dejonckheere-roeselare.bmw.be

Issued by R3

About this certificate

This digital certificate with serial number 03:fe:85:d7:10:55:b0:fd:4b:27:ba:fe:34:6c:9d:cf:d3:47 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dejonckheere-roeselare.bmw.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:fe:85:d7:10:55:b0:fd:4b:27:ba:fe:34:6c:9d:cf:d3:47
Serial Number (int): 347946482991770811505615687401753510138695
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:b7:38:87:7b:ee:54:77:ce:84:39:7b:22:ff:0b:5a:12:6e:d2:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:0e:9c:62:c7:f2:be:b9:df:2f:76:94:db:60:77:ef:37:91:75:0d
Fingerprint (sha256): 0a:2c:1b:07:dc:93:9f:fd:2c:b7:28:7c:12:6b:bb:65:4a:be:23:56:88:78:2c:2c:6f:1e:2e:73:ef:3a:f4:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dejonckheere-roeselare.bmw.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dejonckheere-roeselare.bmw.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dejonckheere-roeselare.bmw.be
www.dejonckheere-roeselare.bmw.be

Other certificates including the domain name bmw.be

(limited to 100 certificates)
davo.bmw.be
meinfs.bmw.de
dejonckheere-tournai.bmw.be
efinance-i2.bmw.be
configure.bmw.com
www.bmw.de
configure.bmw.com
beckers.bmw.be
genet.bmw.be
cocquyt.bmw.be
depotter.bmw.be
test-dealercms.bmw.be
allcars.bmw.be
deschepper.bmw.be
www.bmw.de
configure.bmw.com
deschepper.bmw.be
www.bmw-int4.com
www.bmw.de
www.bmw.de
afpt.bmw.be
www.bmw.de
genet.bmw.be
dejonckheere.bmw.be
www.bmw.de
beckers.bmw.be
dhaese.bmw.be
access14.bmw.de
www.bmw.de
bilia-verstraeten.bmw.be
belux-new.bmw.be
dejonckheere-roeselare.bmw.be
www.bmw.de
test-dealercms.bmw.be
afpt.bmw.be
www-origin.bmw-prod3.com
belien.bmw.be
www.bmw.de
bortolin.bmw.be
configure.bmw.com
lemmenslecouter.bmw.be
bortolin.bmw.be
www.bmw.de
prod.admin.belux.bmw.be
www-origin-proda2.bmw.com
demey-maldegem.bmw.be
www.dealername.bmw.de
centrauto.bmw.be
prod.admin.belux.bmw.be
storybook.polarcode.app
bmwi-fr.bmw.be
davo.bmw.be
bilia-emond.bmw.be
genet.bmw.be
www-origin-proda2.bmw.com
mail.bmw.be
configure.bmw.com
konexus.app
www-origin.bmw-prod3.com
www.bmw.de
daeninck.bmw.be
dejonckheere.bmw.be
demey-maldegem.bmw.be
daeninck.bmw.be
dejonckheere.bmw.be
cocquyt.bmw.be
demey.bmw.be
configure.bmw.com
meinfs.bmw.de
demey.bmw.be
depotter.bmw.be
gamotors.bmw.be
dejonckheere-tournai.bmw.be
www.bmw.de
bmw.configure.bmw.cloud
serviceapp.bmw.be
depotter.bmw.be
ludwigmotors.bmw.be
www-origin-proda2.bmw.com
www.bmw.de
bilia-emond.bmw.be
www.bmw.de
genet.bmw.be
configure.bmw.com
www.bmw.de
www.audittool.bmw.be
daeninck.bmw.be
configure.bmw.com
ludwigmotors.bmw.be
dejonckheere-roeselare.bmw.be
www.bmw.de
daeninck.bmw.be
discar.bmw.be
demey.bmw.be
www.bmw.de
dejonckheere-roeselare.bmw.be
configure.bmw.com
faq.bmw.be
configure.bmw.com
meinfs.bmw.de

Certificate

The complete raw certificate details for dejonckheere-roeselare.bmw.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISA/6F1xBVsP1LJ7r+NGydz9NHMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjQwNzMyMDNaFw0yNDA3MjMwNzMyMDJaMCgxJjAkBgNVBAMT
HWRlam9uY2toZWVyZS1yb2VzZWxhcmUuYm13LmJlMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAh7jmUp938vXn7FbUSEDJ8XPzshDMYH9ST7Uv+q6WPiwo
p2vhUTaGHZQRi73o34ExP7Y2GEJIB6JoasZvzj5aVz+ipmGUnCR+R0vXArrCBP11
QzJT50l1gg4buxY4jFmtPwmAKTztdTf+6MfEP+MPfNXci347b3KDHavfqG6mkvpP
nTRyJcIqjWmnLlrsZmFBLQNLuCJ1fxP6jDNYmMwAIXyj2GcnuC6vCy70a8NFra1A
LVPXLY/eBy/tIAVC9ooAX0RjPyLBeYb7Y0WhTswIK0hy/KjMNoZg/0TyPTu1ujF7
SeknkqLf+Pc7wREV8BsAtt7TsScWYyg03hvC9WJphQIDAQABo4ICQjCCAj4wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSJtziHe+5Ud86EOXsi/wtaEm7ScDAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzBLBgNVHREERDBCgh1kZWpvbmNraGVlcmUtcm9lc2Vs
YXJlLmJtdy5iZYIhd3d3LmRlam9uY2toZWVyZS1yb2VzZWxhcmUuYm13LmJlMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAPxdL
T9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGPDzu4JgAABAMARjBEAiBY
uP9jrs937ZXbqi+4JdOtwbQjmYpuniI991/0jJjhdAIgAnh0iis0c+bXfv3M4rn3
FZDi9HJ/Ryx1xNEX+rAxcM0AdwDf4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHB
O75SXAAAAY8PO7jlAAAEAwBIMEYCIQDDjnG34U9c0qolJBGL6GgTc+8vRndeNitw
Z/f7pwONMgIhAI6InHIWxeno0sR/b8O73yYg8CQoDsyEp4CZY847yqzVMA0GCSqG
SIb3DQEBCwUAA4IBAQB8SLe78AagD6Qb9XpA1u+hXK1xJEHavASSvH/VJgGYxl6s
TQZghy7ILs0GLZINlzc1OCeueXWE9npacmJZBMULluDbv+VJzxY/BPg1lluxcEc8
iBerXHjJTus814wfOxQSk/RsWV6fmbs4diZbQj3c/QLJtX1ose3dlPObUaDFCMya
/xX5fZgsKsQyjlXQ/P8GSFaD6lQm3r2kJQ2cNvChx0jMQXmwljdlPngv3KIJIDCw
FSXBsyM8bREyOTOpFKaGP094VrjNbodn5C1RC6K1TeznCWQCoIAPLalx/YIGsQZe
W1a0BPpTau6RhK0F5ezt5E7rNjFLqaoTdJ02+Bsl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7jmUp938vXn7FbUSEDJ
8XPzshDMYH9ST7Uv+q6WPiwop2vhUTaGHZQRi73o34ExP7Y2GEJIB6JoasZvzj5a
Vz+ipmGUnCR+R0vXArrCBP11QzJT50l1gg4buxY4jFmtPwmAKTztdTf+6MfEP+MP
fNXci347b3KDHavfqG6mkvpPnTRyJcIqjWmnLlrsZmFBLQNLuCJ1fxP6jDNYmMwA
IXyj2GcnuC6vCy70a8NFra1ALVPXLY/eBy/tIAVC9ooAX0RjPyLBeYb7Y0WhTswI
K0hy/KjMNoZg/0TyPTu1ujF7SeknkqLf+Pc7wREV8BsAtt7TsScWYyg03hvC9WJp
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347946482991770811505615687401753510138695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 07:32:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 07:32:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dejonckheere-roeselare.bmw.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17133348609842745622381446095838399070143961605158574355563241091374286501018989671984158036563209414108987921307024851925582898236312869062173707169711702653615907825700371755481660785558708935321705687672178507809949549761831269668727563329428174699530323152011965339929378540111618820863794130336041933289225753391952043788886002290666663306954622310164124579580951537920618546170889494459574091589590389893231406562724563317546091536080886716685192704643431035768448749737727932870082250056282033192274689220647137400597056536194076370869545513279142156018409688578616874740865034868996757093602515314852304677253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89b738877bee5477ce84397b22ff0b5a126ed270
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejonckheere-roeselare.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dejonckheere-roeselare.bmw.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f0f3bb8260000040300463044022058b8ff63aecf77ed95dbaa2fb825d3adc1b423998a6e9e223df75ff48c98e17402200278748a2b3473e6d77efdcce2b9f71590e2f4727f472c75c4d117fab03170cd007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f0f3bb8e50000040300483046022100c38e71b7e14f5cd2aa2524118be8681373ef2f46775e362b7067f7fba7038d320221008e889c7216c5e9e8d2c47f6fc3bbdf2620f024280ecc84a7809963ce3bcaacd5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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