www.ofoifa.belgium.be

Issued by Government CA

About this certificate


This digital certificate with serial number 01:00:00:00:00:01:4d:67:77:e2:2f:15:9e:70 was issued on by Government CA.

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Certificate contains unknown extension ([2.16.840.1.113730.1.1])
  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection

Belgium Federal Government

Organization: Belgium Federal Government
Organization unit: Fedict
Locality: Brussels
Country: BE

Government CA

Company registration number: 201402
Locality: Brussels
Country: BE

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:4d:67:77:e2:2f:15:9e:70
Serial Number (int): 20282409603675694726497818746480
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: 4c:83:7d:1b:58:13:1f:bb:db:b6:4e:f0:45:c0:6b:f5:1a:cf:cc:7e
AuthorityKeyId: 8e:e8:39:2e:a2:5e:8c:ba:5f:c1:ed:02:29:a5:cf:40:c3:b9:9b:ba

Fingerprint (sha1): 99:b6:f1:f2:1f:b5:93:a3:82:68:6f:a1:d3:7a:77:af:8b:2d:35:c4
Fingerprint (sha256): f1:44:4d:45:21:a9:2d:1b:73:b6:65:59:51:0b:f4:24:a5:e2:5b:41:dd:0f:2c:cd:46:4c:0c:69:6d:3e:62:3f

Issuing Certificate URL: http://certs.pki.belgium.be/belgiumrs4.crt

Revocation information

OCSP Server: http://ocsp.pki.belgium.be/2
CRL Distribution Point: http://crl.pki.belgium.be/government201402.crl

Check the revocation status for the current certificate on www.ofoifa.belgium.be
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Email Protection

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.ofoifa.belgium.be

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF4jCCA8qgAwIBAgIOAQAAAAABTWd34i8VnnAwDQYJKoZIhvcNAQELBQAwNjEL MAkGA1UEBhMCQkUxFjAUBgNVBAMTDUdvdmVybm1lbnQgQ0ExDzANBgNVBAUTBjIw MTQwMjAeFw0xNTA1MTgxNDQwMTlaFw0xNjA1MTgxNDQwMTlaMHYxHjAcBgNVBAMT FXd3dy5vZm9pZmEuYmVsZ2l1bS5iZTELMAkGA1UEBhMCQkUxETAPBgNVBAcTCEJy dXNzZWxzMQ8wDQYDVQQLEwZGZWRpY3QxIzAhBgNVBAoTGkJlbGdpdW0gRmVkZXJh bCBHb3Zlcm5tZW50MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg6s KBFtVopCtZa0FiAMJqjCQLG4pWWeixfUUR+Xe6R3YX9jkZFwrFOk4QfZLRRsp2AH bUcoj+5W8jefv2z2k+oJ7qQEGbe3XPiGJsUSrfbUZ2E/CHndzxg9kW/9gClkUNvx pX5b/KXd93CLMM8pgZjyI54Hx+JMFIZ13w4LhAQWhZ52YUJaysh4kl442S1FezyH kUEg8zUDqodHoztGTiRTfH1dlbTeJ2CSQZMix3t96VDv1fz1OSg6v+ohjcLFCM6f 8zWo+roheM8CbLo6yAsY8XoJRDLxcQLnC98q6Iu8sgy7o0S/FWZHHSGP76PrT/M5 b0uHjD6WPzxozJwUNwIDAQABo4IBrDCCAagwHwYDVR0jBBgwFoAUjug5LqJejLpf we0CKaXPQMO5m7owcAYIKwYBBQUHAQEEZDBiMDYGCCsGAQUFBzAChipodHRwOi8v Y2VydHMucGtpLmJlbGdpdW0uYmUvYmVsZ2l1bXJzNC5jcnQwKAYIKwYBBQUHMAGG HGh0dHA6Ly9vY3NwLnBraS5iZWxnaXVtLmJlLzIwCQYDVR0TBAIwADBEBgNVHSAE PTA7MDkGB2A4DAEBAwIwLjAsBggrBgEFBQcCARYgaHR0cDovL3JlcG9zaXRvcnku cGtpLmJlbGdpdW0uYmUwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5wa2ku YmVsZ2l1bS5iZS9nb3Zlcm5tZW50MjAxNDAyLmNybDAOBgNVHQ8BAf8EBAMCBPAw EQYJYIZIAYb4QgEBBAQDAgVgMB0GA1UdDgQWBBRMg30bWBMfu9u2TvBFwGv1Gs/M fjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwQwIAYDVR0RBBkwF4IVd3d3 Lm9mb2lmYS5iZWxnaXVtLmJlMA0GCSqGSIb3DQEBCwUAA4ICAQCO5pyJsXxTEn72 EHpoekJSvOGE+1UIqFN9SDDZxOMzRGFPlxyib0aj09MKJpSUztt2JPyGo1XIFrw/ R9o+sAX8pWTjkbE+J0pDHUPGKNxKn0J6EmHbkgvZtkpiP73jJQSfBrrCaE/hVWlL eMOU2MfNT8xN8asAge13QxIy6P+JLSELR3Yns0HHgqxa7LZccQi54AqN4MQ+Cel6 BrJ/XogvthALRRmHdD8XXxdtiMrQKOayKmakD+CssMom8Lp1GWGqNS4I6cv/1VZy QqenQwZH6/ZQNfY9EWUp+FfFQorHl9g8QNL2YmIpFYXKnpz3oA4cEIbNwoRCtltt w1h7QcZkwAa/DABu1CWnjQYig1eJz3aXDxkUu5IgVhd3pqWFkQx6cAtEto17JvUh 2QkAnYNAlSrLzyXijMQW6K9oqkk1vCBl2J1HBi+C0o7P7foHiRTDBRmog54EWgyK ICvlbxuepU0Tdv4j+YrI7XF9UcPN+t0QZzDBZbXYK5c6u/3n7thBgQZscuyiHXj6 CNhpp623WBwhEclh8/+i8GGwzdn2wyn2TSziOGGeTNtnKqUpzIq2Dnsy9un0WUaq e9UgmfNB4aF6aL5eJJP5U1jexMGoN6dQv3+9iqPALFH2nMvJTEHqljYQvnd7PhLp rW1L9sruWkTFVqarwQ7ENbVkLxS5aw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg6sKBFtVopCtZa0FiAM JqjCQLG4pWWeixfUUR+Xe6R3YX9jkZFwrFOk4QfZLRRsp2AHbUcoj+5W8jefv2z2 k+oJ7qQEGbe3XPiGJsUSrfbUZ2E/CHndzxg9kW/9gClkUNvxpX5b/KXd93CLMM8p gZjyI54Hx+JMFIZ13w4LhAQWhZ52YUJaysh4kl442S1FezyHkUEg8zUDqodHoztG TiRTfH1dlbTeJ2CSQZMix3t96VDv1fz1OSg6v+ohjcLFCM6f8zWo+roheM8CbLo6 yAsY8XoJRDLxcQLnC98q6Iu8sgy7o0S/FWZHHSGP76PrT/M5b0uHjD6WPzxozJwU NwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603675694726497818746480 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '201402' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-18 14:40:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-18 14:40:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ofoifa.belgium.be' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fedict' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Belgium Federal Government' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21972700336795563060156535717152571560178489625974417430377245947395844372427896551458636620096997896163748668709524363235605304387428132674622267548757701993327855463649962782372602501369591896750981229800039746873843241724230227734834971184997393880583668936115135698464976410283024993873642165580894872037483215374988713086444512091391345395261145561221389854819132546380090135835589938182970902397225388462642664512427384453669673797546277681130454533394210587742837672912585233986739468453152529950787078546035990656376571934196546498999011799465808395871406588249586006423406107586399701808715433759783851398199 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8ee8392ea25e8cba5fc1ed0229a5cf40c3b99bba . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.pki.belgium.be/belgiumrs4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.belgium.be/2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.56.12.1.1.3.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.pki.belgium.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.belgium.be/government201402.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 0560 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4c837d1b58131fbbdbb64ef045c06bf51acfcc7e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofoifa.belgium.be' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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