legacy.fontys.me

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:7c:b5:43:ce:bb:c2:fc:34:89:0a:73:4a:e3:7b:7d:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.fontys.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:7c:b5:43:ce:bb:c2:fc:34:89:0a:73:4a:e3:7b:7d:7c
Serial Number (int): 267287423485445972532841330850777649610108
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:10:86:31:df:a2:5c:26:4e:df:cc:15:80:97:68:d1:da:59:80:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:4e:54:a3:d7:88:a0:35:19:68:9c:83:3d:bd:c1:71:77:b1:f2:1b
Fingerprint (sha256): 12:57:81:2a:17:e3:d8:97:8c:54:db:72:8e:63:da:a1:e5:77:ab:ca:13:81:53:b8:3e:0c:a5:e7:f2:03:5c:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy.fontys.me

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.fontys.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legacy.fontys.me
www.legacy.fontys.me

Other certificates including the domain name fontys.me

(limited to 100 certificates)
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
niasudguy.tk
sni172666.cloudflaressl.com
staging.cgi.fontys.me
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
legacy.fontys.me
dev.fontys.me
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
beping.floca.be
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
app.danielarigheto.com.br
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
orinda.app
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
staging.cgi.fontys.me
brule.tech
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
oceanstream.fr
sni172666.cloudflaressl.com
fontys.me
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com
sni172666.cloudflaressl.com

Certificate

The complete raw certificate details for legacy.fontys.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267287423485445972532841330850777649610108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-07 21:38:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-05 21:38:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.fontys.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832062430159211843460852327739281434705636583958250823059374745503727563620445918139101732814982684597997031238914039550470833835511329141636843686999338980516248218689963655782726341270215122604639555781188472786699551090101797062929953246305252522014593727672422135624250183371000901379607741015025627355753861760581002498921797149052555791649712858230919238379478413037937007382354138750925368685055222941473763576436867881866941203992294966268660844197317160954194198658238537265852288531314465155174307765649406228656107595117816578127681972747692260323608614701777459607454130916611521558880238758274437420309125304109983495155405384939526542987161443071594275405842327507863315259302919332295415209307028806978888422500055592010048911208853760643938904003352815374826922472783165354864804848719066134138647174016624485218834666118749328482915604553786298313827165902533854380814742926836287156924305566115553936664467050536608003791734756484908094299991223756941141520574120863076863334016140321452635953915059884002186057178689647047442131317066462547999530516561017102960938815704566274419900016491979135432067384430355510760904831224611403814265164688764791416536233330896689514543983746018570137054101524119361221400523189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03108631dfa25c264edfcc15809768d1da5980b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.fontys.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legacy.fontys.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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