harelbeke.high-five.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:8e:da:0b:da:9f:11:ec:bf:ee:c1:86:1f:1c:73:a4:45 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=harelbeke.high-five.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:8e:da:0b:da:9f:11:ec:bf:ee:c1:86:1f:1c:73:a4:45
Serial Number (int): 325840107679882203035422409391231819031621
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:c2:90:01:02:77:2d:db:10:24:64:06:75:1a:47:9b:fb:12:11:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:60:d1:e1:2c:3a:3d:56:da:32:f0:9c:35:f2:43:77:9b:87:65:79
Fingerprint (sha256): 1a:de:cd:b8:8c:b3:a3:d9:00:5c:c0:e3:2e:86:b5:9b:1f:2f:95:e2:37:1e:4d:9d:eb:d2:61:2b:4b:99:f5:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate harelbeke.high-five.io

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for harelbeke.high-five.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.harelbeke.high-five.io
harelbeke.high-five.io
high-five.io
prod.high-five.harelbeke.aptus.be
production.admin.high-five.harelbeke.aptus.be
www.high-five.io

Other certificates including the domain name high-five.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for harelbeke.high-five.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70KMpopK1Q8W0tWI80w0
wtpUvo6VkTwP2wCxn9bfff+9VX0/sfMk07ujP5I7USGIiUzBxHYyi0DsBybVZ2rR
rD52yetI+Fku2IV8fu1D3Mjk/tYk8t715xMTBP0r/WcRF++AEaIO9NqkRkrgv2g6
B8MnDACcnixIdzGk9EfaRjxwVRE77BlIjNypsE41keFpGKp6GAd1jtZ71axIgMpS
HvccIgTkBCsgZubhZjudqRFFFFdX3oShk0Iy5hIZYz4/yUY3PD3wz6roW6lTKuTo
NWCs3dJwhlC375uRtlBSYhAsFkH2XtmH2UYeSdt9YbwQI9Fk5pCwWznmD1OOaU4M
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325840107679882203035422409391231819031621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 20:29:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 20:29:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'harelbeke.high-five.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30203771627113800276668170831970096929946033490106453944998342069589881384798287743904786742119151692062277704024505622385644509492687460741694988101680616328251593265581829868148492759383618073916442003614678069171290824535087552394875024010164428174442715019098261702673043411343508475192080112580737035868244606270326685163844856029221764842835755990209931939002693064720863432809864001055432878856594381497475466866102475693882714490484842960715274754496443439535664694930433161846052155905022359371326629517746413671858714487937788127576312007044362279314743155271718550738319006892682616611068241793752973052941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97c2900102772ddb10246406751a479bfb1211ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harelbeke.high-five.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harelbeke.high-five.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high-five.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.high-five.harelbeke.aptus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.admin.high-five.harelbeke.aptus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.high-five.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001690cd00c37000004030047304502200509df0bb35efb2ddbca57ee34cddd59de8ec5e5de28bff480b7a969e410fc30022100e9dbcb11943aef6838de20447fabaab4d860f0d4ea7c1cf67454a5a52dfa787700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001690cd00bf00000040300483046022100ae74721cb4d01d974985c46ef92e966e5c4f4b51989605e5fb5e951f1f1e8172022100d537c75633e7c2668af78839bcf6ef54d31023043b5727cdf78df3b8053a57ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0010f4a2c5c09e25de8513e0f01a164f78fb0a72ea3abf71b96054c33e94c665c9384ccdccf3f95ff76605dd571580d82709e561e970e60d5d326be1d9b5fc47d5cb7a71a08801cd528f498008aacb87b728de320f22949f7dc291d137724799eb44691444c5bc4439b126bcbe94f116689b30e70bc02f6b987ad5daa27e6fee2db472c3781dbe81cc6a591b1a533f7c6af1f4bb32b3e02d72f4c8541740837b2a98647f1bd501b763f65e8ccd385fa9fd30fe0da2dd0ab7df5cdf91e5a63a56d76a2eaa46424a024dd17e4be2370fa1f5395ed782223729ed509d789363872b74def2dbaf72fb79349daa44da4c3dbd1f1f2ed40d6340604cc9012f5ba123d73c