www.dankunst.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e2:f8:1d:e1:76:0c:75:3d:d3:94:7c:63:5f:ab:b3:59:75 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dankunst.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e2:f8:1d:e1:76:0c:75:3d:d3:94:7c:63:5f:ab:b3:59:75
Serial Number (int): 338570476411871328883790837589806891096437
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:54:3d:dd:a7:c6:68:cb:65:18:56:bf:74:e4:2d:ab:fd:0e:e2:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:c9:dc:b8:96:5f:31:7a:81:0e:14:c1:3f:c0:8b:e4:8a:cf:81:ab
Fingerprint (sha256): d7:35:ee:8b:ff:e0:90:56:35:b1:20:a8:c9:57:05:dc:3b:f5:ab:e4:a1:c6:6e:b8:ec:2f:72:61:78:e9:f9:5b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dankunst.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dankunst.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dankunst.be
www.dankunst.be

Other certificates including the domain name dankunst.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.dankunst.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu2pol/iRlMXXfpD632Jj
R5+3dhmV2+nWtv0uH/S/kF1k5YxeAzYSnpAW3WdSlDcsGx5jfIdOSASVRjjiFBnH
HnGobAfEUWEooDcv/waD6UuagCywvnV9uwgw/Wd0DIJMFAcarH8tV3zW4+CypmBw
G2BUbIuOZvq33REMK7Es8w28BkHQ9slc+kIJZQHklfF/GJAiCza7p8mx8opCCXPe
t8rICIplMkbVxZkwLN8GL8g2mzQHimHFFVjmvuEWE2+NZmdO4z0uJb6cwS9qaPg8
wO+dRcDk+vfdpp+Aidbk2BiKJa24ZiIxCuAg7YCpjfNvpOPrN/tWNZ7bQkWX0Q6L
G3wd0+kkzB2oNW/5QBi9VP8u+T6ayiDD8bVTFd6xu0S8ChBLEnYMLnm+fVbTnVyn
6XjHXmA5aRUr2fPwnp4i6cwa58WpSy1UX0nI2BQl0Iu0dCJ2qti0xpotaBzz75He
8dF7c595GUt7L7Gucav5eyg0t1Gmxu3oFO14f2p51HYhdt2n6fH5TsXiKIwtkuIs
OO/q0di6V0E/8WCNYsin+KnOxcrADcgKWURHlZqyvifoPdslyT1H+J2WiNZTGNcr
/Nhbqmu1Rb4WsIOIbV2US6hFdL+KxAScU7sGfST/zf1SagqTTAi4Rhpt4sRsnvkt
TfKe/KCCUH89aUTgJ/DBBbECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338570476411871328883790837589806891096437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 05:56:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 05:56:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dankunst.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764589179340352895597110665905776715706412655151881366564296091803276702920837026964127524172188747043246062618290674258464323785634916649034155574681769560049932976295986258297575126734034550633098664379434510758869245231332200362847267491209784270707282351566596286950953747077966924851999611586002954448953207549866101597874642004980982181794939926046758851620715319284808034989118572452248586759524932358375367452343470123000990459980886063247699014826270903150670238749110780123703289941320189407146627493463727227943307906204307255099527707002278256934731668613584454920882733000695464484563696871310235629183806710313963390990689556661330839711082766330237645690347586189909774907383584456215756907834603065509274495448944498213310777051826016841156333816371799923417416294958882696267059233280770514229158171422314888376944051814877009742597360243170034922860242403740703680864457358954444836173723362142609315079005271108369279880601071884172798301935911684518441553311964228420288143510357078036383477549870219226010220647789068479956560901614655895979380213604836252259551460114336968208112989969907490708336652424586928425768570473873421757082341807683461504933196454933674522455476148515662857151870252229020225303020977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c543ddda7c668cb651856bf74e42dabfd0ee250
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dankunst.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dankunst.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016de2cdaf260000040300463044022069f70cd89fd7fec5f9ed9c0ced2450681917d4efc9a3367c6231e48b17971d7c022005171292d3c6f26453d119e8a68c92f86615aa8cdb65d39f8e17f73bf8feb851007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de2cdaf140000040300483046022100e146ff78115186abf0548e9dc29b9d6fdac73b22b845395a0dc5d5e62e22a767022100fabe15ba1aa9d5a76ce051ce865f265e339bbb47e19fdb2222d9228e41582670
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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