wokgarden.be
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:37:15:cf:9e:07:20:12:2f:1f:6e:49:67:8d:3b:82:26:55 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=wokgarden.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:37:15:cf:9e:07:20:12:2f:1f:6e:49:67:8d:3b:82:26:55Serial Number (int): 280081379774478795391081221887728201901653
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 23:58:8a:de:23:a2:f7:2c:09:2f:d6:67:05:3f:20:1d:d1:5c:58:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ca:8c:19:a0:f5:8b:56:f6:80:b9:09:f9:ab:56:b8:00:48:d0:4b:1c
Fingerprint (sha256): 4e:54:1b:46:f7:27:e3:28:d4:8f:b3:96:c8:0b:dd:db:61:6b:91:1a:07:af:7c:c3:9a:f3:0f:df:b2:fc:3c:9e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate wokgarden.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wokgarden.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wokgarden.be
www.wokgarden.be
www.wokgarden.be
Other certificates including the domain name wokgarden.be
(limited to 100 certificates)
Certificate
The complete raw certificate details for wokgarden.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISAzcVz54HIBIvH25JZ407giZVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDEwODIxNTRaFw0y MDAxMzAwODIxNTRaMBcxFTATBgNVBAMTDHdva2dhcmRlbi5iZTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANr47FaX+0TD/BVhzgR8jw1JWFKwiDSaM1rP MM4gNgLtBX5dpbtT3DSLRZaY1Gt0nvq/docKjAJpgynW2ksfQYu6c5VkuXG0R3oB pde9gcdxq6XZnNJF97qQhiNDeeClrTJmtjkO4QP1A4bdBsOhCUDr07OPO7RwwSQn GDsqb3+PkSte4PRPN5/tU9LRmmj5cOaNvvOvq1dzqKw+y5ZAZ0mL2zvkBoAfPslr J1mnzT3XAV7SNSrrtwJD43gKoE/bXFJ1gIhk27bKPuqBLme9zCLIXs4hNjClAtj7 rKNFslHyLKDqG/Yx0Q2gGI8x7jZ8n1bWBirxcqR8lAnhE6DlayUQi2czI7RKBA4i UkDkIJBqxs9e3A3RT3P9M7ghziIZk0gi8SHPZ2RJHVxc//KUMkBzlIhwDnYKL1ie lQ9sqPwp7yRjp+HvzsapCONQWGhsvH43e2SfuzR1tpO9QldMaHHVogF0PvStkJx1 uzbaVFw1u6CssT7mwNhiFOdNXJwEohPpFaoXt5GvxWzr0faEUEAiuScu+R4a+5Oy LoOssyWiJ2d0hezpmQ93NzMqzamLvpRoGKvEooG6DNs7FM0amBU/dzdE6kx69FBg 0WXF6LWtuxU0N20G9GEEEt1NXu49x9T2tAiF2poGDzEquyUftqvOZmmkr6rSWE1B j4JekM65AgMBAAGjggJzMIICbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCNYit4j ovcsCS/WZwU/IB3RXFgtMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMd29rZ2FyZGVuLmJlghB3d3cu d29rZ2FyZGVuLmJlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT Le+LkF4AAAFuJkVu6wAABAMASDBGAiEAp6lZ2qqblLOm5nVrNQZ4HKE+5gZ9oSt6 ViSLysGImmkCIQC32b4RLB/k1jysuVdXfl6tzdJobqajE1GRoGGVRd5SPAB1AG9T dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbiZFb/MAAAQDAEYwRAIg fMwRWYT8F+JcfCMeARdmY4zWt0gy0pJ18NioczxEB6ICIHlgP5Uj1l64hPXTWFn0 PrEy3Y+xTSfFDFwFimFxYOvUMA0GCSqGSIb3DQEBCwUAA4IBAQCWHwgHWaErN+Dj /fk3rbumPkOK9exCUSp39EbnigYt8FArpwNaHZCMqR2JmGDSzYYl0JyiVnB1QvPR AwwXHZgM2nwxti/h8Hl98Ow/wpB8G8+xwEDRI6cPgSU0XLMu1U4clPSlgvd6ch5J QGNHPDw45SbaPxrTfx1V1McEkDs95CWiSCR91wnyVFIR0Xj0tp1XRa0g+6v79X21 Hz1AsqBZaPcuhuEAehVmIbMz+D19aZABr0jHh0mD8OUNoGn5fTlyvG6WLb25Au1s DzbdTrjQHohRpcFT7OnswwydE0QobbF+kLTXcAOIqdO0a/iB1tm/5msRm167r+yL pJAmEFAT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2vjsVpf7RMP8FWHOBHyP DUlYUrCINJozWs8wziA2Au0Ffl2lu1PcNItFlpjUa3Se+r92hwqMAmmDKdbaSx9B i7pzlWS5cbRHegGl172Bx3Grpdmc0kX3upCGI0N54KWtMma2OQ7hA/UDht0Gw6EJ QOvTs487tHDBJCcYOypvf4+RK17g9E83n+1T0tGaaPlw5o2+86+rV3OorD7LlkBn SYvbO+QGgB8+yWsnWafNPdcBXtI1Kuu3AkPjeAqgT9tcUnWAiGTbtso+6oEuZ73M IsheziE2MKUC2Puso0WyUfIsoOob9jHRDaAYjzHuNnyfVtYGKvFypHyUCeEToOVr JRCLZzMjtEoEDiJSQOQgkGrGz17cDdFPc/0zuCHOIhmTSCLxIc9nZEkdXFz/8pQy QHOUiHAOdgovWJ6VD2yo/CnvJGOn4e/OxqkI41BYaGy8fjd7ZJ+7NHW2k71CV0xo cdWiAXQ+9K2QnHW7NtpUXDW7oKyxPubA2GIU501cnASiE+kVqhe3ka/FbOvR9oRQ QCK5Jy75Hhr7k7Iug6yzJaInZ3SF7OmZD3c3MyrNqYu+lGgYq8SigboM2zsUzRqY FT93N0TqTHr0UGDRZcXota27FTQ3bQb0YQQS3U1e7j3H1Pa0CIXamgYPMSq7JR+2 q85maaSvqtJYTUGPgl6QzrkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280081379774478795391081221887728201901653 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 08:21:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 08:21:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wokgarden.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893329274176972554842601842606772765391575540887479623898389500727930631756647734234149929561326507074157848382473966199126541197097583622350003182128714515342136622037698884440849984672463085210847670505636119438298504426296467294421696783892610429737207574444527302488875514829186192471881459176515202049902408833267520985687761305524374947631011652266373613936868852540602879951595315449439675577074646016359441082677537522055585464618006196681117523410477798943398315939000636337256674004536887534345745630254253751260748022858194169593412728029831534226496210229113990309318912652829829428937347919638676637231300945441683228095342053163261713136775828477323642071954292963429977640438078782298234129704470388307330684745124528923881497913404533102541924740286002696719299987219314409711833727248870806661074556393723769151865647898200671672508407030548447496597397587166829500335702933501471588740918451825882183090920360424954011365797413343557355765585956733439083435951327859717329032795477838285266094025402164502561489422655126003087385715996649141281006385807672196963806375787518347394099792868190308473218401221712891723667467851543168766696128824888168036604505962001345806725533589012325789510712138939128125510962873 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23588ade23a2f72c092fd667053f201dd15c582d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wokgarden.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wokgarden.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e26456eeb0000040300483046022100a7a959daaa9b94b3a6e6756b3506781ca13ee6067da12b7a56248bcac1889a69022100b7d9be112c1fe4d63cacb957577e5eadcdd2686ea6a3135191a0619545de523c0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e26456ff3000004030046304402207ccc115984fc17e25c7c231e011766638cd6b74832d29275f0d8a8733c4407a2022079603f9523d65eb884f5d35859f43eb132dd8fb14d27c50c5c058a617160ebd4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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