Issued by Let's Encrypt Authority X3
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
9 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgISA/z6vgBWTYj3D4TzpJptXSTFMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDgyMTM2MjBaFw0y MDAxMDYyMTM2MjBaMBQxEjAQBgNVBAMTCWJhYm9iYS5ubDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAKtbIp61cP0gd30RBD7+RP1ilRTu7rL6MIq1vSam +53E+8qaDAkIGqidMfhpVvY4IZ0vJ+1IOO5Ow8r0cj43iPhBJBJh4g3yuHhMoUQa nq+xOYdO+mboQpjXOae3+MAdGi/bX86OUAD0mutx+1hSx10SdQroo3OaAJvPMtm7 eKx8VNYzi53XfPTmCRjFB5XTpTs+y/wJYLz334QEEopkUWPWWEjyjkYIK/gB6LLd nroXxYieEbzgjGL2eNUeViglVeognhiu0TOENkm/s7/LT6seicJrm92mRvvy0b7f cdqXIusbMMixyoVSv4WoGatGqm9+7DxvRs0bOoSacoPcgPU+TpIFD4zfpFif4fE3 nnRwh5VQ9IX1su1xnf7jbOn/ND8iXMmgwNOln4ElVYGPMuqi0QQS79iXlzR1NxcV rEjnU2aIk4SpY2TFgR1A2rHrpalLASfpRtX/vENFFAiywM9NqCKtY42nPJQebObN 3h6NuVpnDTec66Cj0t4lfzX/MBAELA7HXYFvUDL6VG+l1AYpNlOnGSpo39W7MJQL 3n2hbhilUJoiXc0VHho6epLNagSh0a4jdnsHyu7PkR2RJi3k540uJ/PmW0fEVJ75 NFTtJxqG2jI8n03MhVfbzALQL7unxQAkvxyo5w6vNXaYz1a0zA2CvJ5JC7unB/eR UuTPAgMBAAGjggKcMIICmDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOpAGCUy1d90 wtAde+Ykv3qEj3V2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wUgYDVR0RBEswSYIJYmFib2JhLm5sgg5tYWlsLmJhYm9i YS5ubIINcG9wLmJhYm9iYS5ubIIOc210cC5iYWJvYmEubmyCDXd3dy5iYWJvYmEu bmwwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW2t hCHWAAAEAwBHMEUCIFOMqRp3cheqjiMzCf3hHGXqBLBaFz7RUmnHk969n8BTAiEA qEBcYQRnnuUmtBNUGDrEybT1Ghy0SkD9Ux2TMF+QVc0AdgCyHgXMi6LNiiBOh2b5 K7mKJSBna9r6cOeySVMt74uQXgAAAW2thCHLAAAEAwBHMEUCIAqEkLxLNFoWRilz diCfJeymAXVPci49lSeeUe/lqAhRAiEAxU62qy1XbUpNkc7woAFZvjTK/rVB2r19 6qGnjtzuFz4wDQYJKoZIhvcNAQELBQADggEBAHgzBhJulFuPCCmCfqj27itBS0jc f8jTs1LaTAbMx7P57sBNNgXNdBHRUDVOt9GmsL2MrYZvw4Ro3335UPdhV99alsx5 UVIeSb8s7//x4iwDVMzwygnTDe0A0C1MbRGXqhiknN3nl5jgefesvztxpTrfQt1q HcQv0rPhOJimRjD95plyiSerGOs9pskcqFarSGeEDmqlfgUfpC6HyOddVNu21eVH wDrQAMqm6BDb9IwtEzQoEIpjf3GhcCL0Es/MNMto4RJLUfAl8uxkr6gbJkAh+iJs rTN2A2pna+wUPuqoKQN9LYpBJy/paRmwIOViY2CKqO4DfzMPTl1h8BQ/+Qo= -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq1sinrVw/SB3fREEPv5E /WKVFO7usvowirW9Jqb7ncT7ypoMCQgaqJ0x+GlW9jghnS8n7Ug47k7DyvRyPjeI +EEkEmHiDfK4eEyhRBqer7E5h076ZuhCmNc5p7f4wB0aL9tfzo5QAPSa63H7WFLH XRJ1Cuijc5oAm88y2bt4rHxU1jOLndd89OYJGMUHldOlOz7L/AlgvPffhAQSimRR Y9ZYSPKORggr+AHost2euhfFiJ4RvOCMYvZ41R5WKCVV6iCeGK7RM4Q2Sb+zv8tP qx6Jwmub3aZG+/LRvt9x2pci6xswyLHKhVK/hagZq0aqb37sPG9GzRs6hJpyg9yA 9T5OkgUPjN+kWJ/h8TeedHCHlVD0hfWy7XGd/uNs6f80PyJcyaDA06WfgSVVgY8y 6qLRBBLv2JeXNHU3FxWsSOdTZoiThKljZMWBHUDaseulqUsBJ+lG1f+8Q0UUCLLA z02oIq1jjac8lB5s5s3eHo25WmcNN5zroKPS3iV/Nf8wEAQsDsddgW9QMvpUb6XU Bik2U6cZKmjf1bswlAvefaFuGKVQmiJdzRUeGjp6ks1qBKHRriN2ewfK7s+RHZEm LeTnjS4n8+ZbR8RUnvk0VO0nGobaMjyfTcyFV9vMAtAvu6fFACS/HKjnDq81dpjP VrTMDYK8nkkLu6cH95FS5M8CAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 347421307801544201220722718944404086531269 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 21:36:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 21:36:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baboba.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699071476715838614576975210520468878322268156772554795604523812980869757857253880599303835932736960265981768275330235107613307918202541686119675772115821522040776000817888316716638770459908983823687621863523954396152682517269943700574647495970953450489483847820510431583294920853788086286172774600221971070038537412962799484317128140128197314139000495334040575538728597314460900019458201085350676950237915465948554259908452245864801203766279935156205147026015794990743734091475046488896793220534185805802526169119826325876321215599478633869013267872154312055060022546002537888234383781492291689497819990176653382214737923627617863142566445709330680813002035776900135975873563938135592866413105105291237593614106482685995399813346676815180503408553846571473709300363391264412870743585710294978962918478512059447038396965783340606333033343226863509403335059866863353894377943738172563644680390061732554439170260547951112718988562259301912468544395983030744324880081171610997370297143090273852043260254091533078231539748201170523083585778986531078402042800200218468458129568330463980356546938018519493676812001283305253446283312358790617265327784303628911665186211504651394955707345604770177325189597751413935331070541503926460654740687 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ea40182532d5df74c2d01d7be624bf7a848f7576 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baboba.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dad8421d600000403004730450220538ca91a777217aa8e233309fde11c65ea04b05a173ed15269c793debd9fc053022100a8405c6104679ee526b41354183ac4c9b4f51a1cb44a40fd531d93305f9055cd007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dad8421cb000004030047304502200a8490bc4b345a1646297376209f25eca601754f722e3d95279e51efe5a80851022100c54eb6ab2d576d4a4d91cef0a00159be34cafeb541dabd7deaa1a78edcee173e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00783306126e945b8f0829827ea8f6ee2b414b48dc7fc8d3b352da4c06ccc7b3f9eec04d3605cd7411d150354eb7d1a6b0bd8cad866fc38468df7df950f76157df5a96cc7951521e49bf2ceffff1e22c0354ccf0ca09d30ded00d02d4c6d1197aa18a49cdde79798e079f7acbf3b71a53adf42dd6a1dc42fd2b3e13898a64630fde699728927ab18eb3da6c91ca856ab4867840e6aa57e051fa42e87c8e75d54dbb6d5e547c03ad000caa6e810dbf48c2d133428108a637f71a17022f412cfcc34cb68e1124b51f025f2ec64afa81b264021fa226cad3376036a676bec143eeaa829037d2d8a41272fe96919b020e56263608aa8ee037f330f4e5d61f0143ff90a