sanctus-ieper.be

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:41:5e:27:03:51:58:c5:ef:c0:e3:b7:8b:ac:a8:20:69 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanctus-ieper.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:41:5e:27:03:51:58:c5:ef:c0:e3:b7:8b:ac:a8:20:69
Serial Number (int): 405363187689745266426369449475088832798825
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8a:fd:6e:37:22:c4:c0:d8:20:e4:b2:0a:bb:d5:29:d4:02:5f:47:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:f0:3e:5b:b7:d7:29:31:14:34:80:b4:cf:b0:79:6e:6b:db:78:1d
Fingerprint (sha256): 7a:0d:db:0d:c5:1c:1f:1f:32:47:09:a0:71:2f:bd:0a:12:86:c6:5e:f6:d8:ab:84:02:9b:74:5f:eb:a8:9f:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sanctus-ieper.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanctus-ieper.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanctus-ieper.be
www.sanctus-ieper.be

Other certificates including the domain name sanctus-ieper.be

(limited to 100 certificates)
www.sanctus-ieper.be
sanctus-ieper.be
www.sanctus-ieper.be
www.sanctus-ieper.be
www.sanctus-ieper.be
www.sanctus-ieper.be
www.sanctus-ieper.be
sanctus-ieper.be
sanctus-ieper.be
www.sanctus-ieper.be
sanctus-ieper.be
www.sanctus-ieper.be
sanctus-ieper.be
www.sanctus-ieper.be
www.sanctus-ieper.be
www.sanctus-ieper.be
sanctus-ieper.be
sanctus-ieper.be

Certificate

The complete raw certificate details for sanctus-ieper.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405363187689745266426369449475088832798825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 04:47:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 04:47:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanctus-ieper.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692715301792377800318756031004467581193425813425785467675673295129136362733316904468632361826474909289433459446362852954150238915463512415799037068897125347533218441663128926264443417918165973723094000520238732897442230613541918847511568589375684161111022354637763679404566140305425666301272062288209603537559392245864796990933318487144942033756229610419140270185168805968051743389747161560080727024549203801226891943276541462939409490991970784527149262025583037992474092109163618389681293969610390201770872896996715370190659816740576553981938705739325245349867319049024017230368337553588452232069413545349617631342848747619657850438291447225143295368953733845536786015085228018256757802280703051463227794591755432499458126864486892144823017489526235175977085894079426842369978294658733460068273934904713835052161641617335034470001553880917000561023547178707676073049135806897550388498947888695954037619720560756562001684356542893440154234786329997250126184802861478749845277904081735837604683087595237660070876778171217612339903786651714928496693159572155042603439111278809402344041087829972735055610039494757325560481765761305853261022666276907678521459426859909248072255627439189049763685987051637662088576833413468217621221171997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8afd6e3722c4c0d820e4b20abbd529d4025f473f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanctus-ieper.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanctus-ieper.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a546eaa9300000403004730450221009ebb7335632c358a2273fbd834f5d94fa9cb8c445c4a1f44bb398cb6b24a3d03022002b8f4e34cc2f5a7e814c3898e14b01b3ef320b3399ae683b9b0641fce4cd4cb007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a546eaa9c0000040300463044022014e1ce76fa7bb4a7e003a6d1ca5680b97ae038e1e399bf41e0e9d44849fc4927022076878410bc07db8c9f77832ece36e7151a945bb645ab2e22ab7a2efc667699ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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