edu.hrdantwerp.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:34:2e:d4:a4:dd:2e:eb:0a:12:f3:b5:99:54:31:47:2c:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=edu.hrdantwerp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:2e:d4:a4:dd:2e:eb:0a:12:f3:b5:99:54:31:47:2c:ea
Serial Number (int): 279093789473748774923697028463516551949546
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:88:02:8d:3f:b6:32:8e:65:16:96:a0:8d:b6:0b:a5:52:2d:b8:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:6e:48:6f:da:3e:65:ec:ca:1b:b5:48:db:dd:ed:c8:64:49:75:f5
Fingerprint (sha256): 44:2c:bd:00:37:9d:99:9a:ad:47:3e:c3:54:db:79:84:b3:13:c9:4d:23:13:c2:90:24:23:8a:06:7b:e8:65:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate edu.hrdantwerp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edu.hrdantwerp.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edu.hrdantwerp.com

Other certificates including the domain name hrdantwerp.com

(limited to 100 certificates)
hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
development.hrdantwerp.com
content.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
content.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
ict.hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
*.hrdantwerp.com
edu.hrdantwerp.com
sip.hrdantwerp.com
edu.hrdantwerp.com
*.hrdantwerp.com
hrdantwerp.com
edu.hrdantwerp.com

Certificate

The complete raw certificate details for edu.hrdantwerp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279093789473748774923697028463516551949546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 17:24:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 17:24:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edu.hrdantwerp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627838323811336153108048700325118623376602577163905015589423986705369891259478883953803716952260841711402154480747956381832514400558178108105975982458930321628342399990685539920874518124300438945390092254023208925721011602076857657909714054287556837058385738349994504607082347433618689690606766658374924296505805088568375890198675137011983403388569399415989672295225598050876989466853232469535033582990463314049023398901657062527948072614455473309223080097941151552196108300688879134569871473418554374618495431769621617520274600814424807403160822445954058073919721340070846905275259861981243876343678727876457553425395848799311492302195081882504081716880697956409559437593110910893008136508999097439342896017551070033970299787498542334960734063410559082219344471930706418109010240454137792733358563247343813609546529209855412730393659405524567484182300796044506639707386622452454011422958171462788255579273210531125540306740546005933523120385575031143464087182915716990533064243162850472870128415807009486151336997562297116542461462985857252776467364234239468183610779542856923966608600618831878199411498051772716234510971856361527193109599653610144111217895266223009124167473844566480264937425657206741271895866705859144611490278161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1588028d3fb6328e651696a08db60ba5522db8ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.hrdantwerp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017030584f390000040300473045022020b10b751d2f0b37e3f9dbde26a159c81b541935c7b3f1c6c48b8af493490de8022100e8d02a3e2d2fc18f54dd0c77ddee86b8dba36730cfb23b9cfd761c8cedb8d1c600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017030584f620000040300473045022100967fa63af525227304e350f7f6c60f4d641c36c9c9dc7ee65187464db4e5072102203116b4e49e795ddf362bebe51b8c829a4f4cf6a67aad0dc3027725cafdc59182
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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