vps027.wepika.dgnus.net

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:84:18:02:d1:7c:35:8c:20:3e:c0:cb:ec:16:e2:75:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vps027.wepika.dgnus.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:84:18:02:d1:7c:35:8c:20:3e:c0:cb:ec:16:e2:75:32
Serial Number (int): 334673149451012669364380625388460151305522
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:1b:43:55:65:3a:55:1b:51:62:de:b8:e7:3d:88:bd:87:f3:d3:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:1a:c6:38:48:f8:0e:a1:7b:af:af:10:22:78:68:75:0a:9c:d7:e4
Fingerprint (sha256): 22:e8:1e:76:3c:ab:76:51:e8:b4:4f:28:9d:d8:ce:4f:8d:da:a4:0b:27:e4:19:07:38:06:00:0c:1f:72:b2:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vps027.wepika.dgnus.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vps027.wepika.dgnus.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vps027.wepika.dgnus.net

Other certificates including the domain name dgnus.net

(limited to 100 certificates)
wallocity.vps005.itw.dgnus.net
vps002.wepika.dgnus.net
vps071.dgnus.net
drupal7.vps001.fedasil.dgnus.net
fgtbabvv1.dev-fgtb.dgnus.net
phpcloud1.dgnus.net
s1-caviaragency.dgnus.net
vps002.wepika.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps067.dgnus.net
vps011.wepika.dgnus.net
vps090.dgnus.net
vps071.dgnus.net
vps067.dgnus.net
danone.be
phpcloud1.dgnus.net
danone.be
bhs-promotion2014.svr012.dgnus.net
vps010.wepika.dgnus.net
danone.be
vps003-da.ded030.dgnus.net
s1-caviaragency.dgnus.net
vps026.dgnus.net
phpcloud2.dgnus.net
ded015.dgnus.net
vps071.dgnus.net
phpcloud1.dgnus.net
vps-website.dgnus.net
vps011.wepika.dgnus.net
vps002.wepika.dgnus.net
phpcloud1.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps067.dgnus.net
vps078.dgnus.net
server01-danonehealth.dgnus.net
vps-website.dgnus.net
vps071.dgnus.net
vps020.wepika.dgnus.net
vps067.dgnus.net
vps006.wepika.dgnus.net
vps018.wepika.dgnus.net
dardenne-meca.be
vps071.dgnus.net
vps-website.dgnus.net
danone.be
vps012.wepika.dgnus.net
vps027.wepika.dgnus.net
vps078.dgnus.net
vps006.wepika.dgnus.net
vps078.dgnus.net
vps003.wepika.dgnus.net
retourv.vps004.fedasil.dgnus.net
vps012.wepika.dgnus.net
ftp.monitor.vm05.fedasil.dgnus.net
trade4u.dev.itw.dgnus.net
idtolight.vps005.itw.dgnus.net
sherlog.vps005.itw.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps067.dgnus.net
danone.be
vps090.dgnus.net
staging-fgtb.dgnus.net
vps096.dgnus.net
vps081.prod.knaufda.dgnus.net
vps090.dgnus.net
vps002.wepika.dgnus.net
wallocity.vps005.itw.dgnus.net
vps090.dgnus.net
danone.be
danone.be
vps067.dgnus.net
vps011.wepika.dgnus.net
vps054-photosphere.dgnus.net
vps011.wepika.dgnus.net
s1-akimedia.dgnus.net
phpcloud2.dgnus.net
fgtbabvv1.staging-fgtb.dgnus.net
bhs-promotion2014.svr012.dgnus.net
vps076.dgnus.net
vps002.wepika.dgnus.net
vps001.fedasil.dgnus.net
vm01.ihecs.dgnus.net
vps012.wepika.dgnus.net
aio.vps005.itw.dgnus.net
vps-website.dgnus.net
vps02.rescoop.dgnus.net
vps078.dgnus.net
vps063.dgnus.net
aio.vps005.itw.dgnus.net
danone.be
phpcloud1.dgnus.net
vps-website.dgnus.net
drupal7.vps001.fedasil.dgnus.net
fgtb-namur.be
phpcloud1.dgnus.net
vps076.dgnus.net
phpcloud2.dgnus.net
fgtbabvv1.dev-fgtb.dgnus.net
vps090.dgnus.net
vps078.dgnus.net

Certificate

The complete raw certificate details for vps027.wepika.dgnus.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334673149451012669364380625388460151305522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 22:11:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 22:11:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vps027.wepika.dgnus.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807974695881691705627029054014110892549696336662628462530283819292185682689478837691265754275562480413563992446722103669393358881814710396579194723600873729192830333939688003611211600026138528606787994479967510131149184766412677416737260542471434848854100373684118476537163470968796137413865659184665923559903030156533502675386317511974029575769841501665522374209248422272494816878344852842405752281548162598567420184975259888046078493348339408473324904331121657745103493851894498681375906615795767877203358980238600927754070009251601786627839187648199821791620466509618122679385722957850186387002241997695822385145163115162827430400099049493997842396671707998548479132321949124446656230122472519937579387389701681374812504673725346844886436302263062001436599332583502474076187533126731114611836601139970888525395454648579439114387294907912021325794116128323610861623876811851153606792255879608981500481691834927341577490505845944315296432828563911652981227403501040756238976045198463409068274777101230230530702975147337556717366087543120844724200742783379167245896726115522415974609242325912125788923776458130716912081925929903713479959966718085086933904466758063555133929070400102555734565477703410108499678075922197113210256212649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b71b4355653a551b5162deb8e73d88bd87f3d338
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vps027.wepika.dgnus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d6c176da600000403004830460221009d72c5649f1272d2a29e634112db454d95f523e5ed7de788866a4bb6056c6f54022100b4ab6847c843305b21816921771d6be9a6712941588dfddb30e9ba691182ad5e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d6c176e9a00000403004730450221009f50c9af4aba187f8323e4b53766ecdb1ff27262bde2f7f532ffa849972159140220325ef5e8ed6d2b14f68e1242159520c8d9462be756ec75fbc9dd7e65a9a7bd21
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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