connect.minfin.be

- Federal Public Service Finance -

Issued by QuoVadis Europe SSL CA G1

About this certificate

This digital certificate with serial number 7a:c0:93:09:fd:b3:6c:93:0c:f4:f4:c5:2f:67:37:bf:f2:c5:cb:ed was issued on by QuoVadis Trustlink BVBA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Public Service Finance

Organization: Federal Public Service Finance
Organization unit: Federal Public Service Finances
State / Province: Brussel-Hoofdstad
Locality: Schaarbeek
Country: BE

QuoVadis Trustlink BVBA

Organization: QuoVadis Trustlink BVBA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:c0:93:09:fd:b3:6c:93:0c:f4:f4:c5:2f:67:37:bf:f2:c5:cb:ed
Serial Number (int): 700791426024425878866370123763422281996607802349
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 95:21:b5:28:75:21:bc:79:9a:13:5a:2b:df:a7:d2:d2:2c:65:85:3e
AuthorityKeyId: 42:d3:87:73:e1:9e:d3:3e:5c:fe:b0:70:bb:ca:de:21:ba:24:79:36

Fingerprint (sha1): 1d:d4:48:a6:bb:c6:cf:d3:4d:8f:2b:41:1d:f2:4e:0f:1c:00:1a:2c
Fingerprint (sha256): 10:69:e1:65:dd:78:08:32:61:45:78:de:a9:ae:7c:a0:aa:fe:66:70:4d:b3:f9:fb:57:1c:d1:cf:9e:09:e4:d6

Issuing Certificate URL: http://trust.quovadisglobal.com/qveussl1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qveussl1.crl

Check the revocation status for certificate connect.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.minfin.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for connect.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0bUqo9DVIsufK0ePiL3
CiVwqmIQqtr9hduaUJ9ALKjSAESYQtjY86UmcrSFg2IkdXntzjA29+5q3rKZN2qM
0ue3Cnd3kFp9MZzLbtaYZvstA3CKVaRI3CwBr9ei1HComg5fyXii4LE1AvHOLU+L
AMUCfsSgFQM0/8/YkxaGz/pdjkBwFsOynd/HcmdvgdkLQrcGep6XF3Cx9B7SrTlH
NWkp6wxZyz3UADyfjFmR5ylGLaNLQjhBUrjqpOR332PdslO0ejeyl6Qw+TYwOAGz
wemczJo18grLsbcdBiXvyiOpusFWkVDHFcNHVEkBdzU+rxdUsb5CSyDqA4lyhYkM
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 700791426024425878866370123763422281996607802349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Trustlink BVBA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Europe SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 08:44:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 08:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brussel-Hoofdstad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schaarbeek'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Public Service Finance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Public Service Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'connect.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22631584522453064398318383128206283839920212665939476769449393513953452635889925475480012756043910648941414797276091565786607579911886205104012069624002212995019471646374180216923933217106662588353011128335688399060494386467707024279200634325785079755342040840700213760543082966418670225545999245932279956146617765097311017918785760470307900944551275824571461965404694423173304698403440174417076482414816611702744275489414558067539193044526401363831248824532348562359175739242770311356106261219545476984529220916805913776657281651574512873380259396260653137630482317107139245599337341078555266053062779049906348297327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42d38773e19ed33e5cfeb070bbcade21ba247936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qveussl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.minfin.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qveussl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9521b5287521bc799a135a2bdfa7d2d22c65853e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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