residencepalace.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 7e:eb:34:a7:10:53:a5:f3:c6:03:b3:3b:bd:a5:2f:1a was issued on by GEANT Vereniging.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:eb:34:a7:10:53:a5:f3:c6:03:b3:3b:bd:a5:2f:1a
Serial Number (int): 168703985152110498935057243449181155098
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c3:01:26:12:5b:04:74:67:9a:b2:f0:f6:1f:f2:c5:f8:3a:70:fd:07
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 41:97:a9:da:e7:60:f5:ad:91:83:7a:11:ac:24:39:50:8c:f2:2b:59
Fingerprint (sha256): 04:98:d9:5b:4a:82:ae:64:42:8b:b6:6a:72:15:ec:9a:67:bb:57:f2:16:e2:9e:ec:c6:23:76:1f:80:c7:78:86

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate residencepalace.be

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for residencepalace.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

residencepalace.be
2142.adriatic.belgium.be
2142.europe.fgov.be
residencepalace.eu
www.residencepalace.be
www.residencepalace.eu
www.xn--rsidencepalace-bkb.be
www.xn--rsidencepalace-bkb.eu
xn--rsidencepalace-bkb.be
xn--rsidencepalace-bkb.eu

Other certificates including the domain name residencepalace.be

(limited to 100 certificates)
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be

Certificate

The complete raw certificate details for residencepalace.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168703985152110498935057243449181155098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'residencepalace.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881640002192685275084847575945281651196414613767105225604247417603206421844587704223078560250992991574498266541099387097224508773706963483864003559971451888209789351062196151321240480802018891482930397727337018551618710393241744895999185652359571366669415087851679755301378490716663639053186433863435533026132222464714961406852270094266970242720027151855358739295639284464788344800663719082822596588642458784417074520555909495002312562953987902356943044196630933377991881671406128394942743023936910545406560943668427817005103589936665173558250791873860215589843952879113573922346262794849783560748642208084740493382064382571269711785869868328738550659355842096326748120509941860099260110410493144320457954022545015083407065735409555674262646632338071422057956234155064839491500036764872535690022189398820480321972815854413516748386801919349071548370963575889755974028266420940057967075883706991954964610259193942922757440932059813016697369001354892445309142843911745600143680823301377156531240338447523230054795123084044998994903664614535718438866443451423197313871918428572488221263109307688879656751697812017767222060652597159680518220396533548437700361732498205616724484487446035889159710466676819164531595475568867532697960079333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c30126125b0474679ab2f0f61ff2c5f83a70fd07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residencepalace.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2142.adriatic.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2142.europe.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residencepalace.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residencepalace.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residencepalace.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rsidencepalace-bkb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rsidencepalace-bkb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rsidencepalace-bkb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rsidencepalace-bkb.eu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0052dad191974eacb70d73519bbdce850a5583ae85a327c6694e4e06a69cd80108a2ad02337152dbeb4f91cafeffa1d2f945e3d01a98417b524a84731ade438a8542a1ec45e5126f3a14e313541f862d728d029cdd7760eb73d284ab14850e2ab94beab68b4c7109735baf94e5109baf2e5e6f1d5a9285a07ed9e548698f7fe57cc37aa93ad1e3ab67327154c3cb28e979f574eeed590da3ce6e6616a76cf4923ca7a35d12d187bc657b3ea44b819b8d037584765871a9f0d296cd81bd31ab9be578f7c4e82d03109aafee37c4e203d8e0cc73f9ba235b0202d119112a693975ca09287032533080352b4c8e778ecd7eb3cd2c2bb1228d25581e1fd8179e791fdbaa6907ce492748a47ce881e62414495a3e4ab62a74323f2f9dc8a6cbf3d1a0e28fe882a9b295899a79250b921bafdbc82db2e818e656218eb8220f0b06ad3236df6535be7d64f58d4e0d385602daa49c3f8689d85d20bf9e4622f406c38972754622a82b8633c3b21e4f1243f200527074209d08d41897dd0975cabdc3c45065a54eb8bb3ee145a29c15fb7e186c38455a1f896b32ef0b3c0a1f6bae890e65de9b6050eda50676d279458d032918a13a1b8daa592de59e8e18a355606395532b5ce78d47a00dfc66f4e29a96172fd0a1a2a17cffeee7a39c7fb6bb34f49606cf0b3a7f80d877ee995bbb81cbc24294f579f432b1a97bc61a8d694352eba2d440