*.ibz.be

- Federale Overheidsdienst Binnenlandse Zaken -

Issued by QuoVadis Europe SSL CA G1

About this certificate

This digital certificate with serial number 79:9f:ed:b6:4f:09:16:6c:d0:c0:a2:89:8c:04:cf:52:6d:fe:d9:a9 was issued on by QuoVadis Trustlink BVBA.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Binnenlandse Zaken

Organization: Federale Overheidsdienst Binnenlandse Zaken
Organization unit: Federal Public Service Interior
State / Province: Brussel Hoofdstad
Locality: Brussel
Country: BE

QuoVadis Trustlink BVBA

Organization: QuoVadis Trustlink BVBA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 79:9f:ed:b6:4f:09:16:6c:d0:c0:a2:89:8c:04:cf:52:6d:fe:d9:a9
Serial Number (int): 694354409404463755473963951263492070578013002153
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 4b:ae:a0:d2:bb:30:cf:fe:73:6c:41:ac:aa:09:69:a3:e4:49:d6:eb
AuthorityKeyId: 42:d3:87:73:e1:9e:d3:3e:5c:fe:b0:70:bb:ca:de:21:ba:24:79:36

Fingerprint (sha1): 28:8f:28:33:0d:61:da:35:4a:dc:13:15:56:c1:37:6c:21:34:7a:1c
Fingerprint (sha256): 43:86:72:ec:7f:6d:d5:fe:04:cc:50:45:21:f9:bc:e0:d9:1d:11:77:e2:fb:0e:19:18:fb:cf:5e:13:be:6d:90

Issuing Certificate URL: http://trust.quovadisglobal.com/qveussl1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qveussl1.crl

Check the revocation status for certificate *.ibz.be

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibz.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibz.be
autodiscover.mibz.fgov.be
autodiscover.ibz.fgov.be
ibz.fgov.be
mibz.fgov.be

Other certificates including the domain name ibz.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.ibz.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsxMxGp8cA0DFIjEvvSnO
BvpfuYDtXYbq4ze4ExkLJ7hPJ40v03B7qWxL30fWN2zhiVeFrZrFOCg96WFT8gL4
qXq+ffdtbPQf6Jp149vyHixpv7I9KVINT+qhCu+DwEnydCH4h4jQuF0eQ6QygcQR
OhMZibrKsI4naxZNEJPbSXWWITSgmTfITz2XsJivj2/0sZSYyG7qeQ+ALrluFR5a
OSHC7NrbkXVr/pbQyI3GjWnog7tN1KPECFTJs1uKpConPOUrYJsSnXnnCVmVpJnZ
PXmPGJo8mkNS45wBBdY8Z++rPZpgbSuhHJOCbgbWgDcxgujvPbKGC0u54N2po9pn
4p+AwWAzooqbAd0TjICtHPc3vIOEfan7COJhOR/gZeWmvuyyeQh7BHc2lCuEVdtF
QGN5rurRCqjz8fmhJfXXDM4QmudKkQ1JM/fJfCaHjicLKHSBjZf2mDyHUo+DLvPq
RFdILQxbbtGzFPDE0yCuRUdSrbleFopr2KRM24Jgwz2U9MD+wC62F8nriM1zB2hM
ixJ7Oy7OW0opJMA/7prESK5W3PvQHmm8eSKXg1N4nSFHRURt8MmfXJbLpiQXifIf
m7cjimEX6rxEsjP6bg/d6gWEr4zRMTuxVPl1UQ+dWS3ReGfNxm/BTY7LykqtyVSj
ma1D4Atb/U3NdUT9C3JOk70CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 694354409404463755473963951263492070578013002153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Trustlink BVBA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Europe SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-28 13:35:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-28 13:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brussel Hoofdstad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brussel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federale Overheidsdienst Binnenlandse Zaken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Public Service Interior'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibz.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 730562131003203793891261198532718846762930654386680829205262969338779974770224707501948235768845223778657234244059101761811763131356560557181393501143723136496032273566322282750911048912646672608071928321672121070054811512668277781408672754701281928214174661941130357817218674538673891957712234368660140917738539817543368685348613611613102892562799637110328268458634804233787937486800572023728113088141768326634650114679891106203232303552520548451640988586793167103642823555275571499138944857744441929393629020881727575816845045778053642345501681660723130624011164737495308805139290511248693607979641185823337673934026544480835544688551430643337428536136193226379340267731011184878438709612843582153887051800264106912385023800530129166431337142146453440001052090153516109492894894313907988461494881987535863268832618097442437049909689671457441664118423838703449954959417100056689773140537156177199137249717363294844092520541761711527747641868757632266447420499089614524273622456166538171346848860916802333931596268154614113567738179506936869542162538254843247464502820805689732085648626905417801641728974883387876156835212605185093616593347023067124040884979175003291243318395707718640515334639206022898139632463279029387448034431933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qveussl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4baea0d2bb30cffe736c41acaa0969a3e449d6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42d38773e19ed33e5cfeb070bbcade21ba247936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qveussl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibz.fgov.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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