testing.pwg.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:49:bd:e5:88:9c:56:b7:09:2b:5f:22:f1:48:65:a7:3e:93 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=testing.pwg.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:bd:e5:88:9c:56:b7:09:2b:5f:22:f1:48:65:a7:3e:93
Serial Number (int): 373542172410247584431251100493042812403347
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:14:90:ac:a9:fe:04:63:8e:d4:10:a9:33:93:d6:3e:8d:ba:5e:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:63:bf:1c:bf:67:7a:75:90:c7:9c:d9:65:8b:87:91:63:2d:df:47
Fingerprint (sha256): 36:a5:0b:51:d5:c5:9c:85:9d:82:9e:33:48:4a:3c:78:5e:53:06:31:50:e1:97:67:9a:41:d7:6c:71:73:2f:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate testing.pwg.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for testing.pwg.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testing.pwg.be

Other certificates including the domain name pwg.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for testing.pwg.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373542172410247584431251100493042812403347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 11:55:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 11:55:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'testing.pwg.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793147639127250973344460021664237552479150276004639160847009608172457362188896634197204268386490564386369276923298633114621502677351106671436687947399986184852122724272772580579188695380580789191131689894233877599663100687669430213656990846761927321492087953146980422442560136754744239576102561886120374592426654448296282757439394899303595541620428861686844819011605774530676900264264675100369324985211491123807621714562381713976564021409971476036459302779719416841963169872669231993053469282709077841896444803344419654122326066472169222998517365189628064755728207279519309310904680584536240549568305486912097744121919776601429795849069400705906549571689077197415879997049831418166319996699440442156992186232117935625981845169500225986043369836053602541087496888710425148108288081209573869592295335733033442170964922283288554159354637536329845433348933829394411360748665378795339210205436105041995639131292048078385548739486544011019797689625705856528502883416055772287231069391755205857269408033870402679616493144587423998436164847276704972221714940788780764587886803395076562476376912610062789089398589460890401403026401479567378345117497687680539622412819497499480139803878750039492627954378703184568273826186239898520270778293543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							281490aca9fe04638ed410a93393d63e8dba5eec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.pwg.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170156b9c010000040300473045022100e8684f9f331dc825e5375ed505b8f7477f0e3501afc19a105ae7eb5f7e83e6e0022025a3d0308eacbfa05b7d045c8094504c76a3efa6c9a68691163f69f29af9b5f70077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170156b9c390000040300483046022100e76765ea544bd6a21dc832a5294196b4e2afc94ce44eac0fdfe818a8bdc13ec3022100972aad6c4287017c0d0f3270a1d2dcb973b015ad4731bf6a8345be9e88e28ce4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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