ir.barco.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4c:61:8b:2b:c2:7d:8f:86:b3:0e:dc:1a:24:ff:10:97:c2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ir.barco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:61:8b:2b:c2:7d:8f:86:b3:0e:dc:1a:24:ff:10:97:c2
Serial Number (int): 287327975413679271967309333097975313897410
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:ca:93:92:0f:5c:cb:01:70:0d:98:fa:f0:b9:60:9b:f5:5a:8c:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:88:3d:38:8a:e5:1e:4c:69:c9:34:6c:45:f9:cb:c9:a1:47:e6:39
Fingerprint (sha256): 50:2d:a7:63:31:5f:ed:59:d2:43:d1:d8:8e:88:94:0b:14:4c:86:58:aa:56:c1:03:1d:be:11:f2:d1:fa:48:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ir.barco.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ir.barco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ir.barco.com
www.ir.barco.com

Other certificates including the domain name barco.com

(limited to 100 certificates)
outlet.barco.com
*.uat.eu-west-2.synergi.barco.com
edu.barco.com
*.healthcare.barco.com
ir.barco.com
ar.barco.com
*.preprod-10x.ads.healthcare.barco.com
*.healthcare.barco.com
*.qa.ads.healthcare.barco.com
sni.cloudflaressl.com
smartuptv.com
barco.support.com
edu.barco.com
*.cloud.barco.com
*.devitp.ads.healthcare.barco.com
test-serviceportal.barco.com
link.socialsharing.kbccorporatebanking.be
access01.barco.com
maintenance.cloud.barco.com
*.cloud.barco.com
*.sandbox.synergi.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
barco.support.com
*.barco.com
www.register.barco.com
*.dev.synergi.barco.com
*.healthcare.barco.com
*.barco.com
modmed-mock-fhir.devops.ads.healthcare.barco.com
*.store.barco.com
us.cc.barco.com
store.barco.com
edu.barco.com
store.barco.com
go.barco.com
*.healthcare.barco.com
demetra.barco.com
*.barco.com
barcozone-compliancetest.be
*.eu-west-2.synergi.barco.com
auth.barco.com
*.healthcare.barco.com
insights.barco.com
store.barco.com
cc.barco.com
demetra.barco.com
service.medical.barco.com
discover.barco.com
forwrd.it
university.barco.com
qa-web-backend.barco.com
*.uat.synergi.barco.com
ar.barco.com
cl.sw-t.ch
web-backend.barco.com
*.healthcare.barco.com
insights.barco.com
*.prod.ads.healthcare.barco.com
www.trynow.barco.com
*.synergi.barco.com
*.healthcare.barco.com
ram.barco.com
*.preprod-10x.ads.healthcare.barco.com
infopages.barco.com
secure.barco.com
edu.barco.com
*.cloud.barco.com
jobs.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
www.register.barco.com
*.barco.com
*.barco.com
infopages.barco.com
*.healthcare.barco.com
store.barco.com
*.healthcare.barco.com
sni.cloudflaressl.com
cc.barco.com
*.healthcare.barco.com
us.cc.barco.com
event.barco.com
*.healthcare.barco.com
activate.barco.com
*.prd.eu-west-2.synergi.barco.com
*.store.barco.com
ir.barco.com
*.preprod.ads.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
us.cc.barco.com
*.prod-14.ads.healthcare.barco.com
ar.barco.com
*.barco.com
edu.barco.com
*.dev10x.ads.healthcare.barco.com

Certificate

The complete raw certificate details for ir.barco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287327975413679271967309333097975313897410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 07:39:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 07:39:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ir.barco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822260556963799632370231850700111769155551854565464189645579615120369259039699179652007157648844879194951797180758358881126678450912902918475960454251343557318899820230745714304864070765470927005558583280827024012421456818485308542880082985269653544503854374251520266571222103871623396652014782518578507968009371990026832612097787061454272161059540975795039352248531976608698400892843354995482133909286291822272082692319606847788056827034402740502300581688126810066040167544369565488303783940536847196084756559658222981825433030304212191542333660061121010632565676320730640127588186761111599039070002597461093951156636168770123718466535625558645261938378255208754972664222247774838128830110006867625274919487986305720428122709676999698622048848533870580283947183503889208564338620472250743313069381777574291148402294123159194690057942775368296819680929364406810901547460943166005692146646127692402698372371794927339780965899867831620218884941177020063898331785761423059854617570366315150660241562834268781908509800681093748338359189563057954471661976982788324131420253529680452078418416153583294318423178647292989021299214762355105225753854276496704052487953629294217650515639379953997747874624142004055548375719234521046622437654879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fca93920f5ccb01700d98faf0b9609bf55a8c5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ir.barco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018755b8e10500000403004730450220141fb1c42e7294ddefaa48ab441cf05cde24745a98f95e3ad884a440d1031d88022100acfd71ea770028791d5c6b185d978e41a20a292fb7bc20db31e994f5802dba860076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018755b8e14300000403004730450221008c9218610ec88a6ee03bbf80f75d8da2ea26668efc0f0a8edd9b5d8e104f321d022054f3d695cf627a86ece85fafdb702ae8a070bfe07913ef34b2285345692c69bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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