308357159-rrn-sitran-test.minfin.be

- Service Public Federal Finances -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 8c:0c:99:62:9e:10:d2:a6:84:72:9c:31:61:18:24:d0 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Service Public Federal Finances

Organization: Service Public Federal Finances
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 8c:0c:99:62:9e:10:d2:a6:84:72:9c:31:61:18:24:d0
Serial Number (int): 186157337994138894375106438574791730384
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b1:4e:f8:4f:44:e4:c9:c8:5a:6c:39:15:c2:f1:dc:9b:14:6b:c6:8f
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 13:74:5d:d3:76:a5:07:e5:2f:c2:8d:bc:89:97:6b:a0:8c:5e:91:c6
Fingerprint (sha256): 36:a2:0f:8b:5b:92:bb:a0:da:89:bc:7d:67:47:2b:e6:b9:5a:e0:58:be:b3:16:64:c3:80:b6:ca:b7:22:b8:4c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate 308357159-rrn-sitran-test.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 308357159-rrn-sitran-test.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

308357159-rrn-sitran-test.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for 308357159-rrn-sitran-test.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186157337994138894375106438574791730384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '308357159-rrn-sitran-test.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 985683743297267768015626981935451134460213197845272387292695467594394455943157984710156559211842132828041265087074391731348484687685177858790853912016084654546540246430649652642009527124056027135000162886834186858769065389199060302335230894130472978005162845549951199211671773484066548260049291975913175747247437582652447351136880029213415374502547640728295875853938192142642448204170954263762465584953971171476487743483199505073596999964199038816468496887673991404786891652476328922709193117398994829955225747111272544062792742570461590648220908149589422663680010247013710551584730632282819992323646354474336286493141419943017473282448699189487515424485461314847009636915612205157337036665804500079053668761030637197447084017054940032062471262472729162645838877143494939903668844258793193952154346557805451146927269536178094329725080887055850489821459143228194577127282533144709484064458897173781151055787617571854521591064803898737515319262298170103856925252453534296169806067301569562346833162367611849515680853371767564743149123288574147320800988704323180056815873523393000616901725363603067421415177261065024565363940165791746450628497009049863975561313435251085228801191032133501876061864845383939214063211579586944302162499641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b14ef84f44e4c9c85a6c3915c2f1dc9b146bc68f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '308357159-rrn-sitran-test.minfin.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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