*.ibz.be

- Belgian Federal Government -

Issued by Government CA

About this certificate

This digital certificate with serial number 01:00:00:00:00:01:48:31:7b:ad:ce:3d:4e:50 was issued on byGovernment CA.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Belgian Federal Government

Organization: Belgian Federal Government
Organization unit: Federal Public Service Interior
State / Province: Brussels
Locality: Brussels
Country: BE

Government CA

Company registration number: 2011
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:00:00:00:00:01:48:31:7b:ad:ce:3d:4e:50
Serial Number (int): 20282409603675319243051970154064
Serial Number lenght: 105 bits, 14 octets

SubjectKeyId: f7:f8:e6:fc:58:e0:b4:80:54:4b:d3:14:9a:3b:a2:fc:13:8d:a2:18
AuthorityKeyId: c7:a3:46:99:ee:a8:b7:e8:7d:25:f9:9f:e9:9a:45:75:d4:ce:53:7a

Fingerprint (sha1): 1c:27:c5:ad:3a:a1:2b:81:b5:25:98:5c:1d:f4:87:bb:19:68:15:0d
Fingerprint (sha256): cd:51:ac:f6:e4:9f:89:6b:5a:54:9a:52:7f:b7:b2:e8:d3:d5:04:63:a3:70:1c:93:24:06:75:ff:58:1b:3f:67

Issuing Certificate URL: http://certs.pki.belgium.be/belgiumrs2.crt

Revocation information

OCSP Server: http://ocsp.pki.belgium.be
CRL Distribution Point: http://crl.pki.belgium.be/government2011.crl

Check the revocation status for certificate *.ibz.be

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibz.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibz.be
autodiscover.mibz.fgov.be
autodiscover.ibz.fgov.be

Other certificates including the domain name ibz.be

(limited to 100 certificates)
PPT-AIR.IBZ.BE
ibz.be
ibz.be
icmsystem.be
ibz.be
ibz.be
box.ibz.be
box.ibz.be
PPT-AIR.IBZ.BE
ibz.be
2016.ibz.be
dofi.ibz.be
*.ibz.be
PPT-AIR.IBZ.BE
ibz.be
ibz.be
ibz.be
*.ibz.be
DVZRRNWS.IBZ.BE
*.ibz.be
arrivalcenterappointment.ibz.be
ibz.be
ibz.be
ibz.be
*.ibz.be
ibz.be
www.mariageblanc.be
ibz.be
icmsystemprod.ibz.be
ibz.be
ibz.be
*.ibz.be
evigilis-uat.ibz.be
dofi.ibz.be
ibz.be
binnenland.fgov.be
www.rampen.be
ibz.be
*.ibz.be
ibz.be
dofi.ibz.be
services-dvzoe.ibz.be
binnenland.fgov.be
pnr-navitaire-test.ibz.be
*.ibz.be
2016.ibz.be
PPT-AIR.cust1.IBZ.BE
ibz.be
TestJMH.ibz.be
encryption.services-acc-dvzoe.ibz.be
www.xn--calamits-h1a.be
dofi.ibz.be
sts.ibz.be
*.ibz.be
ibz.be
ibz.be
icmsystemacc.ibz.be
ibz.be
ibz.be
*.ibz.be
emm.ibz.be
2016.ibz.be
ibz.be
2016.ibz.be
ibz.be
evigilis.ibz.be
services-acc-dvzoe.ibz.be
2016.ibz.be
ibz.be
ibz.be
*.ibz.be
*.ibz.be
*.IBZ.BE
ibz.be
services-tst-dvzoe.ibz.be
ibz.fgov.be
ibz.be

Certificate

The complete raw certificate details for *.ibz.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5iocAQAUJvuqbw8y4Hu
z2lRCO31rbt1wkLIax5B2u32dLylbNguAsKXkbYzwONFi+5PmMu/D3cMPxkGy3IB
zDwKfyasCb6MhBLiGboBcUdu8vECq6x8z5ifJy6g6bymMQTpFTLnxacrkT9KZHPI
RD0U79YzdIRwGiI3+BP/o0w239GkJ85pps7Vj18QO3d8gcUXVLOCIVUTZjE246+A
Qsf86y92aeEPw1njbUTCvk1xqXHsJWVW0gn9GrikABBG5UnR2YCG/Sq9XHPczwmG
MGx7nL4KwRlsS1onqoh3zuaioUhBDS0GmZX5lWvbdiBKU2k/zKSdY/EadJ6cNOHA
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20282409603675319243051970154064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2011'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-01 13:51:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-16 11:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.ibz.be'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federal Public Service Interior'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Belgian Federal Government'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23176888254147604485715536721792414714117149603190421807202854345518874041841944229602093001062308288814745205637869634895758606220156629607536828216028312104215609527665366731746208919155292909445720908416665787937285268768287182902813116460780976736367121330916058801251069618959901305406480549677534388003065577125797688458351430988253435436368977728148001948580174993266488045024070776453615099748530988379567411146407110837405439110307491659892659911142904317539226343163486728010424578101067223344796283603651170860949708182231321802372824704455020761124117438264588971090952163420312699842266566573813584216213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c7a34699eea8b7e87d25f99fe99a4575d4ce537a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.pki.belgium.be/belgiumrs2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.belgium.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.56.9.1.1.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.pki.belgium.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.belgium.be/government2011.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							0560
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7f8e6fc58e0b480544bd3149a3ba2fc138da218
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ibz.fgov.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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