wa-a.kbc.be

- KBC Groep NV -

Issued by Cybertrust Public SureServer SV CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:41:99:6b:26:ff:e0:a9:a1 was issued on by Cybertrust Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • Subscriber certificates must contain at least one policy identifier that indicates adherence to CAB standards (BRs: 7.1.2.3)
  • Subscriber Certificate: certificatePolicies MUST be present and SHOULD NOT be marked critical. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

KBC Groep NV

Organization: KBC Groep NV
Country: BE

Cybertrust Inc

Organization: Cybertrust Inc

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:41:99:6b:26:ff:e0:a9:a1
Serial Number (int): 20282409603674844095120108726689
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: 57:80:a6:8d:0e:0e:ef:08:c1:15:06:7f:04:bd:6e:65:51:1b:a4:4e
AuthorityKeyId: 04:98:60:df:80:1b:96:49:5d:65:56:2d:a5:2c:09:24:0a:ec:dc:b9

Fingerprint (sha1): cc:0c:3d:d4:32:01:ee:c8:b1:a6:a2:a4:7a:af:00:6c:ae:4e:de:34
Fingerprint (sha256): 19:77:05:5f:b6:50:2b:57:af:bd:21:f5:63:72:0a:f9:14:f1:b7:0f:10:1e:f3:d2:1a:9a:5b:ac:bd:8c:d4:a1


Revocation information

CRL Distribution Point: http://crl.omniroot.com/PublicSureServerSV.crl

Check the revocation status for certificate wa-a.kbc.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wa-a.kbc.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wa-a.kbc.be
wa-a.cbc.be

Other certificates including the domain name kbc.be

(limited to 100 certificates)
rewselect-a.kbc.be
landing-socialsharing.hr.kbc.be
link.socialsharing.corporatebanking.kbc.be
kbc.eu
media.kbc.be
www.kbcautolease.be
kbc.com
auth.jobs.kbc.be
support2.kbc.be
developer.kbc.be
business.api.kbc-group.com
speciaalvooru.kbc.be
publiccontent-f.kbc.be
forwrd.it
pdf-accept.kbc.be
migration.business.api.kbc-group.com
business.api.acc.kbc-group.com
landing-socialsharing.corporatebanking.kbc.be
wcmassets-a.kbc.be
MFTACC-NBBCAP12-0403211380.kbc.be
api.comfintouch.acc.kbc.be
KBCGroup-Checkdoc-Client-DEV.kbc.be
media.kbc.be
mobile-f.kbc.be
business.api.fet.kbc-group.com
dealingroom.kbc.be
auth.jobs.kbc.be
expense-management-f.kbc.be
app.brand.ambassify.eu
anexus3.kbc.be
psd2.api.acc.kbc-group.com
ipa2-a.kbc.be
t.info.kbc.be
socialsharing.hr.kbc.be
matti.securitiesservices.kbc.be
acmportal-f.kbc.be
investments.kbc.be
acm.kbc.be
rewselect-a.kbc.be
developer-a.kbc.be
socialsharing.brussels.kbc.be
ajenkinsegl.kbc.be
bluecandyapi.kbc-group.com
jobs.kbc.be
psd2.api.kbc-group.com
landing-socialsharing.securitiesservices.kbc.be
warrant.esop.kbc.be
warrant.esop.kbc.be
auth.jobs.kbc.be
MFTPRO-NBBCAP18-0426403684.kbc.be
kbctouch.kbc.be
auth.jobs.kbc.be
bluecandyapi.kbc-group.com
kbctouch.kbc.be
landing-socialsharing.securitiesservices.kbc.be
multimedia.kbc.be
psd2hub.qwac.client.api.kbc.be
elb-a.kbc.be
support.kbc.be
aalmcenter.kbc.be
kbctouch2-a.kbc.be
research.kbc.be
publiccontent.kbc.be
kbcinvest.kbc.be
design-f.kbc.be
socialsharing.bankenverzekering.kbc.be
bedankt.kbc.be
partner-a.login.kbc.be
media.kbc.be
landing-socialsharing.brussels.kbc.be
ambassadors.nationallottery.be
media.kbc.be
api.comfintouch.acc.kbc.be
kbcard.kbc.be
internal.acc.kbc-group.com
mftgtwp.servers.kbc.be
ipa-a.kbc.be
kbctouch-a.kbc.be
aalmaddons.kbc.be
ul-a.kbc.be
psd2-mtls.api.kbc-group.com
landing-socialsharing.securitiesservices.kbc.be
frontend.production.kbc.agiprod.agifly.cloud
warrant.esop.kbc.be
isupport.kbc.be
internal.kbc-group.com
zoomit-client.5000110952590.beta.zoomit.kbc.be
ul.kbc.be
touch.cbc.be
neon.securitiesservices.kbc.be
link.socialsharing.kbccorporatebanking.be
mras.kbc.be
landing-socialsharing.kbc.be
wcmassets.kbc.be
MFTPRO-NBBCAP1M-0444058872.kbc.be
socialsharing.corporatebanking.kbc.be
internal.kbc-group.com
failover2.kbc.be
dev-support2.kbc.be
ipa-a.kbc.be

Certificate

The complete raw certificate details for wa-a.kbc.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEjH3BToUT8ZRdcXa/xj
zxGwA3eiiw2k6dTsIsJtd1fOwrGqPtMOsBG8sc4g6XoHcRfGeBdKU/za1lzA+V7z
GIkmCTDoR5fQ0z6VMwjC8BFvwMvAGPBiFZ8JjwUGoJHB+aggcI6ehUbmW/74Xn93
nRahqTTxAiopVvUX/z4z+pQiqd/QOf4CaroKKhY++TQfm96wck6YRedlClbgdN/5
pwlNyHVUFmkSMvEG4NQ0ZeEanuR5ltfd70WDFS0AGqc8kaHCssFL72KUTig1KtyF
nWNVZzqL1iNCiV2MFt47kh6YLE0H2TQxHQgKtuAgbJQzePUrrfrRf+99eFW3CEnI
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603674844095120108726689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Public SureServer SV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-08 19:16:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-08 19:16:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KBC Groep NV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wa-a.kbc.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24273644055224876692446973121940315476472873648904343630892178992098457649434363720297933373792406811808128922166361260675378801083017796069359003347654140377988763982813675508706218794500367619073106723241986114118361659549349010951432463811476870260826896756361463796391608638771775766521681614975593665570372010396279932797935559616208745494234133686633280707052813929807787829283786498555662104975828768457492359934360989949944778686886460135220169386536440042641933886804093517717871161506208536038644885010425032362887650765997226060092548897699237981659960098942018765056644035972634575271116572321350142249181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 049860df801b96495d65562da52c09240aecdcb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.omniroot.com/PublicSureServerSV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5780a68d0e0eef08c115067f04bd6e65511ba44e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wa-a.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wa-a.cbc.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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