*.infocenter.belgium.be

- Federale Overheidsdienst Beleid en Ondersteuning -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ec:74:2f:f2:2d:9e:09:17:78:c0:a9:af:b4:9f:af:4c was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Beleid en Ondersteuning

Organization: Federale Overheidsdienst Beleid en Ondersteuning
State / Province: Brussels Hoofdstedelijk Gewest
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ec:74:2f:f2:2d:9e:09:17:78:c0:a9:af:b4:9f:af:4c
Serial Number (int): 314301085901414764746421867035337142092
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:d0:f9:37:02:31:dd:f4:db:a4:96:57:a9:c2:29:60:fa:59:2e:83
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ff:79:48:c7:d7:4c:b5:9a:fb:76:c4:c1:9a:7c:4b:b3:a4:de:39:d6
Fingerprint (sha256): 02:ab:02:d3:a3:1d:ac:fd:85:aa:fe:fa:bb:76:c2:d1:92:a7:63:1c:96:bc:2a:33:b5:5e:98:ff:70:12:6f:1f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.infocenter.belgium.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.infocenter.belgium.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.infocenter.belgium.be
infocenter.belgium.be

Other certificates including the domain name belgium.be

(limited to 100 certificates)
www.venezuela.diplomatie.belgium.be
16-loi.be
www.australie.diplomatie.belgium.be
www.business.belgium.be
5226.web01.f2w.blue4you.be
www.koeweit.diplomatie.belgium.be
wtsvcvic099a.services.gcloud.belgium.be
rma-help.fedict.belgium.be
*.spaas.gcloud.belgium.be
www.japon.diplomatie.belgium.be
2014.jaarverslag.financien.belgium.be
fedict.be
digiflow-mm.ta.belgium.be
support.eloket.belgium.be
www.bulgarije.diplomatie.belgium.be
www.griekenland.diplomatie.belgium.be
*.ta.belgium.be
finances.belgium.be
consular.diplomatie.be
www.jordanie.diplomatie.belgium.be
www.ierland.diplomatie.belgium.be
www.panama.diplomatie.belgium.be
*.adriatic.belgium.be
www.zweden.diplomatie.belgium.be
www.portugal.diplomatie.belgium.be
2013.jaarverslag.financien.belgium.be
bienarrondir.belgium.be
www.verenigdestaten.diplomatie.belgium.be
*.belgium.be
organesdeconcertation.sante.belgique.be
www.evenements.emploi.belgique.be
*.infocenter.belgium.be
www.chili.diplomatie.belgium.be
www.mozambique.diplomatie.belgium.be
finshop.belgium.be
www.ofoifa.belgium.be
bibforum.fgov.be
www.ofoifa.belgium.be
www.oeganda.diplomatie.belgium.be
*.services.belgium.be
www.maleisie.diplomatie.belgium.be
myhandicap.belgium.be
www.mozambique.diplomatie.belgium.be
*.decroo-i.archive.belgium.be
handicap.belgium.be
www.inde.diplomatie.belgium.be
www.duurzaamevenement.belgium.be
premier.michel.archive.belgium.be
www.zuid-afrika.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
www.saoedi-arabie.diplomatie.belgium.be
www.kosovo.diplomatie.belgium.be
panorama.belgium.be
complaints.p-o.belgium.be
handicap.belgium.be
residencepalace.be
smp.belgium.be
wahl2003.belgium.be
eIDAS-M.iamfas.belgium.be
premier.be
www.koeweit.diplomatie.belgium.be
www.libanon.diplomatie.belgium.be
rapport.mobilit.belgium.be
www.qatar.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.spfeconomie2018.belgium.be
www.diplomatie.be
www.vaticaanstad.diplomatie.belgium.be
meldpunt.belgie.be
www.ivoorkust.diplomatie.belgium.be
bienarrondir.belgium.be
cass.justice.belgium.be
www.jamaique.diplomatie.belgium.be
www.evenements.emploi.belgique.be
e.koba.be
belrai.org
cgra.belgium.be
accreditation-new.belgium.be
consular.diplomatie.be
www.turkije.diplomatie.belgium.be
www.venezuela.diplomatie.belgium.be
www.ethiopie.diplomatie.belgium.be
www.servie.diplomatie.belgium.be
mailings.social.belgium.be
idp.iamfas.belgium.be
2014.jaarverslag.financien.belgium.be
www.kmteams.belgium.be
*.news.belgium.be
scope.belgium.be
*.spaas.gcloud.belgium.be
www.wellrounded.belgium.be
2018.jaarverslag.financien.belgium.be
certif.iamfas.qa.belgium.be
ibfp.be
www.italie.diplomatie.belgium.be
gutgerundet.belgium.be
webdiv.mobilit.belgium.be
www.ofoifa.belgium.be

Certificate

The complete raw certificate details for *.infocenter.belgium.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314301085901414764746421867035337142092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels Hoofdstedelijk Gewest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Beleid en Ondersteuning'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.infocenter.belgium.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874889731732184201458479413462423109233687660019874477487173564059457215684662143528615241774774838564097092135106184887713322934775534392389149385999379067044709087390567275809848640733209171210029160557063861989070301385720337767504620501046625830739503502084616719044121875154322820180529497341024691037800658626893009912270325039883991010733074025529882954633569535469341558048124178059564629938351819801202068840740049866257701127393435012923881270361688356058186609651191770856109686061348520868724893757820848729039398357304811159142036601485978345687757266332621200444931627436225247385226465624740828007059253504263687839665104058261421308258599642596012975200956717669504488361668195523250963253687305146959167143840090315700241192624328330837424845053657936201903087828767166770198438903634366283486346387229256055535546916893984650702350158590949043158894148926151955771527864876534083869411939241718902423374409130827704454045815634323841323848445637780822770286564167709772656483835992691037297348936871815063888404301848684892033195253803706417600874237635087861692669473362804565962229716704054860078610993540804366559732317284465895903777655499962074958936489041677236841037386260391839723133562906754666365579534073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1d0f9370231ddf4dba49657a9c22960fa592e83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infocenter.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infocenter.belgium.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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