tna-git.minfin.be

- Service Public Federal Finances -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number ce:04:e4:0e:09:8d:c8:4b:0e:45:ae:dd:b3:6d:5a:21 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Service Public Federal Finances

Organization: Service Public Federal Finances
State / Province: Bruxelles-Capitale, Région de
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): ce:04:e4:0e:09:8d:c8:4b:0e:45:ae:dd:b3:6d:5a:21
Serial Number (int): 273846361820667486396044330832537410081
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 29:a9:0e:7f:dc:29:33:7b:ef:fe:97:94:b7:b8:34:02:0a:66:be:6d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 26:56:ef:1c:ed:4d:75:95:09:35:e4:20:21:95:eb:67:74:43:44:e2
Fingerprint (sha256): 76:20:40:c8:93:12:b8:02:85:5b:49:4d:1e:2b:fb:4d:52:cc:26:fc:af:2a:dc:90:8e:98:cf:8c:ab:5c:3f:e0

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate tna-git.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tna-git.minfin.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tna-git.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for tna-git.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273846361820667486396044330832537410081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bruxelles-Capitale, Région de'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Service Public Federal Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tna-git.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884634935704488920485198441084524352464655859602843636042780578256557458426454416162538472695553077584819435678798522893792665073678915285578963019805411342128764055655624290568550366440821328772130454347880240812453571931812871704769199004649864975635334539621932648112420110625753344261310699543616351276762789086814960218431936374279592814847416430815876418000566042521452149670764594309702853049546324515468206410750524244976459898061998669930253584797881187015670775710544913203500650469645020864822397554232923708630062542789923659718639989836720916270773993397218818987834844602932924315734350510563800244494481746858957084764093032043070647833243863283456654676909437739879855060285808177464703766933885522979867270878067778283677145987052235295579569893735732910451426113597099748794422541037717372377662671465486258581726358624526762033183383156129455591389286424966477444770793890134814233996135470471043864192884895180071906176905673235514038971600987689616919273428787417756956564213955932527125374347039515068188819994318910335955252272424007575810511856168543364723287768422624583826958849076715795391271937391509785672959052352607967897642484607383370455492795678355267616336326901778855710034335216062469801653701993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29a90e7fdc29337beffe9794b7b834020a66be6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tna-git.minfin.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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