dev.kiosk.aptus-kantoor.highfive.aptus.be

Issued by R3

About this certificate

This digital certificate with serial number 03:fb:3e:a7:d6:5f:47:1e:af:b9:2f:25:f9:c8:a2:40:0e:00 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.kiosk.aptus-kantoor.highfive.aptus.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:3e:a7:d6:5f:47:1e:af:b9:2f:25:f9:c8:a2:40:0e:00
Serial Number (int): 346831015489734675523127391890407530958336
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:ed:bd:9c:be:5b:80:e2:d4:1d:8f:0f:a6:52:27:bc:5f:4d:6e:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3f:75:4f:33:cb:4c:b0:a7:c8:be:14:5b:73:06:a0:d6:7a:90:bb:c4
Fingerprint (sha256): 15:64:e3:55:34:fd:cb:72:84:a7:32:35:a9:4d:f3:8a:e4:bf:94:17:fd:dd:e1:6a:c7:57:65:78:f6:a9:fb:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dev.kiosk.aptus-kantoor.highfive.aptus.be

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.kiosk.aptus-kantoor.highfive.aptus.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.kiosk.aptus-kantoor.highfive.aptus.be
dev.kiosk.genk.highfive.aptus.be
dev.kiosk.harelbeke.highfive.aptus.be
dev.kiosk.highfive.aptus.be
dev.kiosk.houthulst.highfive.aptus.be
dev.kiosk.schoten.highfive.aptus.be

Other certificates including the domain name aptus.be

(limited to 100 certificates)
smartplant.vyncke.aptus.be
aptusconnect.io
aptus.be
aptus.be
www.aptus.be
acc.app.memoweb.aptus.be
dev.app.salestool.aqualex.aptus.be
acc.video.memoweb.aptus.be
functions.highfive.aptus.be
aptusconnect.io
acc.admin.vuilnis.limburg.aptus.be
acc.admin.highfive.aptus.be
galloo-dev.aptus.be
dev.app.high-five.aptus.be
dev.kiosk.aptus-kantoor.highfive.aptus.be
app.cloudplatform.roxell.aptus.be
aptus.be
uat-stapels.galloo.com
twice-dev.aptus.be
tcp.mergroup-dev.aptus.be
dev.app.high-five.aptus.be
sso.connect-dev.aptus.be
blog.aptus.be
harelbeke.high-five.io
en.aptus.be
dev.video.memoweb.aptus.be
aptusconnect.io
dev.api.kellvin.aptus.be
video.memoweb.aptus.be
acc.harelbeke.highfive.aptus.be
tcp.mergroup-dev.aptus.be
aptusconnect.io
www.aptus.be
*.aptus.be
high-five.io
aptus.be
app.vuilnis.limburg.aptus.be
dev.app.salestool.aqualex.aptus.be
dev.app.memoweb.aptus.be
galloo-dev.aptus.be
*.aptus.be
anzegem.high-five.io
sso.connect-dev.aptus.be
dev.app.high-five.aptus.be
blog.aptus.be
tcp.mergroup-dev.aptus.be
dev.app.high-five.aptus.be
sso.connect-dev.aptus.be
tcp.mergroup-dev.aptus.be
aptus.be
dev.anzegem.highfive.aptus.be
aptusconnect.io
salestool.aqualex.eu
aptusconnect.io
memo-dev.aptus.be
npm.aptus.be
app.memoweb.aptus.be
harelbeke.high-five.io
sso.connect-dev.aptus.be
harelbeke.high-five.io
dev.operator.recupel.aptus.be
www.aptus.be
aptusconnect.io
dev.app.vuilnis.limburg.aptus.be
salestool.aqualex.eu
aptus.be
smartplant.vyncke.aptus.be
roxell-dev.aptus.be
tcp.mergroup-dev.aptus.be
dev.admin.vuilnis.limburg.aptus.be
vanhalstperso.aptus.be
aptusconnect.io
dev.app.high-five.aptus.be
salestool.aqualex.eu
acc.app.highfive.aptus.be
memo-dev.aptus.be
dispatcher.op-limburg.aptus.be
acc.harelbeke.highfive.aptus.be
dev.app.high-five.aptus.be
aptusconnect.io
sso.connect-dev.aptus.be
admin.highfive.aptus.be
www.aptus.be
tcp.mergroup-dev.aptus.be
sso.connect-dev.aptus.be
video.memoweb.aptus.be
aptusconnect.io
sso.connect-dev.aptus.be
sso.connect-dev.aptus.be
galloo-dev.aptus.be
aptusconnect.io
production.admin.kellvin.aptus.be
twice-dev.aptus.be
tcp.mergroup-dev.aptus.be
blog.aptus.be
sso.connect-dev.aptus.be
sso.connect-dev.aptus.be
tcp.mergroup-dev.aptus.be
www.aptus.be
app.cloudplatform.roxell.aptus.be

Certificate

The complete raw certificate details for dev.kiosk.aptus-kantoor.highfive.aptus.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQczjrQb+ijnX0wb8ugz
JKKHv8j3VB7CJ4As4NGUtAyxWkk6VPcf4jjoB+sNQQbQCf+7By6HlO2qwxFGyQp1
pUyY4i3PUm5CASCb0DDkoLeaIMQFQzQu1OYN+wUQXrgz7acS8lU1aYyNNOoIT0vF
/9wlTrg1vjK1fqPpt1HJZV8cyvDuhnK2JusGMYXn8GaZ1kpaLCI+oDyI96hZ/ZwG
zCGQPh3x5EeQ6yeBpGd+eEu7et/AOsIcM06AqM7YNVatPQ0iwG0FmKOU95qIMX/+
t9n7MFfF+v350nWC1RYYvEOqEEhtYLKv24c/3MJvIQo8X29HSTQmeXFz75/ExuH1
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346831015489734675523127391890407530958336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 12:04:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 12:04:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.kiosk.aptus-kantoor.highfive.aptus.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19822965020506723154473151956412207506834968557078862449503007895046832568847652498407709924688814066356011019498994097333214514718189561254342747734219124992724819919082242879497082894819675117729406950671324314787503242347505474358399231530220602494106678411618311602024202739476667064087605484493656217428693496511796266093340282728901031004098601990356797058521011584760273506732013522331953164752078563154514075589495199922535208345062035946111116433706290714762643680288463718277866041810187045737111854606744380560515287237984994625483358566502467394838814972707746976578690397911684598510328648705637349455157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03edbd9cbe5b80e2d41d8f0fa65227bc5f4d6eb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kiosk.aptus-kantoor.highfive.aptus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kiosk.genk.highfive.aptus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kiosk.harelbeke.highfive.aptus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kiosk.highfive.aptus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kiosk.houthulst.highfive.aptus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kiosk.schoten.highfive.aptus.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186cb9fc09900000403004630440220771933427c2843cd38c6ff9d174e71d2be1a9ab76c0195727daef28336e41cc602206082372d7d2fac6ed998fdf28e7d15e4bbe791c4e79e99050861b6d0a51ae742007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186cb9fc0d100000403004730450220294b9b8b3c8be3044a7e4a4c6688a5c675bd60139b9e3e670dd32f327943c45b022100a40787175413b0df64911b9fbc424549361a94465a14ec563a3f343a06da1e2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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