pnr-navitaire-test.ibz.be

- Federale Overheidsdienst Binnenlandse Zaken -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 31:4f:1a:5c:18:87:9e:da:41:df:78:3e:50:50:c3:09 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Binnenlandse Zaken

Organization: Federale Overheidsdienst Binnenlandse Zaken
State / Province: Brussels Hoofdstedelijk Gewest
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 31:4f:1a:5c:18:87:9e:da:41:df:78:3e:50:50:c3:09
Serial Number (int): 65542897884517370792091939200230802185
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6b:a5:eb:57:34:e7:77:60:c8:0b:1c:ec:b5:da:3e:53:f2:de:13:69
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 7b:37:e9:06:16:57:11:10:a8:07:25:63:fb:e3:8a:4a:02:2e:c1:e4
Fingerprint (sha256): 9d:7d:ba:d9:95:4a:02:76:10:c2:e3:67:2f:b5:8f:dc:b1:92:b0:89:64:30:4c:79:7c:4d:d9:2e:3d:c7:2c:3e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate pnr-navitaire-test.ibz.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pnr-navitaire-test.ibz.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pnr-navitaire-test.ibz.be

Other certificates including the domain name ibz.be

(limited to 100 certificates)
PPT-AIR.IBZ.BE
ibz.be
ibz.be
icmsystem.be
ibz.be
ibz.be
box.ibz.be
box.ibz.be
PPT-AIR.IBZ.BE
ibz.be
2016.ibz.be
dofi.ibz.be
*.ibz.be
PPT-AIR.IBZ.BE
ibz.be
ibz.be
ibz.be
*.ibz.be
DVZRRNWS.IBZ.BE
*.ibz.be
arrivalcenterappointment.ibz.be
ibz.be
ibz.be
ibz.be
*.ibz.be
ibz.be
www.mariageblanc.be
ibz.be
icmsystemprod.ibz.be
ibz.be
ibz.be
*.ibz.be
evigilis-uat.ibz.be
dofi.ibz.be
ibz.be
binnenland.fgov.be
www.rampen.be
ibz.be
*.ibz.be
ibz.be
dofi.ibz.be
services-dvzoe.ibz.be
binnenland.fgov.be
pnr-navitaire-test.ibz.be
*.ibz.be
2016.ibz.be
PPT-AIR.cust1.IBZ.BE
ibz.be
TestJMH.ibz.be
encryption.services-acc-dvzoe.ibz.be
www.xn--calamits-h1a.be
dofi.ibz.be
sts.ibz.be
*.ibz.be
ibz.be
ibz.be
icmsystemacc.ibz.be
ibz.be
ibz.be
*.ibz.be
emm.ibz.be
2016.ibz.be
ibz.be
2016.ibz.be
ibz.be
evigilis.ibz.be
services-acc-dvzoe.ibz.be
2016.ibz.be
ibz.be
ibz.be
*.ibz.be
*.ibz.be
*.IBZ.BE
ibz.be
services-tst-dvzoe.ibz.be
ibz.fgov.be
ibz.be

Certificate

The complete raw certificate details for pnr-navitaire-test.ibz.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65542897884517370792091939200230802185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels Hoofdstedelijk Gewest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Binnenlandse Zaken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pnr-navitaire-test.ibz.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848329838490052209672771742196052859064212035615029034778964282738178204941084619954915762686842217388561115893417068730181823988806060777211216081975206743048748092130519071471337346623203036989302705806937709380480859180706829923637341952617654352557626888711728852541170267769268855393396780927090317401556926966283420592488557737490001067781895485481774266997683202574907256855092850525026855092588987873359403905111129699830475925950938491714080150183324674032115515498882681245716261112403797465667977635734197251058005975450079864377850829960431446929795146559910179886523256675475875628215207387946380390885195874614564821758013223203903561914509491720346490924636860182111962504986736898020718498075552899859433704817621987665208248483836198974803865368205424063719861494802584863528917585461047832977781678177322275235335674737767647755583224967853816981921782505458250784595648862033961580376637513712340321867384860684323817205793066923960094202547390885407210538801255762845794202557403134020469198086355996115389506216415365535078093049102204569388753733916660808983632360614704135793964670265560508936297062694974688091213115032248039912771402513019778136833172658267383966642892073314704094247000488839705914774546807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ba5eb5734e77760c80b1cecb5da3e53f2de1369
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnr-navitaire-test.ibz.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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