qiyfoundation.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:4a:a9:1d:98:c5:2a:34:13:56:93:72:ea:34:da:f5:7f was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qiyfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:4a:a9:1d:98:c5:2a:34:13:56:93:72:ea:34:da:f5:7f
Serial Number (int): 269943157938454956462725801174266768192895
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:a0:cd:b7:e4:34:91:6e:3d:1a:4d:64:9e:99:46:1d:51:c8:8f:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:87:9b:44:65:63:a4:8d:37:4a:b0:99:03:55:71:65:f1:0d:b0:88
Fingerprint (sha256): 53:c4:ba:98:66:d5:54:4c:81:0b:46:c0:38:19:9b:f4:24:c4:82:f6:87:6a:ec:51:18:71:1c:2d:b9:d9:57:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate qiyfoundation.org

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qiyfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital-self-determination.eu
digital-self-determination.org
digitale-zelfbeschikking.nl
digitalezelfbeschikking.nl
qiy.be
qiy.com
qiy.eu
qiy.fr
qiy.nl
qiy.nu
qiyfoundation.org
www.digital-self-determination.eu
www.digital-self-determination.org
www.digitale-zelfbeschikking.nl
www.digitalezelfbeschikking.nl
www.qiy.be
www.qiy.com
www.qiy.eu
www.qiy.fr
www.qiy.nl
www.qiy.nu
www.qiyfoundation.org

Other certificates including the domain name qiyfoundation.org

(limited to 100 certificates)
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org
www.qiy.nl
qiyfoundation.org
qiyfoundation.org

Certificate

The complete raw certificate details for qiyfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269943157938454956462725801174266768192895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-21 11:02:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-19 11:02:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qiyfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906390967776336062744743413563813294941043911856734058846305064082094679339565572329503624198615773269438462863009828226108047066612462503658468484523746775458794617215626987105637293837839933043908421467026735207583419369371978721623211286838170211423588688690930284613427615511657763041322243074995421857480520129489023398669792236178331456257708219601509730821828269254413863602890094725995677136889029809837139174424616360176346361005958205826684271271930636638632220777214516093102880776633754342104891989331594690348804861815168109412090740073733028426142437823427378822410356266323461959945128775191436811286745662582589086154655652661177797118178832237228970203558272530736010156890040974695272173987199860532365172258411941259347706765972387896921213789420343808256912042991563768012363909348283425204707438116939893748631807957158833012296891781671232592657731030564414852047276563485822809983877525415920618045507735011993225837469101412953630839051594786872749420744810592830030512361319823417750766275142685882139967186292461858306379513916865398056388583894914643706048823897282987634204060043760786910988584082931971952945514007820338302139598342698514154718537938253425059900285332596170347038150260122988895607440851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1a0cdb7e434916e3d1a4d649e99461d51c88ff7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-self-determination.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-self-determination.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitale-zelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalezelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiy.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiyfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-self-determination.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-self-determination.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitale-zelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalezelfbeschikking.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiy.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qiyfoundation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001655c5dcbf20000040300483046022100f463ec78e06dc0dec0fedc52011fdd320b7a8a7d8038f276db9ff612d371f766022100dd54e32f047bffc11b8433278903f9c2948831e39728a253527f4a295703a5f1007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a25000001655c5dcbf300000403004730450220461787b8381564cd6f9ad36d67d6f47f0b7765cc05e99e4c58f1d3b0bba1f8c60221008b149eb33592eeb25a99d566fe520b921b98f32be0365a0cb8514b34917eac03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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