equino.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:33:03:2f:15:40:4c:48:81:0b:0f:e3:20:ac:bf:aa:7a was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=equino.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:33:03:2f:15:40:4c:48:81:0b:0f:e3:20:ac:bf:aa:7a
Serial Number (int): 266508900458727365251633029039350223972986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:ad:b7:39:c6:30:e7:05:8e:25:1c:ce:58:d6:36:39:42:33:cc:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:3c:2d:3a:7a:db:d6:dd:07:0f:b6:4f:2e:f3:fb:b8:74:7b:a4:74
Fingerprint (sha256): cc:8f:80:6b:2f:39:c7:e0:50:bb:18:15:d3:2e:2b:5d:cd:fd:02:56:40:8d:53:96:cb:56:6d:c8:72:c7:ba:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate equino.be

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for equino.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.equino.be
equino.be
www.equino.be

Other certificates including the domain name equino.be

(limited to 100 certificates)
equino.be
app.v1.equino.be
bondhouse.com
v1.equino.be
equino.be
equino.be
equino.be
equino.be
app.v1.equino.be
equino.be
app.v1.equino.be
equino.be
driveme.equino.be
app.v1.equino.be
app.equino.be
equino.be
v1.equino.be
*.equino.be
equino.be
equino.be
dev.equino.be
equino.be
equino.be
*.equino.be
equino.be
*.equino.be
equino.be
equino.be
*.equino.be
www.alphazetta.app
equino.be
driveme.equino.be
*.equino.be
dev.equino.be
equino.be
equino.be
equino.be
*.equino.be
*.equino.be
amrein-und-soehne.ch
v1.equino.be
www.equino.be
app.v1.equino.be
www.noglesnor.dk
equino.be
equino.be
equino.be
equino.be
equino.be
v1.equino.be
www.equino.be
equino.be
dev.equino.be
equino.be
app.v1.equino.be
beta.jobtter.com
equino.be
equino.be
equino.be
app.equino.be
equino.be
equino.be

Certificate

The complete raw certificate details for equino.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266508900458727365251633029039350223972986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 12:25:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 12:25:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'equino.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 601931526114054691328215933619100393287243498359636334733231675340907352646664686221188391963431943137655296251394402981067236228984755610344759752704410151314681376425206203342291083116148549872425709428559699772200608080579192413749195606963659019958546759675820838929122582985431863315230231594152394984735455398703801355994478062144757569033332379753081359388721386908009761733381316168670211113593266830465214419820996391926086506404903601034378888396901144527709421943476684498453267820949368076312863149513596902784655297391922778078830102087392161791986911294049726572305616711881936289329483675820035337530478176469435804651513572019646534033832373346062319711131488302718616532914884971039945083726362475410972156155616894612602323378256456740230153646869672761727511654384935226621960976646622643282729833142195938677091120899824078893762029524676497774720498811095744673263918684744550088158244464413895823833135169797714032222100173601916753667986238544995743239384186666199277306567666968796414678464242223336732244469906405723071863276944338107820758652131325021701920350593640490827822963680511096065680059193149833104859939907043644016906055089950713961766436760134110362896442804696380260029250533175143594849712489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46adb739c630e7058e251cce58d636394233cc5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.equino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equino.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704e2d29a40000040300483046022100a93e5513b5d985033595f1daa96c2e29fbd22e094dd0d0237ffa386698282c87022100adaf621436b1d64f1cc981a3b574ebc4d0b81c03e27011674fd9104e62ae0b93007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704e2d299a000004030047304502201aaf8fffb7e3caf17aadc996f3c3acd8c0309ab390122f92c7903b538428d7d30221009843939071fdfddb54fad6044aa00c02522111f579fee1b4e63260c2fd0037d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003f6b29eb91d5b3a1924a66957170b191d0ba7c2525b186dcc7544bbdd4c78aea47ad4823c64c18ecc2c8df58aa919b18d15e31139b4f5093e3807192b87ec2b9d672c7fe76de353c75c839b5c09ed318d258c4b7890feca3e079d6e0eb09b1b91820733e95e981f4de958fd9cbeceabf19eaa974546f1f4e1d2135c407b044d506624a95d90053f6dc8cf71d5dee12638bcda7c2695db78e853b820e415b044a1bb69e77b71bf89efe97179e514fc3f579198a17a8a4f00fb9786b13898976fb5adb7e93b9c5f8cac59d3372d1f95e69808865883d8a877e8457e69c4664e4167ec525faeea30b0cad8cf43aa74282cd9a8654bfea4791df1da138ece8df185a