kruispuntbank.fgov.be

- Federal Government - Social Security -

Issued by Government CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:41:ee:db:37:8a:fa:a7:2d was issued on byGovernment CA.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Government - Social Security

Organization: Federal Government - Social Security
Organization unit: BCSS
Country: BE

Government CA

Company registration number: 2011
Country: BE

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:41:ee:db:37:8a:fa:a7:2d
Serial Number (int): 20282409603674868143709484656429
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: c5:ad:a5:e6:4b:0d:ef:58:29:6b:82:26:c3:30:d1:8f:c9:5b:fd:78
AuthorityKeyId: c7:a3:46:99:ee:a8:b7:e8:7d:25:f9:9f:e9:9a:45:75:d4:ce:53:7a

Fingerprint (sha1): ee:46:a4:af:75:11:23:52:9d:97:a6:97:80:ff:fb:ee:41:1d:8a:25
Fingerprint (sha256): 00:00:9d:30:19:9d:10:01:6a:ec:80:9b:30:39:5b:12:64:26:ba:c8:13:e0:8e:de:f5:14:a8:e0:ad:53:77:3f

Issuing Certificate URL: http://certs.pki.belgium.be/belgiumrs2.crt

Revocation information

OCSP Server: http://ocsp.pki.belgium.be
CRL Distribution Point: http://crl.pki.belgium.be/government2011.crl

Check the revocation status for certificate kruispuntbank.fgov.be

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kruispuntbank.fgov.be


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banquecarrefour.fgov.be
bcss.fgov.be
kruispuntbank.fgov.be
ksz.fgov.be
ksz-bcss.fgov.be
www.banquecarrefour.fgov.be
www.bcss.fgov.be
www.kruispuntbank.fgov.be
www.ksz.fgov.be
www.ksz-bcss.fgov.be

Certificate

The complete raw certificate details for kruispuntbank.fgov.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvR81yRlqnfmcfTf2F/U
E+NqTU+RhtIsxyuIRU80pV0dq/F2QfxzF57aO1QWEBSG3/l45jjAk7a06RnOxgDh
eXDjXRMI3kC55cT83Gfia1ozJKnVRgqc4cyafqcF/akDloReiO/j69+rR1YFq17u
6zQfYYMp409z9gsTYzPz+4PApdxJS3yYbIlHgpkMF0w1L3/6FaQDCfg1LP44huyQ
t9ohrMLUmTsjFSZfIjkW5oosNwi9Ih5NVQ01RbCOsFHjeJ5iQ+K0PZ/d7MSsVCmd
8Ka1IFR/sF6/1vRZfwh/H3FvM6nq+VaTbkMCm5fACLCUWMj1yDr0SFEqDQn01I7C
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603674868143709484656429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2011'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-25 09:09:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-25 09:09:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kruispuntbank.fgov.be'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BCSS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Government - Social Security'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24105839301000125950062909131836349753975950823621967729449758677748173091347022466127624151344911115477402096789328682385858162110933823242600996557157354374469504813301711120091046603121253381411841911946772454713671268399486684749863423241500524682565135684545269028182648216077411135605451897418821677571544726056819819669258311838405665400523959286424234613490162425591836197239109098096970652830494857465185435696674284553299626962607047823157225504988270027342004417196690328279330435197896323298783881723548889020681718178392827157938468666291699573608325990146098765927024887774027497871968165540022128132673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c7a34699eea8b7e87d25f99fe99a4575d4ce537a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.pki.belgium.be/belgiumrs2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.belgium.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.56.9.1.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.pki.belgium.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.belgium.be/government2011.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							0560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5ada5e64b0def58296b8226c330d18fc95bfd78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (209 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banquecarrefour.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcss.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kruispuntbank.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksz-bcss.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banquecarrefour.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcss.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kruispuntbank.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksz-bcss.fgov.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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