developpementdurable.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number be:d3:62:2f:ad:07:58:c7:4a:58:53:af:c2:fb:ef:37 was issued on by GEANT Vereniging.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): be:d3:62:2f:ad:07:58:c7:4a:58:53:af:c2:fb:ef:37
Serial Number (int): 253650885289699448939808376167625125687
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 83:02:18:63:65:3f:db:c4:fa:f1:f8:bc:f3:59:cb:19:d2:39:90:cc
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 59:78:f3:75:d0:28:fc:c9:63:79:db:08:47:a8:de:e6:23:71:d1:50
Fingerprint (sha256): ef:f5:5b:b9:1d:45:e5:82:84:fc:08:85:78:a9:e7:87:4d:73:0f:2f:f1:68:8a:c4:39:8d:ba:f7:47:20:a9:57

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate developpementdurable.be

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developpementdurable.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developpementdurable.be
cidd.be
cidd.belgium.be
dagduurzameontwikkeling.be
duurzameontwikkeling.be
fido.belgium.be
fpssd.belgium.be
icdo.be
icdo.belgium.be
ifdd.belgium.be
journeedeveloppementdurable.be
opdne.belgien.be
poddo.be
poddo.belgie.be
poddo.belgium.be
semainedd.belgium.be
sppdd.be
sppdd.belgique.be
weekdo.belgium.be
www.cidd.be
www.cidd.belgium.be
www.dagduurzameontwikkeling.be
www.developpementdurable.be
www.duurzameontwikkeling.be
www.fido.belgium.be
www.fpssd.belgium.be
www.icdo.be
www.icdo.belgium.be
www.ifdd.belgium.be
www.journeedeveloppementdurable.be
www.opdne.belgien.be
www.poddo.be
www.poddo.belgie.be
www.poddo.belgium.be
www.semainedd.belgium.be
www.sppdd.be
www.sppdd.belgique.be
www.weekdo.belgium.be

Other certificates including the domain name developpementdurable.be

(limited to 100 certificates)
developpementdurable.be
developpementdurable.be
5281.web01.f2w.blue4you.be
www.developpementdurable.be
www.developpementdurable.be
5281.web01.f2w.blue4you.be
www.developpementdurable.be
developpementdurable.be
developpementdurable.be
developpementdurable.be
5281.web01.f2w.blue4you.be
developpementdurable.be
developpementdurable.be
www.developpementdurable.be
developpementdurable.be
developpementdurable.be
www.developpementdurable.be
developpementdurable.be
www.developpementdurable.be
developpementdurable.be
www.developpementdurable.be
developpementdurable.be
developpementdurable.be
www.developpementdurable.be
developpementdurable.be
www.developpementdurable.be
www.developpementdurable.be
www.developpementdurable.be
www.developpementdurable.be
developpementdurable.be
developpementdurable.be
developpementdurable.be
www.developpementdurable.be
developpementdurable.be
developpementdurable.be

Certificate

The complete raw certificate details for developpementdurable.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253650885289699448939808376167625125687
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developpementdurable.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 942342032764746414330255674264655407580625824733809019998910833748626339319887059937407311389361797132933896384534836613458344301483285480580066793408693124994771634212376115623430748905718721058781229044486431084878291914415305363338206717869862836557456078934953411666441378466360125159423406548023356087878817300964474346663154548736094694870318321136589126266582245492092592600575355637401076414420098100427877508648256474525742474738047826534922649221499536941039096717236987912779389948412067463008442728554563534087130924137284145066848869972828667478977019127292604596502180649010698683885257136165908552281322662178697138389142779138919361543606051553378034426690244907030571418011595995350205491673408402967142615628635777001815655232494486695054978872259163764394927899558327315829274953369275934754415213930645266785874194042732627227896036302912854559234459660180063760833296765412306802077820997440182927802866370002147743827824383902612701994166756602675139332997970928241660228161820587280460194855396510428875037027828520611406364844722683298359306414844526052868914351905450226546699767658110855838715161597563542907496547782236573396500698965832238992938874249514328521581647101471751924860400913936416778861844649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83021863653fdbc4faf1f8bcf359cb19d23990cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weekdo.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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