s1-caviaragency.dgnus.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:09:d1:4e:b1:5b:f1:99:b9:3e:d0:27:e1:36:48:cf:31:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s1-caviaragency.dgnus.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:09:d1:4e:b1:5b:f1:99:b9:3e:d0:27:e1:36:48:cf:31:86
Serial Number (int): 351789902276874480254615452158992816484742
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1c:8e:29:ba:66:71:6e:ab:af:33:85:b1:5c:87:43:89:c5:36:75:bd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:42:34:73:6f:10:23:88:a1:18:11:08:ad:e0:0c:73:66:08:48:ae
Fingerprint (sha256): 11:c1:b1:9e:82:4e:10:79:dd:a9:2a:36:54:f5:d7:8c:bc:4c:4b:f8:04:18:d9:a9:38:cf:ca:64:bb:9b:18:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate s1-caviaragency.dgnus.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s1-caviaragency.dgnus.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s1-caviaragency.dgnus.net

Other certificates including the domain name dgnus.net

(limited to 100 certificates)
vps002.wepika.dgnus.net
vps071.dgnus.net
drupal7.vps001.fedasil.dgnus.net
fgtbabvv1.dev-fgtb.dgnus.net
phpcloud1.dgnus.net
s1-caviaragency.dgnus.net
vps002.wepika.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps067.dgnus.net
vps011.wepika.dgnus.net
vps090.dgnus.net
vps071.dgnus.net
vps067.dgnus.net
danone.be
phpcloud1.dgnus.net
danone.be
bhs-promotion2014.svr012.dgnus.net
vps010.wepika.dgnus.net
danone.be
vps003-da.ded030.dgnus.net
s1-caviaragency.dgnus.net
vps026.dgnus.net
phpcloud2.dgnus.net
ded015.dgnus.net
vps071.dgnus.net
phpcloud1.dgnus.net
vps-website.dgnus.net
vps011.wepika.dgnus.net
vps002.wepika.dgnus.net
phpcloud1.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps067.dgnus.net
vps078.dgnus.net
server01-danonehealth.dgnus.net
vps-website.dgnus.net
vps071.dgnus.net
vps067.dgnus.net
vps006.wepika.dgnus.net
vps018.wepika.dgnus.net
dardenne-meca.be
vps071.dgnus.net
vps-website.dgnus.net
danone.be
vps012.wepika.dgnus.net
vps078.dgnus.net
vps006.wepika.dgnus.net
vps078.dgnus.net
vps003.wepika.dgnus.net
retourv.vps004.fedasil.dgnus.net
vps012.wepika.dgnus.net
ftp.monitor.vm05.fedasil.dgnus.net
trade4u.dev.itw.dgnus.net
idtolight.vps005.itw.dgnus.net
sherlog.vps005.itw.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps067.dgnus.net
danone.be
vps090.dgnus.net
staging-fgtb.dgnus.net
vps096.dgnus.net
vps081.prod.knaufda.dgnus.net
vps090.dgnus.net
vps002.wepika.dgnus.net
wallocity.vps005.itw.dgnus.net
vps090.dgnus.net
danone.be
danone.be
vps067.dgnus.net
vps011.wepika.dgnus.net
vps054-photosphere.dgnus.net
vps011.wepika.dgnus.net
s1-akimedia.dgnus.net
phpcloud2.dgnus.net
fgtbabvv1.staging-fgtb.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps076.dgnus.net
vps002.wepika.dgnus.net
vps001.fedasil.dgnus.net
vm01.ihecs.dgnus.net
vps012.wepika.dgnus.net
aio.vps005.itw.dgnus.net
vps-website.dgnus.net
vps02.rescoop.dgnus.net
vps078.dgnus.net
vps063.dgnus.net
aio.vps005.itw.dgnus.net
danone.be
phpcloud1.dgnus.net
vps-website.dgnus.net
drupal7.vps001.fedasil.dgnus.net
fgtb-namur.be
phpcloud1.dgnus.net
vps076.dgnus.net
phpcloud2.dgnus.net
fgtbabvv1.dev-fgtb.dgnus.net
vps090.dgnus.net
vps078.dgnus.net
vps-website.dgnus.net
vps006.wepika.dgnus.net
phpcloud2.dgnus.net

Certificate

The complete raw certificate details for s1-caviaragency.dgnus.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351789902276874480254615452158992816484742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 21:14:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 21:14:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's1-caviaragency.dgnus.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727481559188479833887990827428057413592255729079198499761978809122644893460429557881437543773388649953202872520378917043806015961339911524891601257452298071751830061243760331776655392258260850851660377900133639177689199082874049975571867992519448551874840799381892908476382255051482953565877344355074400799576296973064398039985206407350262837633533304057515097044150956205827446715983365317948959033104907682301992224486155137261515572039711297686319741278141355058600174355411497288326708880089961166349863625939274724235010591906548015085264355671143841333080746193751351689339557965592061068022973262738736685627276566484307664994519416992249281819278909097273159582312850478449053142962574506310745499931073788473420575544740373370200102541505658033183525791134935161420823086312698498047290292987471256997285180865675434489991165409421989060358531850060586027176613676715047174773109862536928481990382258529926952529048650606118155068200784270840452135606120607917457222849086816048416870367376940696483551967763202649592742403781103920532328355795012997929951529130144244448664191866122857524482772968605686473780338178980768103188664774777769381215226177844682798614215356139995541351953025363670155240613515052997740632706321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c8e29ba66716eabaf3385b15c874389c53675bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1-caviaragency.dgnus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001714742df55000004030047304502204ccaca5bf893611be037f9b2a3b99cf5ac481f7794e6e10fb3728f77f84afbca022100910cca6d92dd67e0e472cd87e1ce217a60edb38e4adb4bf5a782769629265b29007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001714742df440000040300473045022100be69b0f09f85f243e19b68bab7a5a61d6816f4330036b3f2707edb90d2d28cb602206ec0719c02beb7ad09649841ef10735744dd39394ef18be73ea390cac9a20ff4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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