HTTP/1.1 403 Forbidden
content-type: text/html; charset=utf-8
date: Mon, 13 May 2024 15:31:43 GMT
set-cookie: 56e278e72d023ebb2209d279245d5382=84f8e0725c4b2015f0cae1723ae59930; Path=/; Secure; HttpOnly; samesite=none
x-ext-authz-allow: false
x-ext-authz-denied-by: opa
x-forgerock-transactionid: 47d0d392-a4a6-41c4-8752-bfb876332efa
x-trace-id: 47d0d392-a4a6-41c4-8752-bfb876332efa
Set-Cookie: TS0151688a=01d2e30d327002f683e1a60cf6ab72dd6ef61ac25797e346f460878c775a3c261cb9bc704182b5abf85bc443e68d61176e34db3ff9; Path=/; Domain=.idp.iamfas.belgium.be; Secure; HTTPOnly; samesite=none
Transfer-Encoding: chunked
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d1:ad:40:54:0d:8b:28:b3:24:f2:ba:5b:55:fb:12:28
Signature Algorithm: sha384WithRSAEncryption
Issuer: C=NL, O=GEANT Vereniging, CN=GEANT OV RSA CA 4
Validity
Not Before: Jul 31 00:00:00 2023 GMT
Not After : Jul 30 23:59:59 2024 GMT
Subject: C=BE, ST=Brussels Hoofdstedelijk Gewest, O=Federale Overheidsdienst Beleid en Ondersteuning, CN=idp.iamfas.belgium.be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:9b:75:d4:f6:34:c5:28:0d:74:9b:b1:3d:29:e1:
18:0d:fa:a5:55:20:53:d5:96:0e:3d:d3:4e:4d:2f:
1b:df:ad:25:d1:4f:ab:bc:03:aa:31:18:f4:d0:1a:
74:7e:f4:e2:3d:f2:25:cb:8e:0d:64:ab:da:b4:a1:
53:ab:90:2e:53:d2:2b:df:5d:93:07:1d:fb:e5:62:
ab:4e:2b:f5:3c:50:56:10:82:48:62:5d:27:80:aa:
40:b8:6a:8f:fa:cb:6b:ea:36:02:71:e0:44:f9:a1:
15:39:c8:f4:43:36:36:58:df:ff:27:6a:2e:e4:0d:
33:37:ad:c6:cf:93:28:15:4f:c6:96:a0:9d:4d:a2:
57:34:49:c6:5d:88:78:e5:d4:ed:7c:ff:e8:da:fb:
71:bc:9d:7f:79:97:47:40:7c:9f:1d:c2:6b:3b:f3:
d0:aa:0e:55:77:77:52:11:41:cd:79:c0:80:40:7f:
b5:79:aa:ac:fa:57:dc:c2:d6:56:ef:9f:e7:50:82:
ee:5b:5e:1e:5c:90:08:4e:f6:9d:d9:8f:f6:50:17:
bd:ba:0c:40:e1:4a:52:29:e1:ce:4b:4b:31:92:9e:
23:87:85:71:53:29:0d:5c:72:26:a6:10:1b:57:b4:
48:2d:2e:3d:72:c3:a9:b2:d8:73:7d:a9:df:91:98:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
6F:1D:35:49:10:6C:32:FA:59:A0:9E:BC:8A:E8:1F:95:BE:71:7A:0C
X509v3 Subject Key Identifier:
20:0C:D6:A1:34:EE:C3:D5:AD:03:68:CF:63:FA:54:60:35:10:BB:AD
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.6449.1.2.2.79
CPS: https://sectigo.com/CPS
Policy: 2.23.140.1.2.2
X509v3 CRL Distribution Points:
Full Name:
URI:http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Authority Information Access:
CA Issuers - URI:http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
OCSP - URI:http://GEANT.ocsp.sectigo.com
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 76:FF:88:3F:0A:B6:FB:95:51:C2:61:CC:F5:87:BA:34:
B4:A4:CD:BB:29:DC:68:42:0A:9F:E6:67:4C:5A:3A:74
Timestamp : Jul 31 11:43:30.751 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B8:4E:EC:60:DD:F7:D1:FB:43:30:7C:
78:67:8F:DE:3E:8B:F8:DA:CB:8D:EE:13:B2:8A:FA:96:
BB:F1:21:13:2E:02:20:21:F5:68:87:06:5D:63:A1:C1:
B4:3D:20:C7:3C:DD:54:90:03:F8:55:CF:1F:24:22:4D:
66:0A:72:4D:D2:49:AC
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
Timestamp : Jul 31 11:43:30.837 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:CE:D0:6A:FE:6A:0D:74:27:76:D0:27:
74:37:1A:92:9F:19:44:08:C9:A3:38:18:83:7A:56:37:
A3:6E:EA:4B:06:02:21:00:C9:CC:2F:62:11:EB:AA:D7:
33:06:4A:E6:C6:00:D4:C8:FC:75:B8:7B:45:EA:AF:12:
B7:E6:14:6E:4F:31:B5:7C
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
Timestamp : Jul 31 11:43:30.798 2023 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:29:AD:C6:38:4F:2A:67:EF:98:51:77:2A:
9F:15:90:03:09:9B:AD:98:70:FC:02:74:D0:E3:DF:CF:
BD:63:EA:C0:02:21:00:A7:D1:A5:A9:13:FC:CD:A3:F5:
8F:74:C5:12:61:19:AC:CC:14:F5:52:A4:B9:8E:68:5D:
04:48:B3:88:6C:E7:A7
X509v3 Subject Alternative Name:
DNS:idp.iamfas.belgium.be
Signature Algorithm: sha384WithRSAEncryption
Signature Value:
93:74:3b:89:48:a7:8b:e7:35:be:38:c5:2a:40:21:8e:c0:29:
11:e5:29:ad:65:3e:ef:78:18:32:0d:e0:df:e6:da:24:de:df:
58:0c:29:35:1c:c9:2f:9c:e4:4b:be:29:0b:ca:42:8b:ce:cd:
d9:ce:e2:82:80:2c:d0:1f:c6:d4:55:f8:4e:35:46:c7:5f:97:
fb:44:7b:00:54:4d:b9:b6:d1:e6:af:b8:1b:5f:48:59:c3:cb:
22:a4:81:ce:a0:9b:55:9b:be:01:bf:28:b9:c6:35:c9:ce:57:
65:1e:85:48:df:0e:4b:81:ba:71:c7:48:7e:52:ae:7a:91:a5:
5e:03:d8:22:ad:d6:37:59:ac:d9:e4:7c:3f:31:9e:3a:be:31:
f5:31:59:e8:df:69:2d:50:b5:99:83:ab:1d:98:4b:1a:a9:cd:
61:80:1c:fb:42:3e:27:17:e9:3c:f3:16:e1:a0:d4:27:34:79:
fa:9f:ce:c4:f5:56:2c:07:ff:40:82:39:25:a5:3c:d2:1d:01:
60:9e:51:dc:78:f3:8b:2e:eb:56:f2:9f:f9:b1:1d:a9:3e:c8:
23:e5:57:9b:4f:8b:a4:39:5e:55:ac:f6:c8:a7:b1:af:f1:cb:
f0:22:04:7c:0d:6c:bc:92:1c:70:e5:f7:50:ea:2c:32:31:c8:
f1:ca:0e:ba:50:96:3b:51:fc:79:c8:c3:74:b8:1d:24:3e:13:
46:60:3a:c4:ae:ab:75:ef:1f:3b:d5:f3:df:e0:9a:76:45:59:
18:b8:11:96:b3:c2:29:dc:6e:62:ba:ce:30:3b:bb:ba:ca:1f:
9d:db:3f:99:a9:75:9f:d6:42:75:b5:0c:90:05:7c:79:b5:78:
0c:0d:12:d8:05:1d:0d:23:61:cd:19:5e:46:b3:d5:32:cb:99:
e5:a4:a7:77:79:3b:e2:99:97:5b:13:35:80:98:3e:19:b7:25:
e2:0e:e8:e5:2b:c6:a3:fa:58:56:46:14:86:7d:56:d8:ec:34:
71:76:1a:74:ef:85:7e:32:a5:6f:93:7a:15:d4:04:36:49:c2:
07:8e:b3:02:4c:47:b9:d7:2c:fa:d3:43:3c:d2:1a:19:77:ac:
4d:aa:ef:c8:d2:5e:d3:2d:0c:49:8c:84:8e:1c:de:ac:29:25:
a5:bd:dd:2f:f8:ce:55:00:8e:d7:bf:ad:27:1e:06:cc:e8:96:
a3:94:95:32:15:74:7b:ac:b9:e4:f4:02:95:a2:8a:0a:ed:94:
0b:7c:fb:d4:05:c8:9b:82:29:02:c8:65:85:96:6c:bd:40:bb:
46:1b:ff:18:7b:bb:5b:fd:bd:12:42:9f:21:3f:19:38:3d:d6:
75:9f:ba:8a:b1:81:61:bb