*.higt.be
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4e:7b:92:97:54:59:98:83:8e:f9:18:a6:e3:f2:4a:8d:a5 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.higt.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4e:7b:92:97:54:59:98:83:8e:f9:18:a6:e3:f2:4a:8d:a5Serial Number (int): 288043138603263575173682367311001269472677
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f3:d1:1a:b5:8c:d4:bb:e6:a8:d9:9a:ba:a4:09:76:e5:c3:c5:e4:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 37:c2:6c:26:e2:78:a2:99:04:38:fc:a4:56:7e:41:c2:57:79:fb:e7
Fingerprint (sha256): 7f:8a:f7:2e:8c:b4:46:50:11:2a:66:a9:49:64:08:89:0a:35:2b:24:e0:63:a0:12:45:53:d2:82:38:18:3d:cc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate *.higt.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.higt.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.higt.be
higt.be
higt.be
Other certificates including the domain name higt.be
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.higt.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISA057kpdUWZiDjvkYpuPySo2lMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTgxMjMxNDJaFw0x OTA0MTgxMjMxNDJaMBQxEjAQBgNVBAMMCSouaGlndC5iZTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALXuo4vPeg6bsnkPmOaVvRO3vrAca3wROOdKOURR AZiSEklEnp02qSUTTHVf8Z44NICjw7/A7bcSnWb8cCyM0B2xxLj9Uykn0ektLk9t 3cRzAHzg2qH+4VNTa1+p9sdX4OAQqabS1q1MBolEdFaIj/2eBTkzbyP/1/CnvjE0 UQVeaex5JreyKM9srJ1pkL4V2ghjLhKq6pE8OhCifnVwVEsvzqb3Lv6HadxqBpDF d/8TwaQI/P8t9fEkEdsurM99fLQ7SQSJalYDtLXoURIcMat305chFzimOqpZ9m2Z zgoHNxPm8FQ9GqVuLsTn2t/0KrO14B6KqXmRQiIkGDVT5TUCAwEAAaOCAmYwggJi MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU89EatYzUu+ao2Zq6pAl25cPF5DowHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAd BgNVHREEFjAUggkqLmhpZ3QuYmWCB2hpZ3QuYmUwTAYDVR0gBEUwQzAIBgZngQwB AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB0ftqDMa0zEJEh nM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWhhKPqoAAAEAwBGMEQCIBYguQTxIgTD loPqtSkJkn4nP1rN/CLKu2nfcs89zr8vAiA/BK1PkEm8/MZvLWvXwYP++ExkZVjq x2mSJRZLZm6fJgB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAAB aGEo/PgAAAQDAEcwRQIhAJskrMjlx1yMSxv95rotmCha6ipoukR/CF+d6e0sSeyq AiB5T7T0mno/oL4TTHhOu2eFzFVhApZgx8wt5OxCR1mWtDANBgkqhkiG9w0BAQsF AAOCAQEADSSIwhYQcbCExbgX96S0zbHPCXUqQgH+asOeQaERo5VuqBl5iREZfoXO gp7VPT6Kwl/Pokp+W/AIM+X1AY6FRiLj5LwdZoIhaqrPc0yEqEIAoeTrKpQxrbaN sHUUJK9zhu+EWKjpfx4fvH+t0+OrNQVSn6g+HMIA8bLaXEBaeXBAUCXh/P+h9VLq 9rFlklrHmhBtRywXuz0i9av1w9jJejkAgjJTYtt70OfE0BQXTQOIygmJU/3B4Ktv pWccta1qLpwJVa9cFxjn+CsLKE7RHR1D0WutmmoUq9B2nL3oMqCcHX6WOKJsQ7wB OJyYCA2xAUey65LLwciKHEsuFhzyeA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte6ji896DpuyeQ+Y5pW9 E7e+sBxrfBE450o5RFEBmJISSUSenTapJRNMdV/xnjg0gKPDv8DttxKdZvxwLIzQ HbHEuP1TKSfR6S0uT23dxHMAfODaof7hU1NrX6n2x1fg4BCpptLWrUwGiUR0VoiP /Z4FOTNvI//X8Ke+MTRRBV5p7Hkmt7Ioz2ysnWmQvhXaCGMuEqrqkTw6EKJ+dXBU Sy/Opvcu/odp3GoGkMV3/xPBpAj8/y318SQR2y6sz318tDtJBIlqVgO0tehREhwx q3fTlyEXOKY6qln2bZnOCgc3E+bwVD0apW4uxOfa3/Qqs7XgHoqpeZFCIiQYNVPl NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288043138603263575173682367311001269472677 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 12:31:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 12:31:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.higt.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22966810402710782090283071962228404036867035169629251970693506390385921434514197873701752353011008557959419797744648075591060204556671878870616668142197492567239482995105483074208296136146240893937486372737632961614677516928043994073823072103318655828406115630259687601648941465810689515963048780946274725845462280286739869815264348803902535997149601755956827768896440476583312490215135754738572812943683938156982592492748205820478744905289340280476192802090107652807248738025870445545102964027693811786997733355982253078732070097430858468360727784523067592196827985343945983741638805792274833389035313791735912719669 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f3d11ab58cd4bbe6a8d99abaa40976e5c3c5e43a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.higt.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'higt.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001686128faa8000004030046304402201620b904f12204c39683eab52909927e273f5acdfc22cabb69df72cf3dcebf2f02203f04ad4f9049bcfcc66f2d6bd7c183fef84c646558eac7699225164b666e9f26007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001686128fcf800000403004730450221009b24acc8e5c75c8c4b1bfde6ba2d98285aea2a68ba447f085f9de9ed2c49ecaa0220794fb4f49a7a3fa0be134c784ebb6785cc5561029660c7cc2de4ec42475996b4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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