DV SSL/TLS Certificate for kruijne.be

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the kruijne.be DV SSL/TLS Certificate

This certificate with serial number 06:ec:35:9a:66:af:63:a5:14:64:73:bf:db:2a:e4:16:cb:de for kruijne.be was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for kruijne.be provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:ec:35:9a:66:af:63:a5:14:64:73:bf:db:2a:e4:16:cb:de
Serial Number (int): 603051604964097318759318036427606265875422
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 43:93:27:7f:f7:78:17:ec:ab:b2:d0:b4:38:12:d6:6a:1f:13:20:35
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 50:c5:f7:a6:ae:8b:9f:01:e1:25:6b:6c:b0:40:67:8e:87:b7:1a:cd
Fingerprint (SHA-256): 4b:64:0f:97:e2:98:29:57:98:14:cf:f7:1c:d4:c7:1d:1e:91:c7:d5:28:96:80:fd:6d:8a:bc:3f:32:28:5a:6a

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/95.crl

Check the revocation status for certificate kruijne.be
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for kruijne.be

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

kruijne.be

X.509 Certificate

The complete raw X.509 certificate details for kruijne.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgISBuw1mmavY6UUZHO/2yrkFsveMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjUwNjMwMDg0MzU3WhcNMjUwOTI4MDg0MzU2WjAVMRMwEQYDVQQD
EwprcnVpam5lLmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ri
2uuUuh+G4znW3KA/KIesC9G7gIzr2B6QyBOvJ85Q+WOH3NKi0miDQJScOIAEwANi
9FKVtIcJXSkraH+c9bTsBAv03+f+o3aKx3190Zp2RHiKk1ymuQ/miPKI+5jHRoSP
4J7kmn6Ssn/6H0KuZlwRgLle7eXSa64D5sAPAdKUEY0gKIQllyfcXkRNC187Sr1m
pAM3+HC0s7yVOLBLgdl++bW1mpYblv6+S8emVo4HHrb/9hgQpS0jYgeiVhf2pvfh
u9HP8kQz3YEPJCkaINFgPZXUdRHUIG3qaKtYryca+kHRUJve5fN11ClC3jBsriDT
rS0lC0DsNdcHOL1wgwIDAQABo4ICGTCCAhUwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBRDkyd/93gX7Kuy0LQ4EtZqHxMgNTAfBgNVHSMEGDAWgBTFz0ak6vTDwHpslcQt
sF6SLybjuTAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEu
aS5sZW5jci5vcmcvMBUGA1UdEQQOMAyCCmtydWlqbmUuYmUwEwYDVR0gBAwwCjAI
BgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMS5jLmxlbmNyLm9y
Zy85NS5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQAS8U40vVNyTIQGGcOP
P3oT+Oe1YoeInG0wBYTr5YYmOgAAAZfAN2wqAAAEAwBGMEQCIAJt6/IoIXEuACJk
H4FfWOQFzb+LO/W/mcsYmC1JAlAXAiA7dAHWpHd7pg62TY+Bms2s75Fxti9z8OFd
rYKFHBAE7QB2AA3h8jAr0w3BQGISCepVLvxHdHyx1+kw7w5CHrR+Tqo0AAABl8A3
e7EAAAQDAEcwRQIhAPPA8teVBaW7b7a3g6MqRq6VwEEDS+Oemz3iZccqnOzAAiBb
h4H8MX0XEOfW06HnNYD6ioq3gIkHnGBzPwPMp6O84zANBgkqhkiG9w0BAQsFAAOC
AQEACq31dtffHf7ZD6Tu17A11pn3BMqJWV4K3r+wfHLI7kIOi8MYLy6EMTU51zby
L1FNXljE5tWB+24XgiBORTY2hbf3+GaZ9w6PPML4JDE/kwrvR+gvpDxsxZMyi+JU
sdhgA4shJlqDroMtcLuO0yJya+b+g8FogBQdQwIOkCTQAMaQ9mLsEBo+Pv0hx69q
6JAV8242Xuv9WhYpoXH71/xcJ2vsG4yai+hTvYCyjFQzkgm5Jqe6YF5KtO3eg49i
5PMy7xboRBDLwCvXgR9/MaTSHxo7bD8fLPLa7jKjvVaiwwPY3MD9LsJAyVeWHRcj
wjU4lD//4FbCS9QPjbp7/4E2rg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ri2uuUuh+G4znW3KA/
KIesC9G7gIzr2B6QyBOvJ85Q+WOH3NKi0miDQJScOIAEwANi9FKVtIcJXSkraH+c
9bTsBAv03+f+o3aKx3190Zp2RHiKk1ymuQ/miPKI+5jHRoSP4J7kmn6Ssn/6H0Ku
ZlwRgLle7eXSa64D5sAPAdKUEY0gKIQllyfcXkRNC187Sr1mpAM3+HC0s7yVOLBL
gdl++bW1mpYblv6+S8emVo4HHrb/9hgQpS0jYgeiVhf2pvfhu9HP8kQz3YEPJCka
INFgPZXUdRHUIG3qaKtYryca+kHRUJve5fN11ClC3jBsriDTrS0lC0DsNdcHOL1w
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 603051604964097318759318036427606265875422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 08:43:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-28 08:43:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kruijne.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19114691576334724561187439339084026001858478459691549632390686602712708484908617267824718314208657217692792973811255295724019955926395608505526886841114029937384091341533138508478514445936878740456156585279902809894501124110296375868176316277020590429098810775428131846854787932459509378066494623530103157300757081780342217525032361593111815731971249266235621509297845219242056935160353227104401270646360860137760718498341189040027051163385184375121200781387583843735568346140678827681452964974879571760936252640435936001188106947776989432613975302745779687735520536651414441826551817168657697399690873376210813808771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4393277ff77817ecabb2d0b43812d66a1f132035
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kruijne.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/95.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197c0376c2a00000403004630440220026debf22821712e0022641f815f58e405cdbf8b3bf5bf99cb18982d4902501702203b7401d6a4777ba60eb64d8f819acdacef9171b62f73f0e15dad82851c1004ed0076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197c0377bb10000040300473045022100f3c0f2d79505a5bb6fb6b783a32a46ae95c041034be39e9b3de265c72a9cecc002205b8781fc317d1710e7d6d3a1e73580fa8a8ab78089079c60733f03cca7a3bce3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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