boonsfis.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3d:a6:78:af:d6:4d:6f:5d:65:7b:6d:07:f5:ae:ac:4a:0d was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=boonsfis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:a6:78:af:d6:4d:6f:5d:65:7b:6d:07:f5:ae:ac:4a:0d
Serial Number (int): 369427646598542025466648115756864709085709
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 03:1a:16:80:11:3c:2f:e1:2b:12:a1:d9:58:d6:e2:2c:af:9e:aa:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:02:97:a7:00:30:32:a5:58:a2:cc:00:07:49:cd:0e:b1:14:99:ec
Fingerprint (sha256): 14:d0:ba:fd:4e:23:b2:a0:b0:55:5d:36:2a:75:7d:4e:a6:4f:2c:76:8e:78:94:5a:f7:7e:3b:26:a3:61:bc:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate boonsfis.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boonsfis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boonsfis.be
boonsfis.com
boonsfis.nl
www.boonsfis.be
www.boonsfis.com
www.boonsfis.nl

Other certificates including the domain name boonsfis.com

(limited to 100 certificates)
boonsfis.com
boonsfis.com
boonsfis.com
boonsfis.com
boonsfis.com
obtimize.boonsfis.com
boonsfis.com
boonsfis.com
obtimize.boonsfis.com
boonsfis.com
boonsfis.com
boonsfis.com
boonsfis.com
boonsfis.com
boonsfis.com
boonsfis.com

Certificate

The complete raw certificate details for boonsfis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369427646598542025466648115756864709085709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 09:42:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 09:42:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boonsfis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 660528963008249479057663565026521541894561339935884143410170076942542672620122953432207453059594262581540715787748734955061951249132633136884195086320285615867518591215377023598621040309487943550958623041290581806970731166790902050412962695334290361788870005797448739755003463277895126730681762282144767846082440276192688388502036598547801193873695759948879302212381252597949353476635804423145298387803190756331262409052329872342627878128381455583723483301994290099128072894100493237571835147993343324525651835417275030365868782548290310097754715894122558355299410077633923411779500071686869022277920865697228263856003875160214750418090542100802368128196227618581652126625278330932853762957774525208239893043256782335790408538638219051582862849810391447495482170166918755019049322773188132634491815563954068517979117821638941166879899905973870088978208028603418757133259633159384275615980209020172704633192916520075771351345137937369020517458930934044780201438340453688114335430564760784297493104493690127347506154856113175515172823262310126059157380656804840748381023702494101874018420518338837322111338576792556488478507083779591986085289585638320049111166827543270016710966093189213842518657000058947636647091398135940414952485441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							031a1680113c2fe12b12a1d958d6e22caf9eaaf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fbd656be2000004030046304402206e684e26b7284ee59c8dc84e6e02595286bb1553ef5d7cdb0e1bfffe3cd908d6022014ce5b063f17c613f27cca1ec09628837ed41f2c6d2d4feabfa88af9fcccaa0f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fbd656c0100000403004630440220069d7f5f2c145f9306f728e54ac761411685be9143e95be4b56e3a90666b7e830220555bdfc5af04cebe6e7bec2aab114b71f5b8a0aae12a1e14e85dade31cb19ee8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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