*.ibz.be

- FOD Binnenlandse Zaken -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 07:f5:01:33:23:e1:55:a5:06:b0:85:08:b5:db:a6:b5 was issued on by TERENA.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FOD Binnenlandse Zaken

Organization: FOD Binnenlandse Zaken
Organization unit: Federal Public Service Interior
Locality: Brussel
Country: BE

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f5:01:33:23:e1:55:a5:06:b0:85:08:b5:db:a6:b5
Serial Number (int): 10576733034985723856974478724795442869
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 15:e5:0c:4f:a6:8d:3f:05:c5:63:23:74:78:7d:ad:82:63:db:96:fa
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 48:a0:e6:7a:f5:08:41:4f:d7:b7:68:12:34:a7:cd:d7:b8:5a:3a:06
Fingerprint (sha256): 2d:b5:50:f6:24:ae:4a:f7:89:90:31:f2:8c:e0:5e:a1:57:06:51:4b:ca:54:9a:32:b0:e2:79:36:14:a6:fe:dd

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate *.ibz.be

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibz.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibz.be
ibz.be
autodiscover.mibz.fgov.be
autodiscover.ibz.fgov.be
ibz.fgov.be
mibz.fgov.be

Other certificates including the domain name ibz.be

(limited to 100 certificates)
PPT-AIR.IBZ.BE
ibz.be
ibz.be
icmsystem.be
ibz.be
ibz.be
box.ibz.be
box.ibz.be
PPT-AIR.IBZ.BE
ibz.be
2016.ibz.be
dofi.ibz.be
*.ibz.be
PPT-AIR.IBZ.BE
ibz.be
ibz.be
ibz.be
*.ibz.be
DVZRRNWS.IBZ.BE
*.ibz.be
arrivalcenterappointment.ibz.be
ibz.be
ibz.be
ibz.be
*.ibz.be
ibz.be
www.mariageblanc.be
ibz.be
icmsystemprod.ibz.be
ibz.be
ibz.be
*.ibz.be
evigilis-uat.ibz.be
dofi.ibz.be
ibz.be
binnenland.fgov.be
www.rampen.be
ibz.be
*.ibz.be
ibz.be
dofi.ibz.be
services-dvzoe.ibz.be
binnenland.fgov.be
pnr-navitaire-test.ibz.be
*.ibz.be
2016.ibz.be
PPT-AIR.cust1.IBZ.BE
ibz.be
TestJMH.ibz.be
encryption.services-acc-dvzoe.ibz.be
www.xn--calamits-h1a.be
dofi.ibz.be
sts.ibz.be
*.ibz.be
ibz.be
ibz.be
icmsystemacc.ibz.be
ibz.be
ibz.be
*.ibz.be
emm.ibz.be
2016.ibz.be
ibz.be
2016.ibz.be
ibz.be
evigilis.ibz.be
services-acc-dvzoe.ibz.be
2016.ibz.be
ibz.be
ibz.be
*.ibz.be
*.ibz.be
*.IBZ.BE
ibz.be
services-tst-dvzoe.ibz.be
ibz.fgov.be
ibz.be

Certificate

The complete raw certificate details for *.ibz.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10576733034985723856974478724795442869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FOD Binnenlandse Zaken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Public Service Interior'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibz.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697973327456669473220242829322199944831487004997870669208439689126318790120733949668205345467436661195613340566524581419851075591546756947476852403293416291585139851526690950284721486050245775444003431460596206947030302309288873761897803944511753366591624676322540998378041858629144136620563266567948648196611066754558336133528207097670752322991253654641031834487747705145157509209793436599690417774690506726775498117865426193537307335836999807499331847009680326659908864365961460591023739774844911335025169066124076044589260913541768404021776698595297189179547682447318459567880461700583393558686904608833398718153375673044099765663927734587002892170671211195879812322701593726769569295520644332963242334025330225411982788634251222408622587604947446240183500081482906190716756666265649781535779113883821104867846424553926533960651403022350737869517164118933118116483944370291966550841805512987555870658144384403094840503088670867243710429551792786736178847307436358912701285621459688732132531114005341835925642261644215204459852048409751770005397966809547318888965566269993581764396694017013150707801681181185692009083756506496732931525920403070581545933094084699788130010862110923929225480355145193375483065643678948948953821106701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15e50c4fa68d3f05c5632374787dad8263db96fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibz.fgov.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ad0d4dde55eef45af592c0706b6612365af5fbe5c521ea359aae169ac8b9f24206d82c8e550df22d96b8e246f5717ec48aff0a7a6cbe2a756e9d21ad41ecccfd9e3183d149dd86d6d933f23ca3ddc3cf70f69852f9ae1e971c5c30de05f07359f37774e3e84630d459b6df8037e4f4b0956c508328ecf9f533d57509a93590e7685f835a1be39a847755886d675e3be3f23f7a8673536aca6eb92f0c3730ec2e707f76bb074d4294d2f2b248f14dbbefe8cbab53baa76a50bc0f4b2728785b676e81a80da46f69cda95ef12f2e027894800e27f65f0f320db4caa6f86a5e486ace3aeddd6f3bfe8ab4374468ca6f837b4162eb20b3b7ad34d073315dc86b9bb