*.qa.belgium.be

Issued by Government CA

About this certificate


This digital certificate with serial number 01:00:00:00:00:01:49:f6:6a:6b:d9:4c:59:8a was issued on by Government CA.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains unknown extension ([2.16.840.1.113730.1.1])
  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection

Belgium Federal Government

Organization: Belgium Federal Government
Organization unit: Fedict
Locality: Brussels
Country: BE

Government CA

Company registration number: 201401
Locality: Brussels
Country: BE

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:49:f6:6a:6b:d9:4c:59:8a
Serial Number (int): 20282409603675446732241440102794
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: a5:df:6c:06:ad:de:b1:d7:46:1a:f5:7e:84:7f:a7:b6:59:98:0f:96
AuthorityKeyId: 10:bd:02:30:7f:1d:89:ea:db:d2:b5:50:16:81:2d:1c:e4:23:e9:7b

Fingerprint (sha1): b1:62:d1:b0:64:9b:72:8b:fa:fc:46:d8:3d:af:1a:6e:0c:53:6a:da
Fingerprint (sha256): b0:81:0a:23:53:a3:2c:35:30:da:20:e0:ce:69:17:4c:7f:f7:19:98:b8:c8:50:9c:de:d5:66:0f:b6:e9:7d:73

Issuing Certificate URL: http://certs.pki.belgium.be/belgiumrs3.crt

Revocation information

OCSP Server: http://ocsp.pki.belgium.be/2
CRL Distribution Point: http://crl.pki.belgium.be/government201401.crl

Check the revocation status for the current certificate on *.qa.belgium.be
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Email Protection

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name).

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFujCCA6KgAwIBAgIOAQAAAAABSfZqa9lMWYowDQYJKoZIhvcNAQEFBQAwNjEL MAkGA1UEBhMCQkUxFjAUBgNVBAMTDUdvdmVybm1lbnQgQ0ExDzANBgNVBAUTBjIw MTQwMTAeFw0xNDExMjgxMjQwMDlaFw0xODAyMjgxMjQwMDlaMHAxGDAWBgNVBAMM DyoucWEuYmVsZ2l1bS5iZTELMAkGA1UEBhMCQkUxETAPBgNVBAcTCEJydXNzZWxz MQ8wDQYDVQQLEwZGZWRpY3QxIzAhBgNVBAoTGkJlbGdpdW0gRmVkZXJhbCBHb3Zl cm5tZW50MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV17hSmkT2Nd GGNynQVoUOZSmBRkiStQNe+kJxhcfZXFJEuqR3zSN2x977mO1ScW2V69syOi8dmF cVBZSXxjUsS88TeG1h9YCK43P0Cu/60bJ59y8FlduBUB0w7chcFEvYi5/Af1Wz40 JVsgcGveJ4ARJLuekyriJTzOZTR1blbMDb46V64knBcQ+XuimCsWcTjR2evWlRN3 t+QwQ9S00oooJhYmuLdwbH7WaYyJPyD+aNiCWPPt1MlbSlY0gjdR0TSDXhtBUCQj 4jtm31r/pL5J+sx5ZGNrRqJs047ECWfAGj+4VXPcd7bCouzqZ+z9n6+VUZm29At6 VIhkgdaCaQIDAQABo4IBijCCAYYwHwYDVR0jBBgwFoAUEL0CMH8dierb0rVQFoEt HOQj6XswcAYIKwYBBQUHAQEEZDBiMDYGCCsGAQUFBzAChipodHRwOi8vY2VydHMu cGtpLmJlbGdpdW0uYmUvYmVsZ2l1bXJzMy5jcnQwKAYIKwYBBQUHMAGGHGh0dHA6 Ly9vY3NwLnBraS5iZWxnaXVtLmJlLzIwCQYDVR0TBAIwADBEBgNVHSAEPTA7MDkG B2A4CgEBAwIwLjAsBggrBgEFBQcCARYgaHR0cDovL3JlcG9zaXRvcnkucGtpLmJl bGdpdW0uYmUwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5wa2kuYmVsZ2l1 bS5iZS9nb3Zlcm5tZW50MjAxNDAxLmNybDAOBgNVHQ8BAf8EBAMCBPAwEQYJYIZI AYb4QgEBBAQDAgVgMB0GA1UdDgQWBBSl32wGrd6x10Ya9X6Ef6e2WZgPljAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwQwDQYJKoZIhvcNAQEFBQADggIBAJGR 0r76RjEi6/242aFTEabE1RZjjuMDg5MFwuCHMX0Sptfmj0MQOSg6lU7/0ApIqsA4 wP5lfRDM/DAO5GMUhWyhtz8GnVW4V3CEeuDyWsvpF2ZQ9rXB+4J8RT651eFFVFZ6 X3vww/6b4TS/wP0HsW8zbXBjmmesPw5RbmA0+Gjd8iebYP6T/Dnt/1eXwtTFEviV U4ost4Y5uqn5uaYMJ6KzP8hAEePfuMh5usP+m88Me43B+4DB0fUP7I1y+Bg4QaFC Kuj1ix7tS914GH/IvkDCoxZGtWHwRHo0tUntlWQzXWeLYE9+YalaYkCuGOlSfAXE LXtJ4TG9kw0Ub83SIU6rK1ac7KLY1pVFaPTUKA1AWTvybXb7IU2PtAaELfRAVdVF q+j8bx7Tm798WB7OOuamKzHqTroaNS+senGWbAsa7kizNWR1rvGZ3iZj+6r3l2ck n6uPJmvbsjZXtmAAhLiLryipfh73L/XNFKv+vichK/z/FkLKvdJzgeEHLGaUK8nP 4G+GalFj6IxrNRniK1VJ8XF36huNmO3+/NrndRUfmNCkECED2OdNZ07VcvN/2swx K2S7C3BNJun4dNWwgdsYFl0/Y8urFtuhExEXQ8T3MRH7aH/g5jlVPWXjUtjyZ0U0 p6/3UiVvbAml6u2S12kkTpXdy4Z2RRozGja1AeIb -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV17hSmkT2NdGGNynQVo UOZSmBRkiStQNe+kJxhcfZXFJEuqR3zSN2x977mO1ScW2V69syOi8dmFcVBZSXxj UsS88TeG1h9YCK43P0Cu/60bJ59y8FlduBUB0w7chcFEvYi5/Af1Wz40JVsgcGve J4ARJLuekyriJTzOZTR1blbMDb46V64knBcQ+XuimCsWcTjR2evWlRN3t+QwQ9S0 0oooJhYmuLdwbH7WaYyJPyD+aNiCWPPt1MlbSlY0gjdR0TSDXhtBUCQj4jtm31r/ pL5J+sx5ZGNrRqJs047ECWfAGj+4VXPcd7bCouzqZ+z9n6+VUZm29At6VIhkgdaC aQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603675446732241440102794 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '201401' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-28 12:40:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-28 12:40:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.qa.belgium.be' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fedict' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Belgium Federal Government' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22895231138021336115425627313206530245133489810893764731421588596865465338591899455294735614186276303758175874318399498570301397260756881036069711139843866889344240392762169695166380470327549635665786448087476090765343935141715137918630993337961191687973615152525677861171085685604872888924430876241943175883255212756195674983837274265439173424264267698686034275056282122118012353322195781011085119495395480254341547425911235845886485548165087810202365307958796285101133917633892257965570150894762031466656707232828876713374174018064713742545835226617915184749076514393977713266497934128977740748782179716764276261481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 10bd02307f1d89eadbd2b55016812d1ce423e97b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.pki.belgium.be/belgiumrs3.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.belgium.be/2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.56.10.1.1.3.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.pki.belgium.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.belgium.be/government201401.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 0560 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a5df6c06addeb1d7461af57e847fa7b659980f96 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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