ac4.acc.minfin.be

- Service Public Federal Finances -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fa:81:b6:ca:82:e6:97:a7:c9:7f:1d:44:c4:3e:02:9e was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Service Public Federal Finances

Organization: Service Public Federal Finances
Organization unit: 0308357159
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): fa:81:b6:ca:82:e6:97:a7:c9:7f:1d:44:c4:3e:02:9e
Serial Number (int): 332980512684128473863196304567347053214
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ad:f0:b2:91:2d:e6:41:8d:e3:fa:0b:93:84:3d:fe:ff:f3:46:ac:45
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 42:bc:74:45:5d:26:04:93:c8:83:21:b4:79:71:e8:ad:94:88:0e:97
Fingerprint (sha256): 11:74:fe:02:54:8f:fa:83:7d:d8:3c:39:45:77:5f:be:c6:2c:4c:81:c6:ae:fd:82:78:2b:7e:a2:25:c2:64:7c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate ac4.acc.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ac4.acc.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ac4.acc.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for ac4.acc.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332980512684128473863196304567347053214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0308357159'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ac4.acc.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 996434123709249881232210488572980769005002123906940542043619117655624939241391228389590527069672840657654184538047248681925071891452464376665495688152887857341246341740948751223755106051476012583414650505701863120530101447420170755673743835514374415030688455225273296746382745903476836922497671720451386628048979491463675737533344815726322186894818601690970197270518088131765160905707352292840148740379637068425046396133406415701140338626246782958324061245859325511432316537563731133499676954240291640150813077988439961477911597025313541419836988802190521229771077452307132672166936460985296978136308987302378293412392819727114213874462069316851859794407824389039718159424488152862626778265550753447410624335710195821103717350244035710316334112659967951514192447510015381165682148683665390988225441779282219524939861534287546115274281105236142837468782815849848833477037384442997341049771290491025598520018365880172175909797469076663630577683437916822186186571920848615185406779659926416142658815656892667079638668123795010110597376087505421436538945242938242405974960350605189966775095236048409855645268830570990106698762953946644313614570668512505554517827607822470214006456997030751976119415692513810914144484218560824087118808729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adf0b2912de6418de3fa0b93843dfefff346ac45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac4.acc.minfin.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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