Issued by Let's Encrypt Authority X3
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
9 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgISA96X4COe8BS5Y8R22MhTYkWdMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDYyMjMwMjRaFw0y MDA1MDYyMjMwMjRaMBQxEjAQBgNVBAMTCWJhYm9iYS5ubDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMeVcfsZuUS1gOyqmulFZe6Tze04W8rWEWc2NJoo o9+l7LAi05CY+DupyM/eqfPMl3NJUpR0IwtNl0W/UZS9hEUXeP8eUCHOrf7C86C5 KF7hZsKA/ZMDmIb9bMnlvZSxEmGYTJaCOnMJ2+NmnT4s5ayJEF6ghtE9qU79WHxD Q185yY/073Fzj2DDZ9Hy0+HHWDRAGOWHi3ljawircyyXBM+kCxwqDDTNwaMni+Ec zgSCE/OYjMaJMoC2H40I6hye4CQ3qo6NcbW6SVo8a9gxE1fJjCtVR+r1t22192PC wIGNVJ7RCfdBMKry0PGjP+fVbmzwg8/vhhhIYCyhNZ+huimHrv9YjPPniI95dgXB aKDod8G7g/3vHhpE5IEm7/uGBsrGj2o8JIf8KWnIuUTs1EaPRNC/ih5R1IZKcChe kSqyjhP7+kMAqY584xQ9JIV8rq/a0XLGFq41WCbx26VHhIacrBfz3NwlAqx1XFL8 QTKkPdTJKF1/SMerM+Jh68RcMOXf5a64yz/CBazRpigkxQ0BkMC2x9RLrg/VkTPO ff1KWctWX/MpGSguyBDQgAfANm/fkcrl45O5KLwMDXjPfZJGid5uYiCjhqm7zNNO fdf5ciyhHBfFN1519LaFzTmlZcZL+KcWoLKGlr5eT6l0CL6wSUln/tLj+Jeazfwk DEVHAgMBAAGjggKcMIICmDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCQ+CdCrDR7h 6d3cJqlmGeLxqyAKMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wUgYDVR0RBEswSYIJYmFib2JhLm5sgg5tYWlsLmJhYm9i YS5ubIINcG9wLmJhYm9iYS5ubIIOc210cC5iYWJvYmEubmyCDXd3dy5iYWJvYmEu bmwwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXAc 1xuYAAAEAwBHMEUCIBhfjxyb7E8qTJWylQjwfY8CkVKKTN4ILXDkneKp9u2FAiEA 8jAMEGYuA10lFhlZCKCj92GJCSU6//wZ0pbzjZVwp/8AdgAHt1wb5X1o//Gwxh0j Fce65ld8V5S3au68YToaadOiHAAAAXAc1xutAAAEAwBHMEUCIAQ6uzGpOPIYpzvz dM7D/YG1fjaTok9+BL6rubW0HuGIAiEAnF3ffBC8430qXO/skfUQYNf91ACz7ZkG YAESuc1plf4wDQYJKoZIhvcNAQELBQADggEBAGc0pJ+atSsRsZxzwcgq5X1tv5PX O/SNQL7YxlN/pLkluSDqwr/0NOj07g3Mi7KY7hPQut5UkGOD7HATGFw7Lgbf9iBd JNZ/upHCOxjFOg5KO6D5hqvoRJ2r2n2UzZ5/5NiBTsAPDRyeTVaJNQ2e2FrsIRh+ 2M9FlY46LmutpmqZXPw2neZr6FUkhuNK6DgdYzx/ASXEt5XC2adnJbZ1RjSzJcTi Dnj2hBx5fSUaO5waFHLLCdPrpOOPU63cd8Uyv9mO8JS7i6QgvMnRjaOEFTgYg0qZ YUBPmJvg3j2YBr9BsMgbLZbigfbEBRONBx28aB509pDpFD9wFoCs0ESV4Q8= -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx5Vx+xm5RLWA7Kqa6UVl 7pPN7ThbytYRZzY0miij36XssCLTkJj4O6nIz96p88yXc0lSlHQjC02XRb9RlL2E RRd4/x5QIc6t/sLzoLkoXuFmwoD9kwOYhv1syeW9lLESYZhMloI6cwnb42adPizl rIkQXqCG0T2pTv1YfENDXznJj/TvcXOPYMNn0fLT4cdYNEAY5YeLeWNrCKtzLJcE z6QLHCoMNM3BoyeL4RzOBIIT85iMxokygLYfjQjqHJ7gJDeqjo1xtbpJWjxr2DET V8mMK1VH6vW3bbX3Y8LAgY1UntEJ90EwqvLQ8aM/59VubPCDz++GGEhgLKE1n6G6 KYeu/1iM8+eIj3l2BcFooOh3wbuD/e8eGkTkgSbv+4YGysaPajwkh/wpaci5ROzU Ro9E0L+KHlHUhkpwKF6RKrKOE/v6QwCpjnzjFD0khXyur9rRcsYWrjVYJvHbpUeE hpysF/Pc3CUCrHVcUvxBMqQ91MkoXX9Ix6sz4mHrxFww5d/lrrjLP8IFrNGmKCTF DQGQwLbH1EuuD9WRM859/UpZy1Zf8ykZKC7IENCAB8A2b9+RyuXjk7kovAwNeM99 kkaJ3m5iIKOGqbvM00591/lyLKEcF8U3XnX0toXNOaVlxkv4pxagsoaWvl5PqXQI vrBJSWf+0uP4l5rN/CQMRUcCAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337081420476065600188352056076756987299229 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 22:30:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 22:30:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'baboba.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814230745229899883237853585664072702498826127973945313975157821464539410238609741832287379519170454692348153712193492950098335720963488994288356731497805174775887603552332254227756591749053724653099714897469970494001648854815306476553841811147605134466078455018160997424712035429917326387921786307813451200077539712958866830949361256952692267332265804439156637536230438167562958830268879761330340918761858038926563202169633851115556849646140148179318507959566009936136739442893795978277718174783714573498382082322523809463842618413049299315799440761735154791612685180261562212990629019742275156361154806133902809952060187180449954103607430929627221231864533677471962830641356084573688959067683645886918413420671392825179553578091007533644609436508628196812930612041252196273206549255420219868225767408222712060340263175131223765357198584717270957592123028834419034240748746394284306316977574151199163121037260639074247633739228682089324333294028415955460872143246136428859104183106478202979974031025764654354873148013604343708708619540739924824956439054945240261506736963610189310670105946182995759324071876815258845982207298614933325858985007900889133081641157896558453765725142070129171230766741872573624554297650308686655475434823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 243e09d0ab0d1ee1e9dddc26a96619e2f1ab200a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.baboba.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baboba.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701cd71b9800000403004730450220185f8f1c9bec4f2a4c95b29508f07d8f0291528a4cde082d70e49de2a9f6ed85022100f2300c10662e035d2516195908a0a3f7618909253afffc19d296f38d9570a7ff00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701cd71bad00000403004730450220043abb31a938f218a73bf374cec3fd81b57e3693a24f7e04beabb9b5b41ee1880221009c5ddf7c10bce37d2a5cefec91f51060d7fdd400b3ed9906600112b9cd6995fe . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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