boonsfis.com
Issued by R3
About this certificate
This digital certificate with serial number 04:84:5a:11:28:39:20:2e:97:c9:a5:29:10:17:e1:c1:39:ad was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=boonsfis.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:84:5a:11:28:39:20:2e:97:c9:a5:29:10:17:e1:c1:39:adSerial Number (int): 393486135765094450541370978894167274502573
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 48:50:95:60:22:48:7f:d5:56:c0:c4:53:76:7b:61:e6:59:ef:c6:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 48:f7:32:30:88:a8:e6:18:ed:7a:8b:e8:34:f4:22:89:38:29:53:1d
Fingerprint (sha256): c8:ca:7f:cd:22:d7:2e:c2:20:47:e0:93:1c:1d:90:ed:33:3c:bd:45:d7:74:45:00:96:16:c4:ae:6a:b3:ec:ea
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate boonsfis.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for boonsfis.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
boonsfis.be
boonsfis.com
boonsfis.nl
www.boonsfis.be
www.boonsfis.com
www.boonsfis.nl
boonsfis.com
boonsfis.nl
www.boonsfis.be
www.boonsfis.com
www.boonsfis.nl
Other certificates including the domain name boonsfis.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for boonsfis.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgISBIRaESg5IC6XyaUpEBfhwTmtMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MTIyMTQyMDdaFw0yNDA4MTAyMTQyMDZaMBcxFTATBgNVBAMT DGJvb25zZmlzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMdN E4K1wDzow+Mb79iKV6Hcv6fxZQJpnSxSd5MIvhJs/ow6M2XIrns3cMU6oIM1+n2u wsMJGu5vCb+DvckmDIzu97+7VC090bkiK3kEArOpY4t83GLmI+9m38KHeJFdVv9v r0uq+Sinsar6FDhy1ObYhTb4vmE1U5132oduL02Ultlk9gHWxw0SwT/eWT53yPM9 2B7Cb+Ii4etRd5ifGb9Wo6gl1ZONOy0+vweypaEQpVOEHEtKMNuMFzrtBO8ghhuV tQp2IMJwSesSGjt0WWQsk85S6ERHNA5nrtnFOr3yY0Nd4XrUAurE2zeHivvo5pkd PZ1N38eeUwd+t633L4BAclSKSxbXroYIDV/BKfkuNV8c1xRJRdZB8GKK73+w9Y/S OC7KJa2/tJB+nafQxOrWM7JfE8Ib7l6bXZOCkDfDYuakMrhOJU91Mn0OwgLOVuXV DMXgfmQ85W8US7PCfWmGjqbSfP0/G5X1aOL+2QjcEAsvox/r/qSb7PkB8T1zKEjk CnvAuUnPmQgHQif3IKEPdtuEVWaR1BmUfllUbTMr7W1psotFOn4NAtzXPVhg3a9i u2gMF60gYg/0qTI9+yCBWYIprqiAQVTQLigKnLr+hCIw8mUKIA3NWHad8MGy6FEp Jknk6xFHQX55w3aaNH3vbcbkrPV40Xos9K8TEAp3AgMBAAGjggJdMIICWTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFEhQlWAiSH/VVsDEU3Z7YeZZ78bCMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMGUGA1UdEQReMFyCC2Jvb25zZmlzLmJlggxib29uc2Zp cy5jb22CC2Jvb25zZmlzLm5sgg93d3cuYm9vbnNmaXMuYmWCEHd3dy5ib29uc2Zp cy5jb22CD3d3dy5ib29uc2Zpcy5ubDATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUG CisGAQQB1nkCBAIEgfYEgfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABj274dhoAAAQDAEgwRgIhALRdRhY+15nsJJQOUpP+tcE6g2u6sh0S lSd4q7bAfx++AiEAkk2g33UggU9n6X/FX8phG9grIWLSZg/CEdccM7wPxPAAdgAZ mBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY9u+HabAAAEAwBHMEUC IFT/9tF4k/58Em9LPU9sLJ8rVuzZXbdbfN6x2Z0ds/b1AiEA3PgpW9wwK1C7/s/8 OkgUY0ROYXqjVLPk0STBLgkCsjAwDQYJKoZIhvcNAQELBQADggEBAIw8ubb0yuF/ LmXnyfkPi3dUbSADT9Y7geRmOqbBjlFRCC/9M3n89K2l6dQkUd/dZBQdVGqLvYGf juQXf2N286y2WM9uXg+i3ItXrw32NFRD0V+//pFVwK6HF+v1hsxKqJPymNEPIq3y 1UqMJUDE826Ij4kISUTHR/yQHvyK+v9zI990GMoJGoy96KFy2ttvz0AkN5hErQ3o JN0PkBupfQ7SEAahZ1/d00mofeanE9gGDztqWKXJsWBOT+eTI+OpYA0JUsRf4u+A 74bnbjAJ2JpRuVE6uI9H/asqwS68xfyncCynnHUjel4nTzwy6sU02+/H2ySKKz5k swX8SJIXnpc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx00TgrXAPOjD4xvv2IpX ody/p/FlAmmdLFJ3kwi+Emz+jDozZciuezdwxTqggzX6fa7Cwwka7m8Jv4O9ySYM jO73v7tULT3RuSIreQQCs6lji3zcYuYj72bfwod4kV1W/2+vS6r5KKexqvoUOHLU 5tiFNvi+YTVTnXfah24vTZSW2WT2AdbHDRLBP95ZPnfI8z3YHsJv4iLh61F3mJ8Z v1ajqCXVk407LT6/B7KloRClU4QcS0ow24wXOu0E7yCGG5W1CnYgwnBJ6xIaO3RZ ZCyTzlLoREc0Dmeu2cU6vfJjQ13hetQC6sTbN4eK++jmmR09nU3fx55TB363rfcv gEByVIpLFteuhggNX8Ep+S41XxzXFElF1kHwYorvf7D1j9I4Lsolrb+0kH6dp9DE 6tYzsl8TwhvuXptdk4KQN8Ni5qQyuE4lT3UyfQ7CAs5W5dUMxeB+ZDzlbxRLs8J9 aYaOptJ8/T8blfVo4v7ZCNwQCy+jH+v+pJvs+QHxPXMoSOQKe8C5Sc+ZCAdCJ/cg oQ9224RVZpHUGZR+WVRtMyvtbWmyi0U6fg0C3Nc9WGDdr2K7aAwXrSBiD/SpMj37 IIFZgimuqIBBVNAuKAqcuv6EIjDyZQogDc1Ydp3wwbLoUSkmSeTrEUdBfnnDdpo0 fe9txuSs9XjReiz0rxMQCncCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 393486135765094450541370978894167274502573 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 21:42:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 21:42:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boonsfis.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813077464520661512970651102122052502993636245126908334087937308160338241881881306199041952720957571308272995239356734735977250608430590663889392041173218914994274453422489378157600349023580167027794058274622030957107619017928579661298080807460159260133042677672985331113383470403947775447307250746467624857094170227155707616686743862527822995025630567524775193768422735210259866548138599806325920506822818619952402703900558542373791285590594459155226465103874632580180060205014369643429145464140535491378104140176517323811323882352082751165483493767370978779010816623294847404596806121519152418364248708699065574480110548305742959459593488594766188229210023197141613671351688223818878627363363156574596760073406170181453518190690889400706709823729361829004537101544089687859164446934522753767127590946188841328154939361945762577922220751588155000186585867007870343968256552575885881260868259867082581936726177324483999595717789271828623616719810677052440953934994087213548514863961495858046328959630512427186439994775542818763863456897415068319718900480829182649538330100712494602173099184549539207220032136604942492224648045529375789431902204812853280858999501193470090043930649622648617630891735871374538935035685950420413628549751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4850956022487fd556c0c453767b61e659efc6c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonsfis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonsfis.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6ef8761a0000040300483046022100b45d46163ed799ec24940e5293feb5c13a836bbab21d12952778abb6c07f1fbe022100924da0df7520814f67e97fc55fca611bd82b2162d2660fc211d71c33bc0fc4f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f6ef8769b0000040300473045022054fff6d17893fe7c126f4b3d4f6c2c9f2b56ecd95db75b7cdeb1d99d1db3f6f5022100dcf8295bdc302b50bbfecffc3a481463444e617aa354b3e4d124c12e0902b230 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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