werken-glorieux.be
Issued by R3
About this certificate
This digital certificate with serial number 03:ac:b2:16:51:32:2b:69:18:aa:fc:85:e0:be:52:a4:64:e3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=werken-glorieux.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ac:b2:16:51:32:2b:69:18:aa:fc:85:e0:be:52:a4:64:e3Serial Number (int): 320102143366312779377779673185313928537315
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bd:33:b4:bd:2a:14:9d:41:34:8f:86:ed:e0:2a:d8:69:e2:ec:91:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 60:10:61:14:85:0d:aa:b1:52:07:cc:2a:8b:f4:71:85:eb:ca:8b:cd
Fingerprint (sha256): 87:50:47:50:dc:44:69:c8:8f:d3:f4:6e:22:c4:17:0b:8b:d9:8a:4d:b6:18:f8:80:b5:77:54:48:9d:73:90:1e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate werken-glorieux.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for werken-glorieux.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
werken-glorieux.be
www.werken-glorieux.be
www.werken-glorieux.be
Other certificates including the domain name werken-glorieux.be
(limited to 100 certificates)
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
csg.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
owa.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
csg.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
csg.werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
csg.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
owa.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
exchange.werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
werken-glorieux.be
csg.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
csg.werken-glorieux.be
exchange.werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
werken-glorieux.be
*.werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
citrix.werken-glorieux.be
werken-glorieux.be
Certificate
The complete raw certificate details for werken-glorieux.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgISA6yyFlEyK2kYqvyF4L5SpGTjMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MTYwMzI2MTZaFw0yMzEwMTQwMzI2MTVaMB0xGzAZBgNVBAMT Endlcmtlbi1nbG9yaWV1eC5iZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAJ+w6g/01WgMajyAT4yPRdyp5lBbe5nNOuwPrqDdwGRUO/64mIbYHgFnQNIK lWAFRKdX1iW9r4q3cBxSL7X9Z4Q8EtezZXZGD1g5o7s+kuiOzI2oBp0l1ZPx1tE6 wrYWfgu+JGcYyQVivUboSNuiwih6wNyNtWOx9mU/DLENmZRI0Hvu3EoJ674/w0yC hbL9zNsTmOl/XgpG/5TbG9Pe7MVMKdx+hxLq12m+YA3tJdntcSY5hGAW2MKuoNmF Dlf0Guo8r0ASChdF9nxTIdvD1PwVtOvjTVYBuxFfYlxQeeQ5xPkDUkmd9MeWjEv8 P7SlKxkkkyd0ojXegq2kCOqG4WL0/NYwhXvARG7oETLY/QIIXMdJN/R0d8Pv/7gt GQpQBKIXG9rht+6y0zBAe5jWWeOM0ZczDZywu+iy4/GfKiYaT5NYW7lWdlP21kCS FJ++hEQnmBOJW2ZqvUCdWg7HM8aK0/CIFIAGvKK/vuPg7WeQ9o2TvTvp2vPI4myI xW2RBnuXsqnZLLQcWqpee/DhJeWnpOOdRApguYKuFVez4zMRf25u2NT9OGIi+t6c WQjjlaDruGespAFHHtyClMXmztpY+u5MQSHCTMy8TX6F9HjVcqJJD8Ep/hgXr6kP KBu0pDyie99VEgo4y7Q6Dh6w76u7GJXC0qUp0JwHzrijbRvdAgMBAAGjggItMIIC KTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFL0ztL0qFJ1BNI+G7eAq2Gni7JFeMB8G A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo dHRwOi8vcjMuaS5sZW5jci5vcmcvMDUGA1UdEQQuMCyCEndlcmtlbi1nbG9yaWV1 eC5iZYIWd3d3Lndlcmtlbi1nbG9yaWV1eC5iZTATBgNVHSAEDDAKMAgGBmeBDAEC ATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ALc++yTfnE26dfI5xbpY9Gxd/ELP ep81xJ4dCYEl7bSZAAABiVzy/zoAAAQDAEgwRgIhAMMr613Hes6kB4oa6QqLMFqm EHDGKHHKiUqaeSNIJpSuAiEAjaHalGUQsLiYcoomUix1WB19/m2tMqzsAgVItmzQ 93QAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYlc8v9AAAAE AwBHMEUCIEwg+pDMfEVUUzwLjlVwhpz2wg53JxYlw0iBKdycuIsnAiEA29Ql3h1J rNVhLjQBtgnVHv7Vsp89QFd0GKyKJsvJSJ8wDQYJKoZIhvcNAQELBQADggEBAC+J DzjrNbpqQNr8eGbOXew+tHA+FIs/vSESGTN4w+xuPp/oG6x3mAGZ5WSmHyMeN9Co QyAaG0vDTVYGASx14713mSpiEhYhpN/mNacYcLeiKuQP8CXyXd+XYiM3kuT3DKkQ u51elS7LFn8/iO9zdNe3ut/q4gQqTugsctNtXE2KGTsNfGceM4+Spw8j1eB2Y7Do XDzli9eJMu/zSn7Uwm9+E5hyc28SS1RwmBKyDLC7es5ZyBnGk9ntFSwarXHVD3Kk oYbQrZZ9zgv1c/Coj6zPceVhbSe5za4DsEU2RaWu2WRG3kPCuwxTxajXpEMf6itm d933BuLDOPuIVvbTrSg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAn7DqD/TVaAxqPIBPjI9F 3KnmUFt7mc067A+uoN3AZFQ7/riYhtgeAWdA0gqVYAVEp1fWJb2virdwHFIvtf1n hDwS17NldkYPWDmjuz6S6I7MjagGnSXVk/HW0TrCthZ+C74kZxjJBWK9RuhI26LC KHrA3I21Y7H2ZT8MsQ2ZlEjQe+7cSgnrvj/DTIKFsv3M2xOY6X9eCkb/lNsb097s xUwp3H6HEurXab5gDe0l2e1xJjmEYBbYwq6g2YUOV/Qa6jyvQBIKF0X2fFMh28PU /BW06+NNVgG7EV9iXFB55DnE+QNSSZ30x5aMS/w/tKUrGSSTJ3SiNd6CraQI6obh YvT81jCFe8BEbugRMtj9Aghcx0k39HR3w+//uC0ZClAEohcb2uG37rLTMEB7mNZZ 44zRlzMNnLC76LLj8Z8qJhpPk1hbuVZ2U/bWQJIUn76ERCeYE4lbZmq9QJ1aDscz xorT8IgUgAa8or++4+DtZ5D2jZO9O+na88jibIjFbZEGe5eyqdkstBxaql578OEl 5aek451ECmC5gq4VV7PjMxF/bm7Y1P04YiL63pxZCOOVoOu4Z6ykAUce3IKUxebO 2lj67kxBIcJMzLxNfoX0eNVyokkPwSn+GBevqQ8oG7SkPKJ731USCjjLtDoOHrDv q7sYlcLSpSnQnAfOuKNtG90CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320102143366312779377779673185313928537315 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 03:26:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 03:26:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'werken-glorieux.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651482732592227682936476269480310261264965668099036241098243794487176443117070753806742517865808993205293068788316449757901993458543868537724526725886960489838054197459890811264762365251002436523519855280912982023247983296550127817631661670592441219647089935389126038620799325209834416279317975665934134271788118636299935481019444002088116851357014604889441161856747923715299358647763666731668160471239521258640728354631641499629636853921299276042520237272183268018376276214350995956816767813110822653449946795591492213366478501865624988767603130111910064761917584965325394534387746718069887518319427272902485757020650718057051084307413712220722607362131727684234419598765209120200881086837380431310195822988621143421720246329346413715473460914082917115966690957653913074919933434420888473005999661676071075015673003133915190624880107673480816206870762971552944626501721421932478609420056235728635626403053149110924982803425926815398233115546326267643437336570940743942251170252541383668850586006436609843770012189979128052222971068672395542416268988615468997344366075489339071082070808413943236558279259439096962271846889593815842846693196865942580686509161300809934265616253953051000210686543365981765059510318837711987072427695069 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bd33b4bd2a149d41348f86ede02ad869e2ec915e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werken-glorieux.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werken-glorieux.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895cf2ff3a0000040300483046022100c32beb5dc77acea4078a1ae90a8b305aa61070c62871ca894a9a7923482694ae0221008da1da946510b0b898728a26522c75581d7dfe6dad32acec020548b66cd0f7740076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001895cf2ff40000004030047304502204c20fa90cc7c4554533c0b8e5570869cf6c20e77271625c3488129dc9cb88b27022100dbd425de1d49acd5612e3401b609d51efed5b29f3d40577418ac8a26cbc9489f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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