residencepalace.be

- Federale Overheidsdienst Kanselarij van de Eerste Minister -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6c:bb:e5:e5:24:9d:50:48:29:24:81:e2:da:b8:bd:69 was issued on by GEANT Vereniging.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Kanselarij van de Eerste Minister

Organization: Federale Overheidsdienst Kanselarij van de Eerste Minister
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:bb:e5:e5:24:9d:50:48:29:24:81:e2:da:b8:bd:69
Serial Number (int): 144532245883697019866903517565225057641
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c3:01:26:12:5b:04:74:67:9a:b2:f0:f6:1f:f2:c5:f8:3a:70:fd:07
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b5:eb:5c:a0:10:d1:53:69:9b:08:fe:69:ec:fb:e3:ed:e8:52:cf:38
Fingerprint (sha256): 4d:ec:fa:e5:18:bb:ee:14:0b:4b:ad:e9:8f:04:95:80:4c:f7:f2:fa:57:21:fe:82:c0:f7:97:02:59:82:b7:e3

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate residencepalace.be

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for residencepalace.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

residencepalace.be
2142.adriatic.belgium.be
2142.europe.fgov.be
residencepalace.eu
www.residencepalace.be
www.residencepalace.eu
www.xn--rsidencepalace-bkb.be
www.xn--rsidencepalace-bkb.eu
xn--rsidencepalace-bkb.be
xn--rsidencepalace-bkb.eu

Other certificates including the domain name residencepalace.be

(limited to 100 certificates)
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be
residencepalace.be

Certificate

The complete raw certificate details for residencepalace.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144532245883697019866903517565225057641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Kanselarij van de Eerste Minister'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'residencepalace.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881640002192685275084847575945281651196414613767105225604247417603206421844587704223078560250992991574498266541099387097224508773706963483864003559971451888209789351062196151321240480802018891482930397727337018551618710393241744895999185652359571366669415087851679755301378490716663639053186433863435533026132222464714961406852270094266970242720027151855358739295639284464788344800663719082822596588642458784417074520555909495002312562953987902356943044196630933377991881671406128394942743023936910545406560943668427817005103589936665173558250791873860215589843952879113573922346262794849783560748642208084740493382064382571269711785869868328738550659355842096326748120509941860099260110410493144320457954022545015083407065735409555674262646632338071422057956234155064839491500036764872535690022189398820480321972815854413516748386801919349071548370963575889755974028266420940057967075883706991954964610259193942922757440932059813016697369001354892445309142843911745600143680823301377156531240338447523230054795123084044998994903664614535718438866443451423197313871918428572488221263109307688879656751697812017767222060652597159680518220396533548437700361732498205616724484487446035889159710466676819164531595475568867532697960079333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c30126125b0474679ab2f0f61ff2c5f83a70fd07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residencepalace.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2142.adriatic.belgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2142.europe.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residencepalace.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residencepalace.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residencepalace.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rsidencepalace-bkb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--rsidencepalace-bkb.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rsidencepalace-bkb.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rsidencepalace-bkb.eu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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