Belgian eID certificates
A Belgian eID card carries two personal certificates, issued by a Citizen CA under the Belgium Root CA:
- Authentication — CN ends in
(Authentication); key usage digital signature. Used to log in (CSAM/itsme alternatives, Tax-on-web, eHealth). - Signature — CN ends in
(Signature); key usage non-repudiation. Creates qualified electronic signatures, legally equivalent to a handwritten one.
The subject's serialNumber attribute holds the holder's national register number; it is masked in the display. Export certificates from the eID Viewer
(eid.belgium.be) or from your browser's certificate store.
Chains
Paste the certificate followed by its issuer(s). Each signature is verified with WebCrypto (RSA and ECDSA), and validity periods are compared with today. Revocation (CRL/OCSP) is not checked.