*.ibz.be

- Federale Overheidsdienst Binnenlandse Zaken -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 3a:cd:8b:41:3f:e4:a4:85:9f:f8:70:8d:c0:d9:c8:4d was issued on by GEANT Vereniging.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federale Overheidsdienst Binnenlandse Zaken

Organization: Federale Overheidsdienst Binnenlandse Zaken
State / Province: Brussels Hoofdstedelijk Gewest
Country: BE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 3a:cd:8b:41:3f:e4:a4:85:9f:f8:70:8d:c0:d9:c8:4d
Serial Number (int): 78162469036064198940304547699098241101
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 90:fd:5a:89:37:f1:6c:4b:dd:4e:90:29:de:1a:57:ce:ea:45:c1:f4
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): fb:09:03:89:1b:35:2c:4c:d2:e4:7b:a9:ae:66:07:9e:07:41:20:e8
Fingerprint (sha256): f0:67:e4:71:27:5c:b5:e5:ac:a2:6e:9a:d1:d8:c2:ed:df:9e:58:d1:f4:04:bb:84:5e:5c:04:ec:da:77:12:95

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.ibz.be

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ibz.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ibz.be
autodiscover.ibz.fgov.be
autodiscover.mibz.fgov.be
ibz.fgov.be
mibz.fgov.be

Other certificates including the domain name ibz.be

(limited to 100 certificates)
PPT-AIR.IBZ.BE
ibz.be
ibz.be
icmsystem.be
ibz.be
ibz.be
box.ibz.be
box.ibz.be
PPT-AIR.IBZ.BE
ibz.be
2016.ibz.be
dofi.ibz.be
*.ibz.be
PPT-AIR.IBZ.BE
ibz.be
ibz.be
ibz.be
*.ibz.be
DVZRRNWS.IBZ.BE
*.ibz.be
arrivalcenterappointment.ibz.be
ibz.be
ibz.be
ibz.be
*.ibz.be
ibz.be
www.mariageblanc.be
ibz.be
icmsystemprod.ibz.be
ibz.be
ibz.be
*.ibz.be
evigilis-uat.ibz.be
dofi.ibz.be
ibz.be
binnenland.fgov.be
www.rampen.be
ibz.be
*.ibz.be
ibz.be
dofi.ibz.be
services-dvzoe.ibz.be
binnenland.fgov.be
pnr-navitaire-test.ibz.be
*.ibz.be
2016.ibz.be
PPT-AIR.cust1.IBZ.BE
ibz.be
TestJMH.ibz.be
encryption.services-acc-dvzoe.ibz.be
www.xn--calamits-h1a.be
dofi.ibz.be
sts.ibz.be
*.ibz.be
ibz.be
ibz.be
icmsystemacc.ibz.be
ibz.be
ibz.be
*.ibz.be
emm.ibz.be
2016.ibz.be
ibz.be
2016.ibz.be
ibz.be
evigilis.ibz.be
services-acc-dvzoe.ibz.be
2016.ibz.be
ibz.be
ibz.be
*.ibz.be
*.ibz.be
*.IBZ.BE
ibz.be
services-tst-dvzoe.ibz.be
ibz.fgov.be
ibz.be

Certificate

The complete raw certificate details for *.ibz.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78162469036064198940304547699098241101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brussels Hoofdstedelijk Gewest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Federale Overheidsdienst Binnenlandse Zaken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ibz.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756933060767735072637745225514087706042115290471332469163837604091600459201130001460535822238997523177810625469876180816864887069853946222288920561046318821843220630151546349226158202299789320052645816670316659675423273261621381345671644952798591029419642550064606783101068107423383187521246516944396800367983381474616649227656221035515924941898192182045559167992519167734640098518740793029755697970292281040410914586926030191190041432606676228002138478076865547087406032194752609332932902130920385188242662036682159590270384580816008964886694367991959825370719159504667220997890569968686227151991631855288436737197951668217520140919928553237014140689967424226387024273153918415298285702051139645384089148759298034082035058198327141428252068722771914529895970196160478711228087345003378742597328771805971589881692129764939425375726926059225802825100952839155588779419960093635913545108386043831127866759864137234293078546620095180706228348525048919757126679589812967224368687796761058192043313560292540650510305861302442476599770125492140463827253074210779796711218744909960177621341161112648635715402364373378538624034084057179065548174453926469221036070488188251405632449978251698771971518605272486115100911840065223932414815652351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90fd5a8937f16c4bdd4e9029de1a57ceea45c1f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001883161f9960000040300473045022100806a12e4eddf71837382cb6ff34d5f5d718446e9841e84394c4f7f8b21fedcb5022036d25eac9848d41bc1dffbbca61becf3d660c37b4663b8bf51592da6ab1a4931007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001883161f9eb0000040300463044022026b6182fc6f4456e953a6c161c308bd364eb812e8d33c002e1ef8267b153fe0b02202d64ea351b47f6b9f1c1d0650fa7c1ed50708a00289d2fef3bbcc4ef6e355ba6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001883161f9c60000040300473045022100db22c5d4e3dfc659c1a284f8d857e1f65784365855c039e53ec17ffc329d2b2d02205de1f2b8531e3b65d6bd83dbc9bb0408a7be029c2ec7e1ceabc83b1ad8b98923
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibz.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibz.fgov.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mibz.fgov.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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