicom.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.facilicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.facilicom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.facilicombuitengewoon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.facilicomfoundation.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.facilicomfs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.facilicomwwf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fipzorgcontact.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.foodandi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.foodandi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.glazenwassers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gom.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gomdirect.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.incluzio.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.incluziozaanstad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ivon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kcev.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.onlineticket.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.prorest.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.prorest.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.radaruitvoering.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.safetygroup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.samensterkergezond.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stadsteambackup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tapwacht.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.trafficsupport.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.trigion.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.trigion.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.venlovrijwilligerswerk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vervoersprojecten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wijzijnbuitengewoon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wmoradar.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover.facilicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.facilicom.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.facilicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.facilicom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utodiscover.buurtteamsvolwassenen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.facilicom.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.facilicom.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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