hetkliktmet.voka.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:e9:d4:36:6b:27:0d:2e:0e:c5:54:91:c7:0b:b4:11:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hetkliktmet.voka.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:e9:d4:36:6b:27:0d:2e:0e:c5:54:91:c7:0b:b4:11:6a
Serial Number (int): 343996002583839360714988695259116528210282
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:92:22:21:28:ef:b0:6e:af:52:96:79:67:b6:07:6a:f0:74:ca:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:aa:c0:c7:9e:16:7a:40:27:6c:ad:41:e1:9d:d4:c5:e4:19:a2:ab
Fingerprint (sha256): 36:04:d6:ff:32:a7:7b:7e:a9:97:2f:d6:aa:7d:fc:58:ba:5e:11:c4:06:df:d0:d0:de:4e:58:5f:da:1e:18:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hetkliktmet.voka.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hetkliktmet.voka.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hetkliktmet.voka.be

Other certificates including the domain name voka.be

(limited to 100 certificates)
www.voka.be
voka.be
4brabant.eu
voka.be
vok-p-awfe01.kvkaw.be
mail.voka.be
voka.be
vok-p-awfe01.kvkaw.be
4brabant.eu
files.voka.be
files.voka.be
mk.voka.be
4brabant.eu
voka.be
genie.voka.be
vacatures.voka.be
vacatures.voka.be
webmail.voka.be
files.voka.be
www.voka.be
4brabant.eu
www.voka.be
vacatures.voka.be
voka.be
mail.voka.be
sip.voka.be
hetkliktmet.voka.be
mk.voka.be
files.voka.be
voka.be
voka.be
mail.voka.be
files.voka.be
voka.be
genie.voka.be
easytime.voka.be
mk.voka.be
mbtool.kvklimburg.voka.be
mail.voka.be
mail.voka.be
mk.voka.be
mail.voka.be
4brabant.eu
files.voka.be
4brabant.eu
voka.be
vacatures.voka.be
4brabant.eu
files.voka.be
files.voka.be
voka.be
*.voka.be
files.voka.be
voka.be
files.voka.be
4brabant.eu
voka.be
voka.be
files.voka.be
files.voka.be
hetkliktmet.voka.be
vacatures.voka.be
mail.voka.be
www.voka.be
voka.be
4brabant.eu
vacatures.voka.be
voka.be
*.voka.be
voka.be
4brabant.eu
4brabant.eu
4brabant.eu
files.voka.be
www.voka.be
files.voka.be
sbc.voka.be
files.voka.be
www.voka.be
files.voka.be
lyncdiscover.antwerpen.voka.be
voka.be
mail.voka.be
mk.voka.be
voka.be
mail.voka.be
mail.voka.be
files.voka.be
files.voka.be
files.voka.be
*.voka.be
mbtool.kvklimburg.voka.be
mk.voka.be
4brabant.eu
voka.be
genie.voka.be
voka.be
www.voka.be
mail.voka.be
vacatures.voka.be

Certificate

The complete raw certificate details for hetkliktmet.voka.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343996002583839360714988695259116528210282
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 15:49:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 15:49:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hetkliktmet.voka.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889868536475062329164329876403590247107827627548455857002762481598758098435431184019592497443396888915556081385888120767069485354237218290268442652115600629132228733867501478377638847621136009342748340190656148146813200769532226126991205644344496078808525201139370011755642775573189795821759960009546269306655852356434336479280476418869061266970108194062394042614717604617384017671568376424262935103808352652877436159037332493525743469228973997396691150682975443576685696320401142910407178563325760188685708206803671129517752514756796045261568038512763989846741747763418419850070423804237531216959179751213574692528614579255761568066191920020019020157832306538699929480783142927654905096556712867986198162592784619626177783840391217354329530334864450218572252458738693221116733006129017960267238958371516823083103742506923790101424452887026172607415818305251143651307196318518949451915175806737631592866816378126744005831584008468305173431164815754424190898126404902501661863713509260076061065505263061807937858971212867826965842191605569248836686576152576008091478422780211311243636948697506698166355744770847214996459165557704742536699748021965416157094243699123281518947922408599967137949230410578452368135649790733783692130321491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b392222128efb06eaf52967967b6076af074ca29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hetkliktmet.voka.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f19ea23bc0000040300463044022002bf8b936c6efac47340fb0d85fcec0f9f49c908a718a8fa27f1b918e0632b7f0220485b3fcc8594836bb7c23eb5ba0d9b1f0cfd3e623912ae43d067406d0a5ae6c700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f19ea23d70000040300473045022100b664bb180b7952d01492a69849cd579f06ec5b8a886d43319a1014990c10846e022005fd735fd59eef4ce0f866a0c7ed84e379c5f0347f4da75bfbf098b5a09c2c26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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