saint-nicolas.kinepolis.lu

Issued by R3

About this certificate

This digital certificate with serial number 03:c0:e9:e9:2d:88:91:a9:76:94:c6:3b:52:73:a5:57:2d:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saint-nicolas.kinepolis.lu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:e9:e9:2d:88:91:a9:76:94:c6:3b:52:73:a5:57:2d:3d
Serial Number (int): 326981993095815391399200033885658348465469
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:a9:d6:a3:8e:b3:05:75:7c:f3:21:d6:b1:cb:90:99:8c:9b:b3:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:b9:14:9d:5d:7a:d0:c0:f3:b4:81:cb:e9:c3:b8:b1:ca:7d:96:d7
Fingerprint (sha256): 26:c3:fa:38:5c:ef:ae:5d:2f:03:97:74:d1:56:ad:16:24:41:ab:2a:b8:12:6e:0d:e9:fe:a7:01:72:5e:44:16

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saint-nicolas.kinepolis.lu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saint-nicolas.kinepolis.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saint-nicolas.kinepolis.lu

Other certificates including the domain name kinepolis.lu

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
*.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
saint-nicolas.kinepolis.lu
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
business.kinepolis.lu
kinepolis.lu
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
kinepolis.lu
shop.kinepolis.be
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
shop.kinepolis.be
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
saint-nicolas.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
saint-nicolas.kinepolis.lu
stage-kinepolis.megatix.be
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
dev.business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.lu
business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.be
www.kinepolis.lu
saint-nicolas.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
*.kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
dev.business.kinepolis.lu
tickets.kinepolis.be
www.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
www.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.megatix.be
business.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
kinepolis.lu

Certificate

The complete raw certificate details for saint-nicolas.kinepolis.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326981993095815391399200033885658348465469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 21:34:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 21:34:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saint-nicolas.kinepolis.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842612967223633425728640364383696612582660549121327485292031658734037125273795179769683458392738262028716417152499042393091178510175055549280117939137793893576350114706764134374626836582483403124410637934814505774883001492902269155923422215732414186803939156963740886816891235269399530238396549971319700453992697561420825596870354055464324966963340968780628750414486551501171977103471558708208269545128488431669506153705933242408837122171118831775592907249370108659991490928114348603910595157008791981240323238340137008136587291752354438907183576296325073253158681668114021851223599771095785897470989714799185938990716857213056847569045456302866821767737122508271230255058678248955506996770359001078726363638748331394187081367758769580569465476970829790025682118934897490390660284633216672082737714361499835242447611640765773160546582519375061241188804138890146363404649997556448310707450198955468093235819622003917345180912697562255821677972495801817283442211892012065159457730592120247181976064131913460716415109474193059764810889459535524507271215195372482695114403153472887428408488225670800377261012138908709204588115683614484071679801184401117745207042352004722153413749262997385066234095998550106532987559154919849717477978339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cda9d6a38eb305757cf321d6b1cb90998c9bb31e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saint-nicolas.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181268dfd170000040300473045022100ea95cc2704be76099ade9acbcaab966721d084b43528f246ddea4ac87b57f01002206b88f4c2d9c33d3a64b9d84df8faf03b775d92bb3b54904598029c95bb32b9eb007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000181268dfee300000403004630440220544741ddcadc5d694f1f7ccbba66c2bd064292939f33482545e60fb12574e3b302207303bbb18855f48f744f20723cff59cea11e27e5dc0d38010fc0cac9dc0b1133
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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