rt.bee-secure.lu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:09:2a:9c:0d:a7:d5:21:59:51:44:6b:48:57:f9:89:cc was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rt.bee-secure.lu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:09:2a:9c:0d:a7:d5:21:59:51:44:6b:48:57:f9:89:cc
Serial Number (int): 271217230729555884023597569815118526122444
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 63:f3:22:ba:68:b1:ee:f5:57:d7:36:b7:0f:77:41:93:32:16:1b:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:1e:4e:07:6d:10:71:13:8d:5a:ce:6d:04:72:18:46:9d:cd:b4:4c
Fingerprint (sha256): 4e:37:c9:40:3c:12:b7:dc:de:c5:a0:52:09:1c:0c:a1:4f:16:c2:8d:ae:8d:fe:09:f7:9b:b8:32:fa:77:68:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rt.bee-secure.lu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rt.bee-secure.lu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cases.lu
mail.mineco.lu
rt.bee-secure.lu
rt.cases.lu
rt.mediateur-consommation.lu
rt.mediateurconsommation.lu
secinlucom.cases.lu
ticketmx.bee-secure.lu

Other certificates including the domain name bee-secure.lu

(limited to 100 certificates)
mail.mineco.lu
mail.mineco.lu
forum.bee-secure.lu
stopline.bee-secure.lu
beepass.bee-secure.lu
stopline.bee-secure.lu
mail.mineco.lu
podcast.bee-secure.lu
podcast.bee-secure.lu
stopline.bee-secure.lu
beepass.bee-secure.lu
stopline.bee-secure.lu
stopline.bee-secure.lu
be-safe.lu
rt.bee-secure.lu
beepass.bee-secure.lu
beepass.bee-secure.lu
bee-secure.lu
podcast.bee-secure.lu
be-safe.lu
be-safe.lu
bee-secure.lu
be-safe.lu
bee-secure.lu
rt.bee-secure.lu
bee-secure.lu
fs.bee-secure.lu
forum.bee-secure.lu
forum.bee-secure.lu
bee-secure.lu
beepass.bee-secure.lu
bee-secure.lu
bee-secure.lu
bee-secure.lu
podcast.bee-secure.lu
podcast.bee-secure.lu
stopline.bee-secure.lu
podcast.bee-secure.lu
stopline.bee-secure.lu
podcast.bee-secure.lu
podcast.bee-secure.lu
forum.bee-secure.lu
stopline.bee-secure.lu
stopline.bee-secure.lu
dev.bee-secure.lu
rt.bee-secure.lu
beepass.bee-secure.lu
beepass.bee-secure.lu
forum.bee-secure.lu
stopline.bee-secure.lu
mail.mineco.lu
trainings.bee-secure.lu
beepass.bee-secure.lu
bee-secure.lu
rt.bee-secure.lu
forum.bee-secure.lu
trainings.bee-secure.lu
podcast.bee-secure.lu
podcast.bee-secure.lu
bee-secure.lu
rt.bee-secure.lu
be-safe.lu
beepass.bee-secure.lu
beepass.bee-secure.lu
bee-secure.lu
podcast.bee-secure.lu
beepass.bee-secure.lu
podcast.bee-secure.lu
*.bee-secure.lu
stopline.bee-secure.lu
forum.bee-secure.lu
trainings.bee-secure.lu
stopline.bee-secure.lu
trainings.bee-secure.lu
be-safe.lu
mail.mineco.lu
bee-secure.lu
mail.mineco.lu
trainings.bee-secure.lu
podcast.bee-secure.lu
dev.bee-secure.lu
trainings.bee-secure.lu
*.bee-secure.lu
stopline.bee-secure.lu
stopline.bee-secure.lu
podcast.bee-secure.lu
rt.bee-secure.lu
podcast.bee-secure.lu
bee-secure.lu
rt.bee-secure.lu
beepass.bee-secure.lu
fs.bee-secure.lu
forum.bee-secure.lu
mail.mineco.lu
be-safe.lu
bee-secure.lu
stopline.bee-secure.lu
bee-secure.lu
rt.bee-secure.lu
bee-secure.lu

Certificate

The complete raw certificate details for rt.bee-secure.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6bA2GCqQSDTI9do7VpD
fyg5odmr5jbrGByn6eI1mvU38rhtlcQqwQ34A93ksxRIlT/hRkYPuW6BOBluCL6S
4fj2c07Ms+cu2+eEMqwEmYuEo6zJRUvmG6FTmg/xkBm95weeOFIYGGduz784OknN
6LUPA1M9bx5WFcAI5rFgs3w4nv3qu48N6jkgVS4AK2vMqC+9N/2z1odaGH2Im9HZ
9gfv3qPU8tbS+U3W1MKuQisCYtD/+uS4rzeDYzo5mMve6xjorSuzQWC6PbkZ7GyX
rkJSu+ZhCIzF/dAbmi1rn652iKSfZLH2yc70l9qXoLynLzUlC9F3UCDCO4ToK62p
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271217230729555884023597569815118526122444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 13:10:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 13:10:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rt.bee-secure.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26213558245743931227757672915441410878085520170733229307820352216582273500221816729124842188710092078604843457925263269199108230740198277989643935536961229840098487731431605227759872013274923992594535734405748989865616264586063834384196570348169956241717480177765663792051981140671983648416881080050007149103897921826365533220721653302258531871067714382841418934894578960907035782859802055800531956651151168906949647504385757597029144544913980970881038755708403305487225956949053335860253208274528588963692642731246360982460550958531468844802653017025529190788497829665008464276164860332185656702273985043838589053289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63f322ba68b1eef557d736b70f77419332161b49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cases.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mineco.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.bee-secure.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.cases.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.mediateur-consommation.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.mediateurconsommation.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secinlucom.cases.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmx.bee-secure.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b9e6c179600000403004730450220657bb9bee3e22f87688106b6b879c0ded3d595d4bf44f92e197218388f6f7814022100bd0b91f0152b6b2433bbb61011bf9eedca59227bae3167881c5cf49ee329925b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b9e6c1784000004030046304402201db1588b03b93aae5b61c8245001354f53e9f09ff680f9f37217b02dd3a1b6f302205f7e704d4ccc92797d81b7b970480b053c8b55050109860458e811038c198aad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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