spacious.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:0c:db:59:16:ce:f2:4d:51:bd:e4:90:0e:c5:04:4f:4b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

spacious.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:0c:db:59:16:ce:f2:4d:51:bd:e4:90:0e:c5:04:4f:4b
Serial Number (int): 267479030055760591537452050958464315576139
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:ce:7c:6d:81:ab:ed:a8:32:97:f8:02:9f:c9:ac:73:36:43:9d:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:bc:ae:9d:7f:15:62:46:59:ae:3e:6a:b9:71:f1:9a:fe:a7:c3:92
Fingerprint (sha256): 00:17:e5:0a:6d:a7:58:b8:d5:89:d9:46:e3:2d:38:6b:f6:0d:f4:8e:6c:b9:c8:fa:ec:ce:2d:18:7f:c6:56:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate spacious.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spacious.be


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spacious.be
www.spacious.be

Certificate

The complete raw certificate details for spacious.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1VO0+1N2C/9Bc+7ZYN0R
Usv+b+MmFxf1UQdDOsriyyJWoAY3A2jTWWCSKtqtPQtoc5b9NFrkVdBi0n3l/iDz
6fpeI6v8hXtxppu3yhGcSumNJ0SY3nc1svLPSTjPDE/JxJH10hjurU2gVgY8x2F4
6DW9+LUyqB5UvUFOxGkus6DAhQEwBZefgjOTFR4rVJWx/jKqwN6CUFDQzNuGjnfn
g3ezV+0h5NtUx8NMFHlbVSD29bhCXnUNHgudKgFyChlM28oReMF6Ugz5oMdE9Idj
k193/0iQ7egRL0TLLZs/0UjwDzp0BaoaFLeWi1v1nnuzuz3jYXiksQ1dinq9yGfF
tJm+kGPc0Cov8kYZvPoop9Ed2cMxeHSt7utId1RJvitgZFWq56cS4I2gKK+xhIvX
Nlo+q7b0nDSuFl3Rp5CIaEzAExR9fWTG5CjLpHMyslExIxs0RZKwlRe2FdBUM2ys
0/YtLpoJBSuESDxawul1fz1pKIv/SUG7h9OMqRvPc5X5TroK9+I91CYrFKgAgao8
fAHkX2KEDHWEV5lxEe5DyGLZC+UZORANj59P390ZZKEZQXLgzTgrVCZFHHox2eC7
+18sxUs89WjjRINn6T5dI3yWDn5yj6ZVlKZruE3QgI37zXgnYjngBx4+HkekkUBy
xZcTBLFIn/KlkGnPJ693IxUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267479030055760591537452050958464315576139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-22 08:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-20 08:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spacious.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870298149779433067053216234879217619901667046954040667547400502514056103975096441474657304217185621100014925348069533716752133886673348162166216344000127045538602107522690846218837888094335932734476501593915206798978497491945954750291353073186850060718075697895817707958398978513024419372517090940281000490854689166438608934602972234570121506378093901792621285986817594132585219414101533726070851804557225542158725452880012537382608754479565129014151343096475484469292453077628392730042284127654040257607595012092012087397009932071275081529972976684827217973858071947559008713636338451981350439345019241017099657121591670007532395347993036571924823356310699422464589222287106668335512276275582378056695970151513510209243689230071860121159266807601840239731183701453752548123554107223663595384588384454582001399489991639926645196174194875329836997512762904830629967941972803797757660946082338000010276572952812898922985072175661365075165910028639808977103895914725482715207339994346480395845249457592810724723647894498653898288341829683343309324082503936050206914359089814266495350411646621030072047315891292587402975401069198040208780504177299934184788887171665851733263584489854961239104951887553310384837453986238827633026136482581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13ce7c6d81abeda83297f8029fc9ac7336439ddb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacious.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spacious.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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