Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a0:af:c2:9b:ee:cf:c3:42:b8:72:dd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = BE, L = Brussels, O = Bancontact Payconiq Company nv/sa - BE0675 984 882, CN = Bancontact Administrative Root CA
        Validity
            Not Before: Oct 27 14:10:53 2021 GMT
            Not After : Oct 31 14:10:53 2031 GMT
        Subject: C = BE, L = Brussels, O = Bancontact Payconiq Company sa/nv - BE0675 984 882, CN = Bancontact TLS Client SubCA L2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:89:44:96:aa:3e:90:40:af:d6:2c:7c:67:15:51:
                    51:57:7a:f4:f6:6b:2d:8c:6a:48:e7:6e:55:5d:c5:
                    f2:c1:4b:d2:1b:22:d0:92:0c:96:a0:2b:50:33:f9:
                    54:58:a7:b6:56:c2:5d:a9:cc:db:5b:42:36:b9:29:
                    b8:14:c2:55:8d:23:8c:f1:ae:b9:39:ec:c9:8d:16:
                    8e:ba:de:3c:72:02:4c:cb:b6:79:77:b5:0e:b8:b6:
                    83:39:5d:68:23:1c:fc:b3:9f:18:10:5f:92:78:a7:
                    bd:f8:2f:a2:6f:f5:37:1f:52:7f:dc:2d:0b:6c:7a:
                    72:7d:5f:ba:94:d9:26:31:49:27:c2:64:27:6a:cf:
                    6a:0f:f0:30:10:22:fc:78:26:d6:9d:7c:c9:b2:7d:
                    46:e6:28:5f:28:31:c4:7a:1c:d3:c2:f8:bc:2a:9c:
                    95:1e:b5:57:c6:6e:ab:27:a1:d0:26:4c:23:26:bc:
                    a6:ce:c1:91:8a:e8:2d:05:cc:0c:da:94:fe:96:77:
                    31:48:9a:83:ab:1f:b4:90:24:91:47:ae:6e:e1:a1:
                    62:74:0c:06:13:97:46:f0:fd:7b:05:76:7e:01:0b:
                    b8:00:4a:96:c1:51:64:ed:af:2a:d3:27:e3:ff:9c:
                    5b:6b:b0:09:a2:1d:e2:f8:a1:ea:d9:e8:1d:8b:ad:
                    0a:1b:db:0a:18:a5:c7:b7:36:71:2b:a5:a4:8b:1c:
                    ce:24:e0:54:d1:f1:a5:0e:13:4c:2c:dd:37:37:c0:
                    37:64:bc:5b:8e:c8:1f:99:8f:0c:26:16:4a:40:78:
                    e6:4b:70:a3:ad:47:30:1c:24:a5:9a:af:fb:fe:16:
                    5c:55:24:94:8c:be:c0:ad:3f:df:93:23:2b:b3:ab:
                    4e:45:67:ae:75:dd:85:e4:9d:a2:80:ae:54:9b:38:
                    2f:ec:39:e9:09:0c:e8:3e:58:ac:f6:b1:bf:01:ce:
                    38:bc:6d:b7:6f:bd:da:a4:67:95:8b:c4:d8:73:c3:
                    8d:18:60:c0:d8:cd:ac:e6:6d:06:10:80:94:22:2c:
                    c5:ea:ba:2c:6f:22:2f:78:e2:38:8d:e2:2c:df:27:
                    15:29:27:aa:b2:80:8a:11:f3:5a:1d:aa:41:da:82:
                    ba:a2:b2:fb:99:cf:6e:4d:fe:bc:da:3a:a7:83:8a:
                    de:ab:b6:5f:c1:34:de:34:f5:b8:0d:fd:cc:ab:96:
                    93:43:3b:54:0e:4f:9f:6a:1a:b7:b1:cf:69:df:f8:
                    f0:fc:40:eb:4e:d8:44:24:d4:81:12:a0:f9:07:88:
                    fd:ad:c9:57:61:c4:b5:bb:ea:cc:91:93:12:3d:90:
                    a4:0c:c2:2f:f9:e4:8e:2f:37:1c:c2:b7:ee:bf:cb:
                    b6:7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:2
            X509v3 Subject Key Identifier: 
                29:E6:6B:2A:4F:64:6E:42:9A:91:FE:75:1D:78:39:69:5E:F8:10:43
            X509v3 Authority Key Identifier: 
                6C:1F:6D:9A:5A:80:ED:7E:93:8A:78:08:25:1E:4D:B8:F2:31:77:68
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.bctops.be/Bancontact_Administrative_Root_CA.crl
                Full Name:
                  URI:http://crl.banksys.be/Bancontact_Administrative_Root_CA.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:50:f2:a2:e2:1e:70:54:df:37:58:77:09:16:e8:22:df:d2:
        28:20:ce:7d:3b:7e:d4:36:21:3a:9e:8b:1a:86:51:57:cb:06:
        52:b0:f9:a3:fd:85:12:28:80:5d:0b:80:47:b2:95:22:5b:3b:
        4d:5a:dd:a5:de:a0:2f:31:d5:0a:f0:d3:0c:46:25:16:49:82:
        b5:8c:d2:82:63:7c:d4:fd:91:2f:f4:d0:b5:47:56:52:59:92:
        cf:43:61:1e:ce:e6:ed:11:9a:4b:36:e7:10:c7:07:e7:22:93:
        85:1c:5d:37:b9:6e:a8:20:bf:c5:62:cc:65:82:87:15:b8:a7:
        a0:4a:9c:f6:7f:54:8e:2a:0a:44:eb:fa:91:d3:6d:67:f3:c1:
        cd:8b:f2:c4:dd:1c:58:e0:5d:62:bc:0a:6c:a2:47:41:61:49:
        4c:cc:9f:d3:10:1b:79:e6:a0:7a:b8:37:52:7a:aa:a4:8e:10:
        97:dc:af:83:2c:83:d0:1b:6e:16:83:58:b2:41:30:8f:cf:10:
        9a:3e:af:59:63:0e:08:f3:b4:dc:23:58:ac:03:8e:53:33:b2:
        26:c8:85:2b:21:ae:12:b9:1e:5f:6b:ac:55:28:92:0a:82:78:
        6f:3e:12:67:26:cb:c4:60:0e:6a:8c:04:71:23:f5:54:5f:69:
        3a:41:76:7f:90:02:7c:02:2a:6b:06:ec:96:da:1e:1c:5d:60:
        4f:b0:df:30:77:40:d5:90:a0:56:42:93:66:81:fe:77:a2:e2:
        ea:87:dc:68:e3:81:d6:20:41:ce:42:1d:47:2b:c4:7d:67:88:
        58:02:bb:f3:a4:b1:3f:53:85:d6:32:b2:8b:bb:24:fb:10:b6:
        3b:4e:7b:a8:d4:70:89:96:d4:8d:a8:47:2b:23:17:18:61:f6:
        81:ff:54:08:08:2c:ea:c2:8c:95:db:f1:78:dc:88:89:55:db:
        fb:fb:b3:71:e9:22:3c:03:9f:83:24:45:59:b3:d8:c4:92:2c:
        d9:8a:bf:28:39:45:69:5b:0e:83:13:af:69:f4:70:17:b8:c8:
        ed:81:92:8a:b4:54:7c:e5:fb:67:62:9f:97:af:76:ae:43:00:
        43:0e:04:f7:83:db:db:21:9c:6f:03:14:42:07:13:fc:ed:5a:
        95:ce:d2:93:8c:3d:54:07:c7:dd:b2:75:8e:be:3f:c2:56:6c:
        ef:08:39:fd:99:16:9e:4d:86:11:8f:e8:95:52:40:a0:27:df:
        6c:47:70:78:4b:4d:cf:c1:50:a9:25:41:70:78:57:5c:83:ea:
        b4:17:0b:ec:27:07:83:d0:e4:10:f1:ac:a9:80:c1:af:e8:cf:
        51:9d:56:09:c0:c9:73:41