www.equino.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:74:7c:af:9c:67:14:0c:56:17:31:ae:ca:bb:74:52:2f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.equino.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:74:7c:af:9c:67:14:0c:56:17:31:ae:ca:bb:74:52:2f
Serial Number (int): 323082804062105285570677322637206600569391
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:f1:9b:b7:f8:74:1d:07:f2:0d:bc:b0:f9:01:c8:64:64:32:4e:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:c3:7c:28:d9:0c:d3:59:4c:bf:fb:e0:46:a1:76:59:d2:ad:a4:61
Fingerprint (sha256): d7:85:91:66:55:7b:d4:d9:57:21:3b:00:d3:e9:6e:12:f5:31:04:fb:aa:9e:f1:70:a0:38:b0:91:fd:a7:61:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.equino.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.equino.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.equino.be

Other certificates including the domain name equino.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.equino.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323082804062105285570677322637206600569391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 22:15:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 22:15:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.equino.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 993817087610061846235870830036186543554847494548224634779843706394813428061089798643563517256448994852433180673871468423599491531749027231423801700164719748462142351055420998490204532486676668000486750528366413694080952668403237517873584315261596390328658818709880315694160041458671593728840776067059754698188517912691508392017130490042547905161658661381673141996848932524255639751606740958353942397118096444802603954590874914546285727592855613701740569907383912516704733587699270762623100405836625182155897352707395518459975034625968752475384623057558100022834203547254832657432662253781793884713855633847415869531203588112036427053212811858347209005235124675020560051366841822369368284058487743312973084538473556191474896127472931339150497227788469490566875548100245842055923198815161177472688831050587243725666007101170650689541263489704813967330459158366297510223493888488744052979329979172063250016168922295768263064296594465092867979725688504720251247212570336286373426552349865428430216012324534235034014526812168493782255347653387018446117803008817583970507732604008409874038682136142453091536814988063097237139565741977723311967752097519783468877145748670000875442856635903172441792345297950675395127535249327187736262647177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09f19bb7f8741d07f20dbcb0f901c86464324eb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equino.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017045fc4c93000004030047304502202cb1a996aee59185b261bba59b3b01f4e1e5255bb1fa384ea9c5bada09e49f70022100be1c148358cda3a41aa21f665637707fabe8b228826bc0f418e9d12dc9979a01007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017045fc4c800000040300473045022100ac9affd5a05e31040b0d4b84d7af17b165e1effefb4558fc182a019cc62fcf8b022013b66cab44eb6b2be2eb1440d7f739cc15eb292edb3d596531cb6e31dc19865d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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