werken-glorieux.be

Issued by R3

About this certificate

This digital certificate with serial number 04:94:b2:09:79:cd:db:0c:09:a8:a0:ae:fb:80:97:a4:bf:10 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=werken-glorieux.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:b2:09:79:cd:db:0c:09:a8:a0:ae:fb:80:97:a4:bf:10
Serial Number (int): 399047585815742448145049524609555693354768
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:f9:0d:45:00:6c:9e:3c:d9:23:3e:78:e4:bf:80:ad:d8:6e:df:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:65:38:80:b0:98:72:8e:b1:da:86:a8:cc:e5:17:60:1c:76:f3:04
Fingerprint (sha256): 33:90:e2:74:28:69:c7:a4:f1:d6:2d:bf:d1:b7:08:fb:ce:0e:16:f0:20:13:93:9a:15:a4:27:30:eb:e4:b7:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate werken-glorieux.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for werken-glorieux.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

werken-glorieux.be
www.werken-glorieux.be

Other certificates including the domain name werken-glorieux.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for werken-glorieux.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399047585815742448145049524609555693354768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 04:26:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 04:26:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'werken-glorieux.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868980201105355817070811391100425196038167714974824880293458630378125528031197603447194330426550747449869584426132709403734431429508200821439774515082297682438753493787650058930723368149883123814039726794424135339930621143042940296379469858693187529627268817513220945581053375865139166592785054118866925210619178431832347073414323045700581625386742467029472995831138763495610736281790465880202041258254575864012670293429062679908449240494163946124771392320535574718658181951212741449721394495981745459076421289336012107059949399811253825146698690241101226252729095836450578951496822843798763583993277645804051377388243001855824792169532465345451191178189390801341619543581273096487091288588837360099564644091992288488429050808568309914120709358313534051315538938410571442161302626511094583937115230694512706905894911849574222653397507204965499619779934595656302591578652411299485235029709835329563259191256182931734122170127572186013735668183902544029961820434234866038646771606313405950800445005891996574205673422441560902062146092192049118480365115416103259555958123633278244321777388508519527038523071971751793325559236933713003457618243634722517623782289727886466836876597473304836955718518856495151131208694428272390930028320273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ef90d45006c9e3cd9233e78e4bf80add86edf5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werken-glorieux.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werken-glorieux.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfc22c9cd00000403004730450220506d2e47e294dab14d259db15e7981be93b932989cbdc7f3033e8500548843ee022100e3cead4a89890e2c8bd7802799eb307bd69ab04635a72373ddb87a6657d4daa6007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cfc22cbd00000040300483046022100d76e580a3592ffa80db8739f032aae66d0f971fb623f7f5c4961b294f26131f502210089aec35b7f37aac868c11a70fef9683ec91015a7bfe30fb40160ba81706d55ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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