developpementdurable.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 45:ed:d4:40:9a:5c:d4:a7:62:bb:22:f9:65:f6:e1:2a was issued on by GEANT Vereniging.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
Locality: Bruxelles
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 45:ed:d4:40:9a:5c:d4:a7:62:bb:22:f9:65:f6:e1:2a
Serial Number (int): 92951611053843241362678531226338779434
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: de:45:d8:1a:96:00:81:9f:e8:84:5a:16:1c:ca:61:66:2a:d7:f4:f8
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 45:57:5c:40:80:c0:7a:b5:6b:ff:1a:fd:de:47:9e:a9:08:47:2f:c9
Fingerprint (sha256): f1:d6:f0:ad:16:e7:33:75:74:07:86:a1:e5:4f:91:2d:25:fb:45:56:09:4a:c0:a3:3d:1d:13:77:be:12:af:38

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate developpementdurable.be

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developpementdurable.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developpementdurable.be
cidd.be
cidd.belgium.be
dagduurzameontwikkeling.be
duurzameontwikkeling.be
fido.belgium.be
fpssd.belgium.be
icdo.be
icdo.belgium.be
ifdd.belgium.be
journeedeveloppementdurable.be
opdne.belgien.be
poddo.be
poddo.belgie.be
poddo.belgium.be
semainedd.belgium.be
sppdd.be
sppdd.belgique.be
weekdo.belgium.be
www.cidd.be
www.cidd.belgium.be
www.dagduurzameontwikkeling.be
www.developpementdurable.be
www.duurzameontwikkeling.be
www.fido.belgium.be
www.fpssd.belgium.be
www.icdo.be
www.icdo.belgium.be
www.ifdd.belgium.be
www.journeedeveloppementdurable.be
www.opdne.belgien.be
www.poddo.be
www.poddo.belgie.be
www.poddo.belgium.be
www.semainedd.belgium.be
www.sppdd.be
www.sppdd.belgique.be
www.weekdo.belgium.be

Other certificates including the domain name developpementdurable.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for developpementdurable.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92951611053843241362678531226338779434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bruxelles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developpementdurable.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741656399456685698400356093808876594965160885460128294648808006070740192383174430592759886437760948945971046416678495057125078847128104279960995898983389248014989774937916121972947423218053431035279223868936906379892655385922382681304678382834189880706657429711773101313214528224386512911856856171999629859369409674152815997242210405190230113809868587539984780427822102057972552080469223440091064887000185299372846867335348563220849801253908400526465187842074521517033974651671243160922645061923645701213537379991566853563259801512018806440549697212473591818583359035745283031931189934468114641623735540830824581899936250289480299905656157949186873787813444046164332953587087698050568572889880037788844925721507376130786649081021915414601525098576373603137811228594539593681950177741009021000660188993378005280578165108095261279606034068574418806502449775084297929252531506721284623962674925206327750221088152825176177209758930720753044307569471808877056485680127194734496621414879767402378580999338301301361008462590763163440842438304596076094621611816651884437557235676536858252802418774092312424939695610092220842408904990280039288274472325010380022121571083312585820234685622812849999563104518081908410449873332493389247244208197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de45d81a9600819fe8845a161cca61662ad7f4f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cidd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dagduurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developpementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duurzameontwikkeling.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fido.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpssd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icdo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifdd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.journeedeveloppementdurable.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdne.belgien.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poddo.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semainedd.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sppdd.belgique.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weekdo.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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