*.equino.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5c:6c:98:71:59:c8:c7:9f:29:ab:6d:c3:1f:bc:82:d0:6d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.equino.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:6c:98:71:59:c8:c7:9f:29:ab:6d:c3:1f:bc:82:d0:6d
Serial Number (int): 292787183703700076792810906493278211985517
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:ad:a1:f9:33:5d:22:20:8f:58:6b:8b:43:5f:be:63:4c:3e:dd:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:66:97:45:24:28:45:f2:cd:8d:3b:65:2f:be:77:d4:c1:bc:e4:5b
Fingerprint (sha256): a0:70:39:d8:40:49:27:4f:3a:9b:7e:9b:35:c8:35:05:a6:9f:79:2f:82:67:7b:1f:b5:9f:16:4e:4c:3b:0b:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.equino.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.equino.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.equino.be
equino.be

Other certificates including the domain name equino.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.equino.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA1xsmHFZyMefKattwx+8gtBtMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDkyMTE1NDZaFw0x
OTExMDcyMTE1NDZaMBYxFDASBgNVBAMMCyouZXF1aW5vLmJlMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAwmMxDBCkP2DL+YNkuykAz3VQ88m+XPyFgWIB
pRiEHL11vNTz6gQFDC5RK7izXXIDRh0f1/9T0TBI/Vv2vQR7euQZNPKUzRQ1ThUl
kwaMb/vnMhIyF3xmTqu/VEauqs+dg0jUYIiBLwBPcL/loh3GyLw+gk1JKiuDgESy
Ycz/o3VUUnWwjXNlc/QdWFbofCSAvFZ5raaj2tw5jDND5ygesCUrCrgaj1kWXTkS
D0RBUqNO9UV6u8GOGLusEKCMsno1IIb2n9YSn+RCdLfIQ4i+y/kaho68rNd+E/EL
sFpy+Fcw52KNLK6WM2KOKsjUNaIG2XMmqWv/XkHeYOx7TJl62J1KE25kfjV/6TIT
vL+kxiZkvw0+uMlPIriNCvv/xecaNO6JUPMaBiE30JhAQZnmb6Dm4Th7hUpBZzG8
nn3yV5mU+KBsKdxqz+d++rwvrviP4JYiDcpWpBMxgBAYE7feXXIjMYwt0stobIFs
n4QOYOqkJXCFd1H5r2nkhI1Z4rT/VPIfnhpRytwDP5rsexm/TuGNeZXl5I6c6kMJ
HBnHC33MKfoourhGqKZNqkZkw09TNkXKPnQA+6lvTDdOdcMsbxglUD8ptlxO2jCk
RZE8IRExHLcjm+pAMKb3ju7VNhTZEdd1cbrpXrKDnrt7L1JfovkjngfjIttTdWXU
VdAezX0CAwEAAaOCAmswggJnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUjK2h+TNd
IiCPWGuLQ1++Y0w+3a4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYggsqLmVxdWluby5iZYIJZXF1aW5v
LmJlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFs
eHO7HgAABAMARzBFAiEAtaLxnMy8ZrvtKzEkQCrDRfC6S9Y7ATXqOuh35W5MHFcC
IGLr6swV5Sdfgaa88rLXOAUnEpPYx19Gi8zXcqvtztm5AHYAY/Lbzeg7zCzPC3KE
J1drM6SNYXePvXWmOLHHaFRL2I0AAAFseHO66gAABAMARzBFAiA3BNbrcejc2oX1
dp3x/SO9JYpr0thk/aWu76JTdkxEPgIhAPb6V3lrL4uFpQLbL8tfzwJ145wFhPkR
zmVHv9fgurQ8MA0GCSqGSIb3DQEBCwUAA4IBAQCPKHG3eTAAvCdMX6sDMSiqOvR/
r2d+1aiR9MqlwanLWnPAJEiznjJwhwvKxjzjmefCOnus7AuGwkMOAHwfJPJQNyZk
SDPNDXsu44icKVuAowE+YXlWwkOTR7JBSfB5J9pyeP6mzJqfkvT99fy7q1o/y3is
Wpfl5rOwT5IZ1QCxsoifeRsLyLrPmUAcMbj2W2FJ4EG9XmN6W2clumYZLL101NCa
ykgTVaCcLgWRFynPQOQ/mZGhq6JHk/d8qVytr8lvSyqY4ai9rvAHIhpJmI0I45lg
O2kHkIIxpv26Of/worWOecIkiyQYJySYaUnSdfLvifsUQ6UrZ2wuWN7gTWuy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292787183703700076792810906493278211985517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 21:15:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 21:15:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.equino.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793031677255116319260474140233844334603529936340910920926718160268408026293714992604492114521147825955331084364950168478618641902201453949565199292058247189641138921599661387580265723232247656473231703526821088944235985022991074097036045585047982321587151812470993768572275892431432475155880105717307493951626025374177728331147316601107105965936359996174219716997663138481508294969882282121460459286724348418118611139655168354953586307660729933508746718705154719587838881200709679697078574663917119387857370856180944515221541938455949404926884137278385381294682547513864121777086488942641453359047697300601806923110355102963455984181020444283438927862806913653764021772108520788084411602174585196223109335090513480636332210594477192224939582635520015310413412476104427690838785262724632684778289662490594349064838185236225916693521882602312659714162410415167349615374607339468567550082059661899317255462364446975125297659519349559044999322435670651224814129036837489094921617238576461647232010643464703213935564464821754330072996131361757870406205194884629094164810614862348949183302546134216561156385772125879251014408334269922475157828715096310819628283300206201000770865067354553411804658774799329810569091706216287465391934852477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cada1f9335d22208f586b8b435fbe634c3eddae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equino.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c7873bb1e0000040300473045022100b5a2f19cccbc66bbed2b3124402ac345f0ba4bd63b0135ea3ae877e56e4c1c57022062ebeacc15e5275f81a6bcf2b2d73805271293d8c75f468bccd772abedced9b900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c7873baea000004030047304502203704d6eb71e8dcda85f5769df1fd23bd258a6bd2d864fda5aeefa253764c443e022100f6fa57796b2f8b85a502db2fcb5fcf0275e39c0584f911ce6547bfd7e0bab43c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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