RRN-SITRAN-test.minfin.be

- Federal Public Service Finance -

Issued by QuoVadis Europe SSL CA G1

About this certificate

This digital certificate with serial number 14:e1:80:5e:72:70:a1:52:39:45:86:5e:39:43:73:43:bb:89:52:e2 was issued on by QuoVadis Trustlink BVBA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Public Service Finance

Organization: Federal Public Service Finance
Organization unit: 0308357159
State / Province: Brussel-Hoofdstad
Locality: Schaarbeek
Country: BE

QuoVadis Trustlink BVBA

Organization: QuoVadis Trustlink BVBA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 14:e1:80:5e:72:70:a1:52:39:45:86:5e:39:43:73:43:bb:89:52:e2
Serial Number (int): 119208665597404737321311267854297267865194681058
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 2e:9f:e1:1b:5b:a9:3c:0d:b3:01:a5:5a:32:41:7c:0e:1c:c5:b3:6c
AuthorityKeyId: 42:d3:87:73:e1:9e:d3:3e:5c:fe:b0:70:bb:ca:de:21:ba:24:79:36

Fingerprint (sha1): 0b:d6:87:b6:5c:56:a2:b6:42:9d:73:ab:8c:4d:13:52:f0:84:cb:31
Fingerprint (sha256): 07:fe:b6:d3:58:64:6e:05:c5:a9:ad:eb:48:56:96:a1:03:30:3a:f3:cd:5a:41:04:df:58:e6:33:4d:ec:26:e4

Issuing Certificate URL: http://trust.quovadisglobal.com/qveussl1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qveussl1.crl

Check the revocation status for certificate RRN-SITRAN-test.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for RRN-SITRAN-test.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

RRN-SITRAN-test.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for RRN-SITRAN-test.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119208665597404737321311267854297267865194681058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Trustlink BVBA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Europe SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 09:37:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-30 09:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brussel-Hoofdstad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schaarbeek'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Public Service Finance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0308357159'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RRN-SITRAN-test.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 661032590642364631736957048734045025859039430397955068642851746761341831867290163370016623287944682452740183702127150142534278691102340055746090053329564418149876013035982695416756456744906827933264629353816952044688940621265759820194109451841540519462251558460786491379114998944976610318788879979517131839415675963972109994877963955277207538779237975704468369980680316852757215105551448828149735433177765896427914583393562796163179438612747531192385773465169409367404333580698010716783952612369095170494748010672725365649879573549965785581772529270939326326839688785971092453596974306237132150268541048393197420563878881930690461366984911547115019250513187290919486119590259006241805330579449102273609534296254505955656003043893452331848804950505999119088844883356217267895960235648940228124392838517979443621638631850511256596226296839896643081118458112201049510182941332411507121248644285661168363393058746960504650082513314518887894333498996967538129884531334348689475271570467517902490546609951482689622943731560910364862124507600869771324804121728913265058091872161129381626390583146259633095029029809838443220196381117371604286701035729884172261481839207715194083399081311027391436635907039954583309580053263253452284912971921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42d38773e19ed33e5cfeb070bbcade21ba247936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qveussl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RRN-SITRAN-test.minfin.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qveussl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e9fe11b5ba93c0db301a55a32417c0e1cc5b36c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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