callensvyncke.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ab:4b:7f:d5:79:5f:47:04:6e:39:27:87:91:83:1e:ea:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=callensvyncke.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:4b:7f:d5:79:5f:47:04:6e:39:27:87:91:83:1e:ea:d8
Serial Number (int): 319625498389915459978306097039798712593112
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:bd:33:31:93:3b:e0:09:5e:9e:2e:05:e5:22:84:09:2a:af:57:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:1b:66:63:c3:03:12:30:4f:c5:f5:f3:93:d4:a1:25:49:88:c2:59
Fingerprint (sha256): 9e:05:1f:02:c1:f4:24:0a:fa:42:c4:d0:22:14:da:47:1e:ab:8c:2d:1d:ef:e7:4f:a9:5b:6b:3c:fa:8f:d2:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate callensvyncke.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for callensvyncke.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

callensvyncke.com
www.callensvyncke.com

Other certificates including the domain name callensvyncke.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for callensvyncke.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319625498389915459978306097039798712593112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 05:30:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 05:30:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'callensvyncke.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 596080838136915264624771340894620571934364188307239914914954186450026867632040648417200630853357230199294512217241438927233731525591981502732931176125186365869798906528650248395496291413336326309377320609199265797403921766521517412342752815839481667939231008515421893210525289233452235848614213959625305510008737295286516055402781293724044145344257930635591022042492828099964162886528217306577831474265038184713138052091763177028963099033138068553045316894336311282597452346616749768836298134217893704113221505831157946837437128519776491509225545301736157305094494047718890068505662560259779515522579799324783814120216013507729881803731723649150816812007618497449659658656196472797805620255181646647440802963588105442704952969632426473227624196724222397079839968157695951337531893383628010043373263799498796044108661840379111338079939291747204272901629298754232658122482694085052202845068881633702297933614501954312208347348044859693403418859017381076901434299324340222030168568440543877812145730724302943353754410003346136572471516570827589040792565761878119583089977197034438797508927590599941011500700384876287275257193996343623156503744373295975155797849669957783964423144542263852865227392756637849774687792474059665581472955407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7bd3331933be0095e9e2e05e52284092aaf5704
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callensvyncke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callensvyncke.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b56145b1300000403004730450221009509cd3e07f01f182e567360ca0a67334f7dcc62bdbe9b8f0b3a1241dbbd6b9c022006253d4bb150e3ed2e6920b16d852a64d5febf7b9beb8f8af273eed4bf10bb290075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b56145b0a0000040300463044022072faca1a7938172917ae1b6f19c520f2adc5f36ac41a2b4ecc4cec2e9ed45dc202202f5a9d8504f5e238faf65188d3c629341b215913a948deb105a7d010b6981653
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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