immatrix.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:73:ff:34:3f:fc:e9:46:f0:ff:c0:6d:1f:f4:98:35:1f:e6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=immatrix.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:ff:34:3f:fc:e9:46:f0:ff:c0:6d:1f:f4:98:35:1f:e6
Serial Number (int): 387920840359140204997242169859743526756326
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:2d:cd:02:d1:ec:fb:60:58:fb:e9:5c:85:4d:40:e1:db:fc:75:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:ba:4f:22:ff:7d:ce:dd:51:39:1b:66:a6:81:10:b8:fe:c5:43:29
Fingerprint (sha256): 85:56:bb:a2:2d:c7:be:1e:69:c0:47:5f:7a:a5:4a:45:d8:31:df:03:9f:e3:e6:59:44:69:7a:86:a5:ad:45:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate immatrix.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for immatrix.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

immatrix.be
www.immatrix.be

Other certificates including the domain name immatrix.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for immatrix.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387920840359140204997242169859743526756326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 06:03:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 06:03:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immatrix.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906046231536074492612906254566073706538809622315542967540013015120711332262782981695757026293967000683591627854544308099755562439472212648780865812277615740215915249669138549756159296437154282934878653968034038169651260830919379675045266091644083456235898670873669672575590860896279954530467675268331926496869239559803172667295102228434561108261199034301258918103918506466590875925202563622949171226786366835044229582291554537366717557768797918988512443203104958716196523282288276008719860138850504278533345978386369645633861085587560597791251893850483418861207755290186558080848028270504140121397149958999321356375168322629799078916081507145081770161831295229582593658253981786251451259095972136804843098124447508002415588779960718678604833243133872487313592629938008736083968565950316844916291469833304547451543160096121195391590479768554815383671507636967068522956315931977212752034235686137876489869808859370494282302843271004498288908849511586099169225901767546426453155990846254278806876381272999258875970089350505703631827007050585294908316663054866999197214390949347943143709758402799019375752206284755857143939209839387619502698298930842429758353666806961780900113038874079589129781165899373284436406096979584687855915082331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f2dcd02d1ecfb6058fbe95c854d40e1dbfc75d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immatrix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immatrix.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017162e67707000004030047304502204f22a53f49eb8b0cf21dc2222cdbe1ad7b24752666bdc32e1966292449afc845022100f3bafa8ae4e263afe1e035711a12efaa61858714590db228c72497c047c8dbdb00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017162e6773b00000403004630440220581b558b9305264deda48a144ebe0eb019d4d69459dded76bad888d92a8cbe2c02200c32bbdf703968ad1a5bf5d2b81691169589a7b8d2466fb9fdbe5df8766b4b8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00336319b0174b71fc87134e437299eba2bbf028916564752c4d86216cdc77b124d9e7f11992bf2ea8aa215317b38d887904b75f50e701fa1f7d0be29b48c37668a3061fcd236c35fce355ddd250f9c345fe14dc308e53bd0db9cbf7737243d07f18e81defa54651f3ceb24ed54d6d6150ea263266dfa558f0c87ecd9c2c15fa894439d878d215bb11ec1daa597fc4950a116957fd1f5fc77ebc6dd430e376a307532f009f88683e518744d5067fb7b4752a218dd66eb099805e54ea58dfa76bea868ae3f763308a43447b6fd75f7008dc3df4ff3876944f846aced4ff7ac90ddbf488f328c78f7fa4e8b574cd4fefae1b606dfee7421b95497ee95e8d55b90526