shop.kinepolis.be

Issued by R3

About this certificate

This digital certificate with serial number 03:d8:b5:02:8c:e7:f2:fa:d1:f6:21:10:f2:57:6d:fc:86:36 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.kinepolis.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:b5:02:8c:e7:f2:fa:d1:f6:21:10:f2:57:6d:fc:86:36
Serial Number (int): 335078452559948483537986926984960826705462
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:be:1f:df:e8:d7:86:ef:93:d1:50:a9:cb:17:7c:91:52:8b:fe:3a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:fe:b1:06:ba:27:2f:87:25:e1:63:a6:94:95:da:e1:79:f4:2d:f4
Fingerprint (sha256): 0b:c1:5e:50:c5:02:80:6c:b6:bb:c2:c6:f5:77:18:0d:0b:fd:50:ee:a5:e5:e0:c6:b7:71:b5:26:8d:97:44:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.kinepolis.be

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.kinepolis.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bono10.elsmillorscines.com
shop.kinepolis.be
shop.kinepolis.es
shop.kinepolis.fr
shop.kinepolis.lu

Other certificates including the domain name kinepolis.be

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
hrfr.kinepolis.be
business.kinepolis.be
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.be
kinepolis.lu
kinepolis.lu
secure0010.hubspot.com
shop-dev.kinepolis.be
corporate.kinepolis.be
www.kinepolis.be
tickets.kinepolis.be
shop-dev.kinepolis.be
business.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
kfd.kinepolis.be
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
tickets.kinepolis.be
secure0010.hubspot.com
shop-dev.kinepolis.be
hrfr.kinepolis.be
kinepolis.be
corporate.kinepolis.be
*.kinepolis.be
shop.kinepolis.be
hrfr.kinepolis.be
shop-dev.kinepolis.fr
corporate.kinepolis.be
kinepolis.lu
hrfr.kinepolis.be
corporate.kinepolis.be
www.business.kinepolis.be
shop.kinepolis.be
stage-kinepolis.megatix.be
kinepolis.lu
secure0010.hubspot.com
secure0010.hubspot.com
kinepolis.lu
corporate.kinepolis.be
corporate.kinepolis.be
*.kinepolis.be
corporate.kinepolis.be
shop.kinepolis.be
www.business.kinepolis.be
secure0010.hubspot.com
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.be
kinepolis.be
secure0010.hubspot.com
secure0010.hubspot.com
secure0010.hubspot.com
corporate.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
business.kinepolis.be
business.kinepolis.be
kinepolis.lu
business.kinepolis.be
secure0010.hubspot.com
kinepolis.megatix.be
corporate.kinepolis.be
www.business.kinepolis.be
business.kinepolis.be
*.kinepolis.be
kinepolis.megatix.be
greatescape-leuven.be
kinepolis.be
secure0010.hubspot.com
hrfr.kinepolis.be
secure0010.hubspot.com
tickets.kinepolis.be
corporate.kinepolis.be
business.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
corporate.kinepolis.be
hrfr.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.be
secure0010.hubspot.com
hrfr.kinepolis.be
hrfr.kinepolis.be
kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.be
secure0010.hubspot.com

Certificate

The complete raw certificate details for shop.kinepolis.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfW1uYMh7ZQ3vvJbkbSr
h39UePvAlZZiq3b9VGByJLEUKEVI3Oeue0WqrLArgx4gZYa5kZTu9YARrwsR614t
M/1tXe0uHmW6PF7W9JIgP8pHXwXVk68j9iGciU+g3Cec5fhJJEarTGwhnjuY6qk1
iby1fIxBsWi0oEmQXmRvTgqUP0yCScCEFdDg8iZ1yKJjVaFubpfVleQJnocuHXT0
fKHRBFT3AwZGBkzJxexY8q88OtmFv7xIZVnRcUyCFNSoBLwtcCQ82a6Jo7rp5IPk
NzSGTRacrDVR867MWHphLg9O7nafwKojXBMWh1+uIbgMuaP40Qnvz2fPvqOLVvuh
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335078452559948483537986926984960826705462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-05 08:17:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-05 08:17:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.kinepolis.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26000016566811599698803879314234557836125657386618859036772048623066797197459862138060966545274069149471492226248441110122099034831507891137951753656475511896131030322117909651109194196092139587007740545032523241830094112011933039425590916348175874258673850444023615017808819490681482193408550855293903499395766122339343156275112131706564144888936074288791965606864313839688706759156180197458057351301030192282606531144442598861471622298664319765226278158980484947596901073476006373880553749809137426290218035258808417110924437334990686617520609989587990808496283881281666129004092206774907244391076859086564207862223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfbe1fdfe8d786ef93d150a9cb177c91528bfe3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bono10.elsmillorscines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017632314a1a0000040300473045022100c0ad22da0291fd92a25fda1392c0ef077e37d7b0f4fa19ca3101cb861800f6d2022029b3d108caa209555660658fd77404220bb413d925ddfcda6cf13a02d4c5b9e40076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017632314c0a0000040300473045022021125e348f3b0ef5539e298794de38ebf2f9f9b03c49ae981080c9e1c081484902210084e8306f72f1c5c091787cb86984a805c37fb28aa9a24aba43243315ebfd7ae1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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