mail.ikologik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:3b:03:01:6a:e5:c0:57:a2:8f:c8:23:3e:f1:e6:e7:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.ikologik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:3b:03:01:6a:e5:c0:57:a2:8f:c8:23:3e:f1:e6:e7:de
Serial Number (int): 275366874896432802007869028978044539693022
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:31:22:a5:2e:52:c9:4d:e8:a4:ca:c6:f0:24:ed:30:8b:74:22:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:0c:9e:13:9a:63:86:da:01:5d:e1:3c:a9:dc:7e:98:48:3e:86:88
Fingerprint (sha256): 14:c4:9b:c8:6e:c8:8c:a9:b8:15:f4:9b:84:80:85:63:82:ac:7e:23:cd:00:ae:27:e6:69:c0:d8:cc:27:b0:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mail.ikologik.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.ikologik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.ikologik.com

Other certificates including the domain name ikologik.com

(limited to 100 certificates)
smartbox.pallwater.com
api.ikologik.eu
ikologik.be
link.homewizard.net
*.ikologik.com
fdus-62.freshdesk.com
mail.ikologik.com
smartplant.callensvyncke.com
mail.ikologik.com
*.ikologik.com
link.homewizard.net
hydris.ikologik.com
smartplant.callensvyncke.com
ikologik.com
ikologik.be
test.api.ikologik.be
*.ikologik.com
ikologik.be
eurowater.ikologik.com
*.ikologik.com
fdus-62.freshdesk.com
hydris.ikologik.com
*.ikologik.com
waterleau.ikologik.com
fdus-62.freshdesk.com
ikologik.be
fdus-62.freshdesk.com
mail.ikologik.com
ikologik.com
vyncke.ikologik.com
mail.ikologik.com
novotec.ikologik.com
mail.ikologik.com
ikologik.com
mail.ikologik.com
vyncke.ikologik.com
*.ikologik.com
test.api.ikologik.eu
fdus-62.freshdesk.com
*.ikologik.com
ikologik.be
pall.ikologik.com
highcharts.ikologik.com
link.homewizard.net
test.api.ikologik.be
waterleau.ikologik.be
api.ikologik.be
*.ikologik.com
api.ikologik.be
test.api.ikologik.be
api.ikologik.be
test.api.ikologik.be
fdus-62.freshdesk.com
link.homewizard.net
*.ikologik.com
link.homewizard.net
api.ikologik.be
link.homewizard.net
test.api.ikologik.be
app.ikologik.com
obtimize.boonsfis.com
mail.ikologik.com
app.ikologik.be
link.homewizard.net
ikologik.com
api.ikologik.be
ikologik.be
ikologik.com
fdus-62.freshdesk.com
iot.innomatic.be
link.homewizard.net
horizon.pwg.be
api.ikologik.be
smartbox.pallwater.com
ikologik.be
iot.innomatic.be
fdus-62.freshdesk.com
alphagooch.com
link.homewizard.net
link.homewizard.net
pall.ikologik.be
test.api.ikologik.be
fdus-62.freshdesk.com
smartplant.callensvyncke.com
ikologik.com
link.homewizard.net
smartplant.vyncke.com
link.homewizard.net
smartbox.pallwater.com
api.ikologik.be
link.homewizard.net
eklavyainfotech.com
iot.innomatic.be
link.homewizard.net
api.ikologik.be
iot.innomatic.be
waterleau.ikologik.com
hydris.ikologik.be
link.homewizard.net
api.ikologik.be

Certificate

The complete raw certificate details for mail.ikologik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275366874896432802007869028978044539693022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 23:33:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 23:33:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ikologik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798206719123899995254157714642987595247803383062669662755495914436759094256793904801643868769467630867963673522898652566180568547968211969961213840920306641077612814153942471021511100083880770916383394233271010179504198285327672067255425174514296231927788648852866384694947512660192680668836350710186541679022434165159004358243917410555187223193686224135098285879136825992499008156121894245476304242734091094619706897277599993754216552954446647293733478925758825649328812596859949330663448801817849340452165746122707249549016958518537935611229048818098644750026337197213346130757802761246612162670842500037648430988664462276180616669630835115296369703298006196373001163778458746404209589320331940959963068818013003180472208781419016569813745164651840123513450542369864082241987492783962792170187059490933770124219101218624286098129299620527833001043236267847813257736001034848959274433594218330457369425317970137310372286692722824837668195907522903816841320698007939921113782276195611065994717675955351384691813219812207539403049896595955833911570423430194868957530420971992495665561989143272999191023313732673255839186306904249555640663251867352214604574400182504322895932693012866269344124537117585654686609415530059660615248526297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							173122a52e52c94de8a4cac6f024ed308b74220e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ikologik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2ddca9ee000004030046304402207030f5c10d2f64888eb5f2492344afc51d3b57599aa129de1e3c63eb97af3358022079e27e72e335f21f92b432d99e59ce492bfa1198f46a52eb4381b84780ea2337007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a2ddcaa6700000403004730450221009dfa1b368bf5177b9ad2d9a75b6dcd0a8b5c8bf25a8eadf09fa5eb281b9de52c022007fd6762dca452fd4a8ea298e2ffcd705eeaca702582dcbd1552fa94bda9bf3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00461f404d10765ae6eb9bd87e9fedd5de212207369a29e117e63e0d3f6d032ef0ffe440bdfee4d45f7b4198063155f67fa4fdce8b06b4974e8d6231b963a2eb0133d1fec5794bd9e59803854693d9c1be7790c9b25460352f518735299cb715c76bc9b4553d44d35791d2765b516621a8a0bf53ec6006525aa73578797f6beeb75a107e0a5e510cc95b9e815f3773fc4caaf7173c17167d02dc30f26ab00bcdfe226a2983a3841d6f41baf926c32798162c157b70392df012b40cf1d9b444261426cbc538bf5bb1c85ddd37a26b3094db0b5ebe851186f32e7f3220a6305af6437e622a5e34d489a07af3882f50bfa6d22a08bef3584452765fd494e639971ae6