DV SSL/TLS Certificate for paellawinkel.be

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the paellawinkel.be DV SSL/TLS Certificate

This certificate with serial number 05:9f:6f:fb:72:4b:75:6d:2a:c6:e4:d8:b2:a7:e1:cd:d6:7d for paellawinkel.be was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for paellawinkel.be provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:9f:6f:fb:72:4b:75:6d:2a:c6:e4:d8:b2:a7:e1:cd:d6:7d
Serial Number (int): 489815175891447215553355170583296818927229
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: f2:dc:ce:3c:25:4e:69:a6:04:e5:b6:30:20:ad:50:3f:95:47:47:4b
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 87:32:59:f5:a6:ae:58:a9:dd:4c:a2:2f:31:95:80:7f:8d:9c:62:f9
Fingerprint (SHA-256): ad:07:90:3b:16:c7:1b:07:de:66:b6:9a:31:36:9a:39:09:1d:1e:0e:c1:5e:16:69:f6:24:11:b2:4c:67:55:d6

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/126.crl

Check the revocation status for certificate paellawinkel.be
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for paellawinkel.be

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for paellawinkel.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 489815175891447215553355170583296818927229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-15 03:02:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-13 03:02:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paellawinkel.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883331108033121117552649394191986345222371720567564969053157645411180017441514399048361370463576552618082824669629547202626298606738097572784821982681843009982707327833731950692511182108310598490904371700853764099892173102129497773584359965478528871031011269195638629375353454123298153869905425786205996736741986224550016268533236148163316829663677176952200256965644888744600807091336023299387856081195469624801784774033239717318155316477902330683346590305978206076310460873426519957011506340463780686344378371156282960078341426334382882820560038850701152220073838486590285732269731231724353376665203724146553495903901684676245075973619718787176839994057924870143840906632171415988411540963966158733468161824449499913823974902040639045535476198821750177986662498298750093240961074060618236939099056627774439680874951107485401581402970086511816542101335634593432535220504192347771095753826321040804890980472224637260058487006916374946819305907962569259766189314755466155367285052550733735654736279431054091351203785210053188463792432988231344269231981148301393444635357855578954027558821916981390481173155436379936918322095026225341857836626438241253866989783381647922739330975080802569023805454725658801924908394013183772305611515657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2dcce3c254e69a604e5b63020ad503f9547474b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paellawinkel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paellawinkel.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/126.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019771bfcf900000040300473045022049dc2dfd18e143a532a4e8dc4459ad3702f10d413522c7def2b8841aff73956802210096719dfdb53453f304fa3951bf5548e7d6e7b6aec5498bda23febbe01c00da9a00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a0000019771bfd6e100000403004730450221009e19cc255301e728b48bdbc0153d56ba941b10dbfb23c5c844a17b1cffcf0afa0220169ff96e02e4fe6e9e306912cf6879352467dd14331cdadd52b7e3ff39f7ee24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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