acsg1.kbc-group.com

- KBC Groep NV -

Issued by Cybertrust Public SureServer SV CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:42:6c:95:5a:e8:d5:7e:99 was issued on by Cybertrust Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

KBC Groep NV

Organization: KBC Groep NV
Organization unit: KBC Group NV
State / Province: Antwerp
Locality: Mechelen
Country: BE

Cybertrust Inc

Organization: Cybertrust Inc

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:42:6c:95:5a:e8:d5:7e:99
Serial Number (int): 20282409603674903532742634733209
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: 70:1b:fb:21:1d:20:1d:70:18:6b:4f:58:71:13:27:fb:8c:c3:37:e9
AuthorityKeyId: 04:98:60:df:80:1b:96:49:5d:65:56:2d:a5:2c:09:24:0a:ec:dc:b9

Fingerprint (sha1): 91:d8:02:40:9e:15:f9:09:7c:ac:be:13:b9:21:27:bc:05:be:82:3b
Fingerprint (sha256): 07:d0:fa:69:a5:29:35:b5:75:e0:0b:b4:9e:4f:b3:44:ab:69:e0:03:47:5b:69:78:70:e0:f1:60:a0:13:70:34


Revocation information

CRL Distribution Point: http://crl.omniroot.com/PublicSureServerSV.crl

Check the revocation status for certificate acsg1.kbc-group.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acsg1.kbc-group.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsg1.kbc-group.com

Other certificates including the domain name kbc-group.com

(limited to 100 certificates)
mftdashboard.acc.kbc-group.com
msa.kbc-group.com
developer.kbc-group.com
ascep.acc.kbc-group.com
rma.kbc-group.com
rdl.dev.kbc-group.com
internal.acc.kbc-group.com
sap-rx7.dev.kbc-group.com
tink.client.api.be.fet.kbc-group.com
kbc.com
apigw.b2capi.fet.kbc-group.com
citrixbe0.kbc-group.com
sapm.acc.kbc-group.com
atacenter.dev.kbc-group.com
rskp1.kbc-group.com
business.api.kbc-group.com
msa-f.kbc-group.com
pae.dev.kbc-group.com
leasebelgiumbecris.client.fet.kbc-group.com
staff.api.fet.kbc-group.com
openint.big.api.fet.kbc-group.com
algosec.dev.kbc-group.com
idscan.kbc-group.com
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
rusp2.kbc-group.com
etc.acc.kbc-group.com
rbep4.kbc-group.com
business.api.acc.kbc-group.com
rcep1.kbc-group.com
amccclfal.acc.kbc-group.com
pega7.dev.kbc-group.com
rrg1.kbc-group.com
business.api.fet.kbc-group.com
citrixcetb.kbc-group.com
managedtowedc.acc.kbc-group.com
esafe3ps.client.api.be.kbc-group.com
ucm.client.api.be.acc.kbc-group.com
psd2.api.acc.kbc-group.com
iit2bapi.fet.kbc-group.com
riskauthority2.kbc-group.com
sappages.kbc-group.com
commercial-mtls.api.acc.kbc-group.com
investments.kbc.be
behaviodashboardinternal.acc.kbc-group.com
bluecandyapi.kbc-group.com
rskp1.kbc-group.com
sap-rx7.dev.kbc-group.com
amcccmpri.kbc-group.com
psd2.api.kbc-group.com
ascep.kbc-group.com
nicetouch.kbc-group.com
sapbicmc.acc.kbc-group.com
staffapi.fet.kbc-group.com
autolease.dev.kbc-group.com
company-mtls.api.kbc-group.com
nkb.acc.kbc-group.com
esafe3ps.client.api.be.fet.kbc-group.com
access1.kbc-group.com
kbc-atm.acc.kbc-group.com
sappages.kbc-group.com
lma-immoscoop.client.api.be.fet.kbc-group.com
acsg2.kbc-group.com
y4h.open.api.be.kbc-group.com
sasenroll.kbc-group.com
scm.acc.kbc-group.com
citrixbeacc.kbc-group.com
admcclpri.dev.kbc-group.com
rrg2.kbc-group.com
developer.kbc-group.com
swpccm.acc.kbc-group.com
infaanalist.kbc-group.com
apigw.b2b.api.sk.fet.kbc-group.com
pap.kbc-group.com
bluecandyapi.kbc-group.com
webyourservice.acc.kbc-group.com
acafmweb.be.kbc-group.com
rma2.kbc-group.com
acsg1.kbc-group.com
mobileyoungsterapp.kbc-group.com
ifrs92.kbc-group.com
mi.kbc-group.com
corvh.kbc-group.com
autolease.kbc-group.com
comfinapi.kbc-group.com
business-mtls.api.kbc-group.com
olympus.client.api.be.kbc-group.com
rsim2.kbc-group.com
sapbicmc.kbc-group.com
rdl.acc.kbc-group.com
crb.acc.kbc-group.com
sappages.acc.kbc-group.com
orchestration.kbc-group.com
internal.acc.kbc-group.com
bikelease.kbc-group.com
api.be.sandbox.kbc-group.com
kbctouch-a.kbc.be
sappages.acc.kbc-group.com
be.acc.kbc-group.com
ifrs92.dev.kbc-group.com

Certificate

The complete raw certificate details for acsg1.kbc-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU2j/NI8RnD2iEzTJvoL
JuW6MPhrI5Xm9/AbKpxjpXNK0SbHtX4WtIjIIOlZqchlmikVxFrzlWc0QAwfcClj
+j3utYsVZD2QzxfpM4FlyqO8WxBwLoPo/yzbI15OW00RC2/HtT8nTulg1dGNWzxc
WadtBNhfZ+sOIMxzCTfLCZwAeTPMY71N6bWBaU58ZkFe0AuvpS4j6eFVqadwxDd5
/G+5zsOjVtAuaMz2gyzaouxIXryTKXhnmO+Wz5kd9Ebrctvn+bi0fpOMlSWv/q0H
7nAw4Hq2TXFYPiUFf6YA5AiohHMy6F7AlsxudibEi/Ra1nyPF8LjF8wqRl5wr0GQ
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603674903532742634733209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Public SureServer SV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-18 19:27:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-18 19:27:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Antwerp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mechelen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Groep NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Group NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acsg1.kbc-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25917138513250705460970165496379710300230314465369864475151503424405582238730139317322505080186385020609445225329986799025356768147696232813760262086929979338700113986793800515655140565974390088602584304464777256136831686553673448488227606838609545840056694933822431969718934815673279763089539336407428428669843068110911008462558051612139871892066565822152012360452603356817994959392417580104509829498569251934552230478939572333755899950227037961477128288113837110086573083762237958729333009384670299912895796928533419743592345406692879213401737771524769003339944461497747826051879600639899763857697923500914514169961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 049860df801b96495d65562da52c09240aecdcb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.omniroot.com/PublicSureServerSV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							701bfb211d201d70186b4f58711327fb8cc337e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsg1.kbc-group.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001dfb68a7c7baa72d3c4a200e179e90acc19a4a583061ec089715b99a1f57d3d83597b12025003b9f22edde2638d0dc491374bc281baa37ee8ac60569228ffafff18e8b5f5958dedb647328f2445ce547153181a09e1ec721a7e9ace323849779cb074b2a688a0a077b7c8bbef46f11135dcea75d4abe713d652fc4be96e05effc5a5e9a5e14d97ed71a7f681ccf318f5727d0bbcbe9fd3abdee44555ce5a233b70e04547842b181fe07d702f75ae5e23a87b4e216f5c81ecfecb50a69c93cc7207af88f2d2674ae3e2230803710909dc92038affd4bd3429417c86c3055a7e6030427e518023f28b799bed1c0c0fa605aa78cea30a8773ff569320a65d997d5e