DV SSL/TLS Certificate for domoxim.be

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the domoxim.be DV SSL/TLS Certificate

This certificate with serial number 05:6b:4d:85:86:1d:2a:49:eb:14:5f:b7:5b:92:6f:87:3e:c8 for domoxim.be was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for domoxim.be provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:6b:4d:85:86:1d:2a:49:eb:14:5f:b7:5b:92:6f:87:3e:c8
Serial Number (int): 472074686770652863812355554605356175277768
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 25:d1:c6:28:32:41:50:ae:49:52:7b:de:60:92:ab:0a:e8:5a:bc:67
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 15:92:58:7b:a7:47:38:ec:e1:a8:5a:e9:a3:52:21:03:c8:01:63:28
Fingerprint (SHA-256): e4:ab:18:eb:de:d3:fb:64:53:2f:2f:56:90:59:38:a5:98:14:e0:08:6e:6e:60:96:e5:33:9f:83:12:3c:6d:7e

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/73.crl

Check the revocation status for certificate domoxim.be
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for domoxim.be

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for domoxim.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Vu4nFlCQCBXpHUvndS
xegtGQ2QMwM+d8aR/rK3eVm5x+L3MvLlbbmkF/uwDhsuRElexe5VAVKtZMReIHh1
JhMWw+on1LUdmqAc2GzNlI5c67b6e9s0njOtNsHjL5VN6+xzNQm9UdEeUhD2ejFe
mTuV8jkI3I8sZEIsrN/YIvsT6wGdS6Fa4fQjcfzTHfWZ/wCtWKe/0LWX2AkIAt7+
96xJmwJA6g0SCcMgcIpoj2fFlg6BW0G6Pdu9hhu9kk0TswEkqxAagIXOGxqN3HQW
hbMvG6HuVqT8fONjzEqclpERuemQWUTz8xeL9XsKl8aaI2JEj+BWfpiWn264R2fd
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 472074686770652863812355554605356175277768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-24 03:04:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-22 03:04:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domoxim.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22173281492206193158926353908852844131852057480857370887066957816567604047070950483628297246219126631397968568319571799325566734105497301766758756484305435591227356816829390792493244882043411114381082747645737450386491026231056778929862498773841556577702011937300434053725077246965706134281542154197411811901090437898281375893631005433445857375313018155219654152733845622417276634849997914623044508235259153988649914553213169720250111169308354074662144210188030753227203459601870473879370809210421448871734392952050097212277781642164716959226401948806582131603480884006310146002949658154313361639733933808547260783921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25d1c628324150ae49527bde6092ab0ae85abc67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domoxim.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domoxim.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/73.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001970075b21600000403004630440220266463852931446c92c9d333d56baf9f9c13fbbc0609c21530349a0d21f31e4e022055399cda3f1e1ed58affb314370b76831932a61bdb3b80f923d18ba2fb34bc02007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001970075b2510000040300483046022100d8a3ffd894dd0cc11d03605918bbba2093107047ff180a55201752de56c1f517022100c209c5f1595ea13e100efcdbf9ea6021e8cab301bc3fbbe3d339653aa4e915ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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