*.kpmg.be

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 5d:9a:c5:82:88:a5:dc:9d:22:83:68:00:fb:d0:71:3b was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.kpmg.be

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 5d:9a:c5:82:88:a5:dc:9d:22:83:68:00:fb:d0:71:3b
Serial Number (int): 124421823300855061783476497637404864827
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e5:aa:9f:87:af:2f:75:fa:9d:c2:4f:b2:f3:b4:07:19:5d:b5:f9:86
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 3e:f5:88:3a:27:57:9c:48:0e:04:61:ce:5f:af:4e:39:16:64:51:06
Fingerprint (sha256): 0d:e7:1c:33:58:07:2f:02:5e:15:7c:85:07:d0:4f:d5:1c:2d:d5:7f:c6:5e:4d:8c:0a:82:91:f3:7b:7f:5d:f4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.kpmg.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kpmg.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kpmg.be
kpmg.be

Other certificates including the domain name kpmg.be

(limited to 100 certificates)
tracking.kpmg.be
onboarding.kpmg.be
cloudia.kpmg.be
*.kpmg.be
collector.kpmg.be
clientexperience.kpmg.com.br
dn.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
mmportal-secure.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
marketing.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
staytuned.kpmg.be
clientexperience.kpmg.com.br
info.nucleairforum.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
cl.sw-t.ch
smartchallenge.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
mmportal-secure.kpmg.be
mmportal-secure.kpmg.be
*.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
marketing.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
collector.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
mi-vsp.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.kpmg.be
marketing.kpmg.be
clientexperience.kpmg.com.br
digital.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
socialsharing.bankenverzekering.kbc.be
onboarding.kpmg.be
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
landing-employees.nationallottery.be
tracking.kpmg.be
staytuned.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tracking.kpmg.be
veniceasp.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
tracking.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
link.socialsharing.cbc.be
clientexperience.kpmg.com.br
tracking.kpmg.be
*.kpmg.be
*.kpmg.be
smartalwayswins.kpmg.be
*.kpmg.be
clientexperience.kpmg.com.br
landing-socialsharing.kbccorporatebanking.be
tracking.kpmg.be
digital.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
socialsharing.cbc.be
marketing.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br
*.kpmg.be
clientexperience.kpmg.com.br
clientexperience.kpmg.com.br

Certificate

The complete raw certificate details for *.kpmg.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zdxz3nLKrz0l1gkwxIm
DMChxFRqpiY+Wn5DS8nsp7Nq174AmOAodL8xziPUjYlcNMAXqVgc0cu5f2j7hGk/
ug+LSJPII/3EJ0X/kNTn1p1t5jz4DU+W6rhNnSjF0cVF2skcarSyRdQaKVIasYoK
ZMP5XpoRn7DOt9YR1LEURULEwIH3mJr8fAAf/uJ53hKF3yRbgc27WjBnt/PMNqmr
nqq59xbROkobE7EPur6DiywQTgmOdh3F2z4m9QbRN+LRHQ1NnoIIvJb4wWRN9Gie
uCqOGoA+D+y9nMgzXby5KAkby4Om5OoZv8Lvu3PxMUcTdLCtwCmhDwjUY7505M2m
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124421823300855061783476497637404864827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kpmg.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31208202064111777965216432689222471421986614316950273130624750196694010940508363628887283485327005072733462250193536076756875715523203073540358774454667885414676611725851908026839180272286957325107801456883110296895033670262554781921555650003345195174287601240845270115413929733666242929181979276828064890500058531513775475288581650789406689991915436102756984319038041564656317155848839682399552881862544191220443002567241034567968258393274514287306418033047642140078344836545442856196316332505355100579867637133161871214006397923685541218320874650311092795861369626800550770442588737414570144676628803839317850826473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5aa9f87af2f75fa9dc24fb2f3b407195db5f986
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpmg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpmg.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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