www.ovam.be

- Openbare Vlaamse Afvalstoffenmaatschappij -

Issued by GlobalSign Extended Validation CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:29:a7:4d:f5:52 was issued on by GlobalSign.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Openbare Vlaamse Afvalstoffenmaatschappij

Company registration number: 0225627740
Organization: Openbare Vlaamse Afvalstoffenmaatschappij
Organization unit: OVAM
Address: Stationsstraat 110
State / Province: Antwerpen
Locality: Mechelen
Country: BE

GlobalSign

Organization: GlobalSign
Organization unit: Extended Validation CA

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:29:a7:4d:f5:52
Serial Number (int): 1208925819615907586897234
Serial Number lenght: 81 bits, 11 octets

SubjectKeyId: 09:9a:c0:b3:b5:45:c9:84:9c:09:e2:4c:c0:38:e5:6d:8a:f5:0e:f1
AuthorityKeyId: 34:b1:f9:c9:8c:6b:35:44:cc:08:69:0a:ee:e3:a3:b9:5c:bf:16:e0

Fingerprint (sha1): 54:bd:8a:ee:bb:58:b3:85:5e:8b:d2:3d:f1:48:d1:ed:93:a0:16:b4
Fingerprint (sha256): f3:a0:83:9b:8e:aa:ea:8f:ef:4c:e3:77:72:d6:6d:31:d8:4f:f4:d4:04:7d:be:24:17:75:5d:40:45:d1:bf:55

Issuing Certificate URL: http://secure.globalsign.net/cacert/extendval1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ExtendedSSL
CRL Distribution Point: http://crl.globalsign.net/ExtendVal1.crl

Check the revocation status for certificate www.ovam.be

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ovam.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ovam.be
services.ovam.be
portaal.ovam.be
mail.ovam.be
ovam.be

Other certificates including the domain name ovam.be

(limited to 100 certificates)
*.dev.aws.ovam.be
jaarverslag.ovam.be
ovam.be
jaarverslag.ovam.be
ovam.be
*.tst.aws.ovam.be
*.uat.aws.ovam.be
*.uat.aws.ovam.be
ovam.be
*.ovam.be
K3000.ovam.be
jaarverslag.ovam.be
*.tst.aws.ovam.be
ovam.be
jaarverslag.ovam.be
ovam.be
*.uat.aws.ovam.be
jaarverslag.ovam.be
ovam.be
*.prd.aws.ovam.be
*.uat.aws.ovam.be
*.ovam.be
*.uat.aws.ovam.be
*.lt.aws.ovam.be
ovam.be
ovam.be
ovam.be
ovam.be
fluvius.ovam.be
*.lt.aws.ovam.be
*.uat.aws.ovam.be
*.tst.aws.ovam.be
ovam.be
ovam.be
*.tst.aws.ovam.be
ovam.be
*.ovam.be
jaarverslag.ovam.be
*.prd.aws.ovam.be
jaarverslag.ovam.be
services.ovam.be
*.lt.aws.ovam.be
*.lt.aws.ovam.be
*.dev.aws.ovam.be
ovam.be
*.ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
ovam.be
ovam.be
*.prd.aws.ovam.be
ovam.be
*.tst.aws.ovam.be
*.tst.aws.ovam.be
*.uat.aws.ovam.be
*.ovam.be
*.uat.aws.ovam.be
*.dev.aws.ovam.be
www.ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
*.dev.aws.ovam.be
*.ovamad.ovam.be
*.ovam.be
*.dev.aws.ovam.be
*.ovam.be
*.dev.aws.ovam.be
ovam.be
jaarverslag.ovam.be
jaarverslag.ovam.be
*.ovam.be
ovam.be
*.prd.aws.ovam.be
www.ovam.be
*.prd.aws.ovam.be
ovam.be

Certificate

The complete raw certificate details for www.ovam.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36tPT9FwzyhByF8CDlkQ
LwZFX4WOO/l13lSRR/OP/5z2Qby/VxDEVI3w6QQsha25/9EFm8GH7e0uBrTzo2ZA
7dWcwuHetS9vlJm5NNFWsYq253ezDV+PRnDuMldnDTXIVE2M2ITMWTX37CwvCwYz
FWnV2n/gffOr3fvhNjCmWPwDA1+kkCrZjKaT6LmEX3fclRcrYFSZkGhy0xmaUmKL
/XfL6T3bc7Td5lPor4QmRkApjvjDo4RQw7yzSJbHwPae33V3MToz9hZDtaJtnrZz
QcMO5pg9bneJ06CEKroxIeKoOZD0RaXv+KrLEOgG6OmA7hRM7K+D04pwgJCoZO7o
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1208925819615907586897234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Extended Validation CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-07-06 09:29:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-15 11:29:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'V1.0, Clause 5.(c)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0225627740'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerpen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mechelen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stationsstraat 110'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OVAM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Openbare Vlaamse Afvalstoffenmaatschappij'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ovam.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28235618024033736505183249654461225313083764828806556534612796176690860280923352338510392565230804750691797409286722937878362339533553592249554514361416733402873277496090736532260005878364378253075631224698000190977057902972004400891166298000913257819525791460985274259825508615659810588440223823436573046320524365042401610513096269708192245246730825264120210078266533083301654044779163081816667786875323883213251938979598932872354128918920040929691663402044598076771242480474252809611684048139482821931544040191101022814604559891629758351037672743916648761551459456789489158439599087834144047837829494025507524503779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 34b1f9c98c6b3544cc08690aeee3a3b95cbf16e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.net/cacert/extendval1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ExtendedSSL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.net/ExtendVal1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							099ac0b3b545c9849c09e24cc038e56d8af50ef1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.globalsign.net/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovam.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ovam.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaal.ovam.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ovam.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovam.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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