Issued by Let's Encrypt Authority X3
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
8 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgISAzHC2cbo+kzTQBVubM30gMxlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMDkxMTQ0MzBaFw0x ODA1MTAxMTQ0MzBaMBQxEjAQBgNVBAMTCWJhYm9iYS5ubDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAO9mUMZyhdMeIhK5FUdpZURBK+2KBfNT0CTfMBqz ozPqa1PKUlvb0jk2l066Uag1/7k61RFe14djzjLVI/eYKjsYYITnjfU8fuElxHbD PiopqLdJ86nu0G8Xg1uGkL/7tZTwHp8dGzS62cEtGMoFBcCy6ZSAOgYo2F+TH0nI FuDQ8oGTo3gbnuw5bzUyHvJ1FleLx5TQgglwYCrpQF45bTpdYpZvUYS2aqyzLbv3 izt1pW33X4eUE+IydepADCGL3gKvapn6K6Hi/sGdnwwbDCaxFqzkTWb2QI6Nnziq 1O6NnzFEK4/AJqy/z9DTE5Kuyi32l9fzaWPK/r1mb07/25+8f3rmy/RPlNAUJYyd Zx+2biI0rMTlc47uaiWk+aXQZy/ivIPa7xtTWJKchO09jkxyUlQ3PyQHn4q+aOU2 jHoJLC4kii7R1jEoxqbpxdupluh67BPCzKC/0dm/CMHiA1nJ7o15lddgCuL/eYMN lPGQIW9kQgnJokH+BZsGUfs1CS5BXoN5sWjR4QRO6aDfmFEaA/ty94sYHABRf41N 5NqHI50DflH4FIaIm/OkA6vBkrYo3GXbFqf1F3DKLh8txUHLUaW7GRHuoimjPtpm jmJ949DC7WGAXDaefkqbUDc9PiyzkBwqe3HHoKYlENsbtdd+QdtMSVP4+Dn2y3Hh QJ9ZAgMBAAGjggJHMIICQzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDeBBHNpTfi1 6Q6jjepJALEUfg4LMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wUgYDVR0RBEswSYIJYmFib2JhLm5sgg5tYWlsLmJhYm9i YS5ubIINcG9wLmJhYm9iYS5ubIIOc210cC5iYWJvYmEubmyCDXd3dy5iYWJvYmEu bmwwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy eXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAX3giUCPimtZk N7Jz3NLYRAdTWLZiR98k/oowIKbNdqwwQvBxXpIvtPmvSKL+e4T8g3QALT+SRZie 2FmJhnnpoaOfPSTe8WIf6pAeP+sRCHYk7/TYeeXoGl1WijM25vcvFNvWfWnVQbcg fcs8K+o97Wh/iunGK+bFxyFUrz6gGG2UR/UD0K8DVsl2E8noKT51sO14L9KhWjYb ZlBdyCp77ikzYqsFdfkFS+hGLp4tO3iM2WXYlH+Ak6ka7Ew+Qe2kHXmxMdFGpNz3 3zIAXku/Z9diJsmkO9aExmGrdq2V1uNdNVVnkX9QbaHFPSN7rlr4j4YNMeGuw+TB dUawEQsWIQ== -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA72ZQxnKF0x4iErkVR2ll REEr7YoF81PQJN8wGrOjM+prU8pSW9vSOTaXTrpRqDX/uTrVEV7Xh2POMtUj95gq OxhghOeN9Tx+4SXEdsM+Kimot0nzqe7QbxeDW4aQv/u1lPAenx0bNLrZwS0YygUF wLLplIA6BijYX5MfScgW4NDygZOjeBue7DlvNTIe8nUWV4vHlNCCCXBgKulAXjlt Ol1ilm9RhLZqrLMtu/eLO3Wlbfdfh5QT4jJ16kAMIYveAq9qmforoeL+wZ2fDBsM JrEWrORNZvZAjo2fOKrU7o2fMUQrj8AmrL/P0NMTkq7KLfaX1/NpY8r+vWZvTv/b n7x/eubL9E+U0BQljJ1nH7ZuIjSsxOVzju5qJaT5pdBnL+K8g9rvG1NYkpyE7T2O THJSVDc/JAefir5o5TaMegksLiSKLtHWMSjGpunF26mW6HrsE8LMoL/R2b8IweID WcnujXmV12AK4v95gw2U8ZAhb2RCCcmiQf4FmwZR+zUJLkFeg3mxaNHhBE7poN+Y URoD+3L3ixgcAFF/jU3k2ocjnQN+UfgUhoib86QDq8GStijcZdsWp/UXcMouHy3F QctRpbsZEe6iKaM+2maOYn3j0MLtYYBcNp5+SptQNz0+LLOQHCp7ccegpiUQ2xu1 135B20xJU/j4OfbLceFAn1kCAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278269694768382799741274944998975492639845 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-09 11:44:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 11:44:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baboba.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 976665443730021749806917478147887545016782593330567829486806497694638181665455606900547536858760846242333741253809549280092192915384196329062876608738782432826324592205846921495218088779448132287509887328952197600185944434917980251639991585770467711536741727213487824038961715297272570460524877594768407879022194370341887369209081112347280715875013824452438690669419430423285770930936186480497643282740043516297493350166925531837710105873707749321064970667236039187706133822920444900903544204834347478505603963851436605762704987040818632975943500306965953662725065274152953619379569764780836252157320834312910701339098139511707590146289671518840530559957840504354009088108071675156101112117254069508052720484333287223666578687138259229088945805344847142718232181906283134057044098682085277402354830000298805505341376327253261445802187367163602690839414290729478924614292107882773616345137153968692316683558883208066693518471014460637141081567549644501964452224144614378246875156327699940942859759974244350691628816842486686386924993184836051467689791812284082809454356452605279182513462528539186052828955034820886366159721477169526596582310521108059376564159901540781903845820977863180590253464291387335413303752098954012232943443801 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37810473694df8b5e90ea38dea4900b1147e0e0b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baboba.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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