DV SSL/TLS Certificate for sanctus-ieper.be

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the sanctus-ieper.be DV SSL/TLS Certificate

This certificate with serial number 06:cc:44:be:6d:d6:61:f1:7a:c2:cb:79:84:18:7d:20:39:f0 for sanctus-ieper.be was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for sanctus-ieper.be provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:cc:44:be:6d:d6:61:f1:7a:c2:cb:79:84:18:7d:20:39:f0
Serial Number (int): 592182694710317207875760579813943470471664
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: d4:5a:ab:d5:81:ae:6f:bc:1f:09:a7:c3:47:b5:4e:5e:7a:fb:02:2c
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): b7:58:4b:b3:42:46:52:d7:c6:e7:19:2f:37:6b:7b:5c:fa:21:0a:5e
Fingerprint (SHA-256): d2:f9:0b:2c:dc:0f:85:f1:26:97:0a:68:f3:30:82:17:39:0c:a4:3a:19:c9:13:f6:b1:a3:58:88:50:ac:e3:b4

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/113.crl

Check the revocation status for certificate sanctus-ieper.be
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for sanctus-ieper.be

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for sanctus-ieper.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 592182694710317207875760579813943470471664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 14:48:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-19 14:48:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanctus-ieper.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784943668587405818705547964385037782207571006978605678221112047680268923123420493767496165584664708542529705516596846128310076077246150725413068474896963951559700912880836517222927569601603970882238679644589659487968448525158788434768690818330967510261446826329511167061007415059220859355283007373852679460727876124216815401603402379041281506211142293632641510411862241104516755143503720690847560223364238342898453860332698905224259033777129105590377372672429004978799804838963683193951578757988962461422089732723625388020803380111332347956525241021660151225737071472325932057286253548589568896971657216555207299128739054667255271004116315443183736206978618083830542270053969355514537787254818714774349465358115482434058780853960435995200640237563159588734719187037535115809892982224557341452606930022428462332250865467645892545534174198569000161183488619279618751189612143318939059553505829405516377097942757340912545896722064719403081120636817632716774134392645582048222617459344022509264973053102313546691010419970134616253244815048527615400164163885029385375052353105147540607870360375782594179632338866953290877673237201694967346408628171098419784166305764072988909322036816099413445101219433105942596191955874586696230699030961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d45aabd581ae6fbc1f09a7c347b54e5e7afb022c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanctus-ieper.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanctus-ieper.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/113.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197932bfe260000040300463044022042152eca025932be704d1f3211a3b2fa55baef8ba0a08c8bb42d128f2e0dbec50220198ffd11e909b0f53b85ccf69e8184b4896191a33b07a61559668cc39c49c06e0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b800000197932c05c0000004030047304502204cc0648455d6029a9337530a806aa8de3b37093643fc2f8479adbd3268fc177b022100dde9c13148faa07baac24cc7d69cdae848adf6a1995e843913911446bb8a900a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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