werken-glorieux.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:3a:40:f3:c4:a2:e5:38:31:16:cf:5a:0f:a8:ee:66:21 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=werken-glorieux.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:3a:40:f3:c4:a2:e5:38:31:16:cf:5a:0f:a8:ee:66:21
Serial Number (int): 333213869690557894301353917407417726821921
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:5c:5c:5d:a7:5b:0c:4a:d4:a5:50:1c:5a:98:ab:0f:79:96:40:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:44:e2:fe:ae:ab:54:48:93:dd:b6:01:c7:27:21:a2:71:19:35:65
Fingerprint (sha256): 0c:08:4d:4f:52:11:aa:a4:87:ca:2f:5d:e9:1c:03:23:3e:9f:52:b5:2f:83:88:56:9d:38:39:5f:df:f7:a8:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate werken-glorieux.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for werken-glorieux.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

werken-glorieux.be
www.werken-glorieux.be

Other certificates including the domain name werken-glorieux.be

(limited to 100 certificates)
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
csg.werken-glorieux.be
werken-glorieux.be
owa.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
csg.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
csg.werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be

Certificate

The complete raw certificate details for werken-glorieux.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxtN958R9ZKVqpbtoF8Zc
c2jTn4D0PEsdBq5zyLMWf3i561jLzzbVp60aT9Eni0/i8s59Y9rRePTguRRSP0HM
nsADDsztTpGJ3l6tVah0cIypQvv8a4fh6UcqE+RFZ5W1Khe9dv8owcVbSUeuiQBU
/OdIfOGzjMBEYlPWMk1b5Taz+3sPaINIQHVUAGTRTPzdqPu1NH2OGc9ZNpj7Iq8R
94v3nSljUaOaRI1/dXmt4N/tgm0SLyR4J/lqt9R117R9ZL0a08IsiD42FfGMm7kB
ygk76gBwpkTeQvfCFVG0jcMgOK5QylLAv2wjelNP+w4oYveMUF+YPqqMkXlp7/fb
xIeF0AC4a8DnXau9n6V82mhNWh9xUYELN9GvLFVKqXJtUivJtLHKSiHQJNM9IpK2
iFgI2j2iYpdi+xT/xrTMDnrfRITmuTfjTmWCIf5KRwXf0sy5NrebfBmf+5h7bQYM
8l6aIAico/kCx2hLqATc6/5icnjnXl2fwEmyjWqkfOimao85ClVaUwDGRUFtOthO
yoDXwcuKEiAHb02eMwpFOePPZOZrzhdJ8vluqms4q4C95T7LTYsIlCsmXJ8rv1Zv
Ab2AqlpSAccfuEhCg/G+ACW2xmGR3McQd/ys6t4mcorwCt9WcQ9tpQ2cZCqlA6dh
WQTm1B6kHLf5/JKIMU6SZfsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333213869690557894301353917407417726821921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 03:27:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 03:27:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'werken-glorieux.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811139882263633029441699360282200204285417253687024849532056516135730488330380922197685733033123649476354583127259549105836587723781822523942039803912142439268549432248130981545699700372737750134818434431651278720934169571599606607657435549222406257257161961561123741696253429293021771304118206935687176060493385751322561323551884468509112207940514582401757810819689523650038213098107168702801373409957046756697819676068273694869500450562871832997251139021497689727594738891611111706895842134632413899935054641391009247115091556415893024647608605387995317538208954543304010393627287383113984626798917502882178670660032945356699839405098270157169561387479482856437047022537535705176756265192020553957525274950883591029976813426810742755844525337160167651256337246617953197675137361153505567195757585588471833475691530986413778319466410485745946789018149998825896643154752290388384730819670765330541236504446439196787149097708153080626508398897777925621656869570410207935734942646052517104709016139072595300780934036621006358994406891055412016366670592372157974681555869107899421461459182118791202948444804753649753048167708445841727382141201182865269664522308910531838536241619022912092807027909930499596133178578216313326187670824443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca5c5c5da75b0c4ad4a5501c5a98ab0f799640b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werken-glorieux.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werken-glorieux.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016d8fdfbc4b0000040300473045022100b1bba9fec77277f9da5daa14f5ef70733e72f21faa20ca24257ce1195e71bb4302204363ec95e59d47db6c77ac208284642fd23e90242207e6eb23fba33bf2678aca007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d8fdfbc4d000004030046304402202b1acc3fa130619d4a361bdae6872cb9ccf03b63a7081d8c2f12c522f99fa9f6022007ec4e5c96398d95ea7967a457a8f1bd179078b7e8887785c51806ef44aa46e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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