boonsfis.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:64:a8:50:9d:2e:7b:df:8b:f8:dd:08:2d:2b:3d:39:6b was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=boonsfis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:64:a8:50:9d:2e:7b:df:8b:f8:dd:08:2d:2b:3d:39:6b
Serial Number (int): 267595737140354333591414900265755351005547
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:6f:77:0e:e1:c4:c4:cc:95:a0:43:50:e7:80:a2:16:ed:73:4a:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:fc:43:cc:76:04:a6:bd:8a:04:22:8c:9a:c7:67:77:dd:92:de:50
Fingerprint (sha256): 0b:c5:24:a9:bf:ca:d6:1d:0c:e7:ff:30:04:e0:ca:99:5f:95:31:07:10:cd:f6:4b:c3:c2:00:93:bb:f2:2a:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate boonsfis.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boonsfis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boonsfis.be
boonsfis.com
boonsfis.nl
www.boonsfis.be
www.boonsfis.com
www.boonsfis.nl

Other certificates including the domain name boonsfis.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for boonsfis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267595737140354333591414900265755351005547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 06:01:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 06:01:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boonsfis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881043880938080848701485557298517828487107352222247301534780182944528926003773877830884284269386568617260742873897874388667419784390470039530560180261108722290693766356152474347179513386105672087668102458480184416585816054901933394901868404583881628289532631505990704269522580363535944071454145710593286613623923147881683413741008458067351947000170514028928997318080518801529191578212718201703778198502547098198999349820784670743386396842562804833618056214763214290098439617610693598080027113758157502396840310782752231758553674749135116201492710541671217411036337172454463935299480637964773861154315485357046215020449883502315342930399982999260693114766956383311280725995267357468786837695228723154166485920218834113091001912328927114844929152936402432826849434895678225536874697283456802634958916750236418239490286237288488104983069640326602635252627524756204004380633762362509872271645748039552468713414424335774777840947564537743456716282813042178612457551665909607583705963586957103309795793956267011844696603325859203265746311624926392099231697385525889980841880712033024886376065061526937797233381481219129525496505091854023529395333033000595028531665365681791909951703465497674488820996176599034516497280724321762751072252783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a6f770ee1c4c4cc95a04350e780a216ed734a53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170f6bf4d460000040300473045022100ce1d826994793b40f4d33079edba11d9632efc303b6353a023b0163d5bcdb0910220736fd667160c602d30b925f22f18767b71f665dd30deaba884630d74bc81d84a007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f6bf4d2e000004030046304402207741bbae8841c49da00323c7f377122b572687c7506e1ceb25da114e8043bb1602206a654aeccbcbc7742d58c83d558181b6515279f343f283d289e20a6734d9aef1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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