*.utick.be
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f0:9d:1a:48:34:a1:3a:aa:50:1a:8a:61:dc:ef:fe:ce:27 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.utick.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f0:9d:1a:48:34:a1:3a:aa:50:1a:8a:61:dc:ef:fe:ce:27Serial Number (int): 343213451115865778790866588138543901494823
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 92:62:6f:1f:d9:a2:c3:53:fb:70:b9:4c:a8:7f:46:64:e2:51:01:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 78:c4:8a:88:b2:c0:aa:db:07:fd:32:3b:e8:15:b2:a0:d6:bd:62:a5
Fingerprint (sha256): da:7d:e6:4f:05:a9:00:d4:19:a9:93:f6:33:c9:dc:01:f5:79:60:bf:15:f3:02:cb:62:18:77:8f:5b:cd:47:f7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate *.utick.be
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.utick.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.utick.be
*.utick.net
*.wolverine.utick.be
*.wolverine.utick.net
utick.be
utick.net
*.utick.net
*.wolverine.utick.be
*.wolverine.utick.net
utick.be
utick.net
Other certificates including the domain name utick.be
(limited to 100 certificates)
booking.utick.be
*.utick.be
*.utick.be
*.utick.be
aulamagna.utick.be
*.utick.be
visitezliege.utick.be
*.utick.be
*.utick.be
*.utick.be
manager.utick.be
aulamagna.utick.be
api.utick.be
*.utick.be
*.utick.be
*.utick.be
api2016.utick.be
*.utick.be
admin.utick.be
booking.utick.be
*.utick.be
*.utick.be
*.utick.be
*.utick.be
utick.be
*.utick.be
*.utick.be
library.utick.be
*.utick.be
*.utick.be
*.utick.be
booking.utick.be
visitezliege.utick.be
admin.utick.be
*.utick.be
go.utick.be
*.utick.be
*.utick.be
static.utick.be
static.utick.be
*.utick.be
*.utick.be
admin.utick.be
*.utick.be
shop.utick.be
*.utick.be
*.utick.be
shop.utick.be
view.utick.be
*.utick.be
*.utick.be
admin.utick.be
utick.be
*.utick.be
*.utick.be
*.utick.be
*.utick.be
*.utick.be
aulamagna.utick.be
*.utick.be
visitezliege.utick.be
*.utick.be
*.utick.be
*.utick.be
manager.utick.be
aulamagna.utick.be
api.utick.be
*.utick.be
*.utick.be
*.utick.be
api2016.utick.be
*.utick.be
admin.utick.be
booking.utick.be
*.utick.be
*.utick.be
*.utick.be
*.utick.be
utick.be
*.utick.be
*.utick.be
library.utick.be
*.utick.be
*.utick.be
*.utick.be
booking.utick.be
visitezliege.utick.be
admin.utick.be
*.utick.be
go.utick.be
*.utick.be
*.utick.be
static.utick.be
static.utick.be
*.utick.be
*.utick.be
admin.utick.be
*.utick.be
shop.utick.be
*.utick.be
*.utick.be
shop.utick.be
view.utick.be
*.utick.be
*.utick.be
admin.utick.be
utick.be
*.utick.be
*.utick.be
Certificate
The complete raw certificate details for *.utick.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISA/CdGkg0oTqqUBqKYdzv/s4nMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjAyMDMyMjBaFw0x OTA2MTgyMDMyMjBaMBUxEzARBgNVBAMMCioudXRpY2suYmUwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDDJrMz4EXvdKKRzvQwCHvDGzHnilpC0S6+YzPF aX1IhfJoBm18CQDWo70xCvFQ1qdF/w6jrfsxbmF2rzWOMihcYmf5Vf6dY6SGVJqb rn+h6b+YU1MK9pZCe2BKe2IP+uA6BLen/eAwpXGLvl74yM1plcL2t1nbPqNKx4NF ZFrOJsFlI6CYHGkrHEyET8v/8cxwYLrkuv171Y2VfCL7E1UJO8kwAsyWjRbLK+kq dshKQOAmStRQKePIZYRk31hYW1fRNuVQXlqaxYwWSBDI2ahm5O4OPyyXmPr55sG9 L6eKnqmDZJfeBYEX6B9uUqt6gSw8wU1gFEX7uA/Un/6n1HtDAgMBAAGjggKuMIIC qjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJJibx/ZosNT+3C5TKh/RmTiUQEgMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w ZAYDVR0RBF0wW4IKKi51dGljay5iZYILKi51dGljay5uZXSCFCoud29sdmVyaW5l LnV0aWNrLmJlghUqLndvbHZlcmluZS51dGljay5uZXSCCHV0aWNrLmJlggl1dGlj ay5uZXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5 AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAA AWmdBPPXAAAEAwBHMEUCIQCd0dLov3njAS2Tb+e+IN8fAx/TMd/zPbagBMUSaRQd 2gIgNCltOQgqAMgqv0OtXJCLc/n9F32Kht9IY9/V075BYykAdgBj8tvN6DvMLM8L coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWmdBPPYAAAEAwBHMEUCIBDXnpH++Lix fUBF2cNoeXWlQ9cIxfBUDHICwsnh5RzzAiEAnp6Nzq3dCMToAXoPS5l4owOopmlK R0XuruyDAUg2GBgwDQYJKoZIhvcNAQELBQADggEBAHGrJMPF2G2v8qXp+fkDt9zM MHt2Trsw1rR+5W8QvXKr7r9bRBFQowGEFi69MOeqDS2bjPSw8H7twInxSp4r6iX4 HXHLpC7AxY9NuXZoWTlNHCDhHUJ53LtKlFNwiYE57Ncg5P5JyRCXQFs9mTFihphe 6HTlKuV+2QZytY8q96sb8YiBC8BPfAslvmxYlevnKLiBFyMW98M1MwjbTKjDMgAN jPC808SbD1U7P1+aNa2HzR5zub7nhQlOWCz5dLeZSkLD6X7NU5+Bf9p8yJJI3hRY LyK4naMe+S5ZVbiRLE4Kzcl3uvo6qfBL2HH9BZMrQ3l1C/MC1e1MCLJEBIja4fM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyazM+BF73Sikc70MAh7 wxsx54paQtEuvmMzxWl9SIXyaAZtfAkA1qO9MQrxUNanRf8Oo637MW5hdq81jjIo XGJn+VX+nWOkhlSam65/oem/mFNTCvaWQntgSntiD/rgOgS3p/3gMKVxi75e+MjN aZXC9rdZ2z6jSseDRWRazibBZSOgmBxpKxxMhE/L//HMcGC65Lr9e9WNlXwi+xNV CTvJMALMlo0WyyvpKnbISkDgJkrUUCnjyGWEZN9YWFtX0TblUF5amsWMFkgQyNmo ZuTuDj8sl5j6+ebBvS+nip6pg2SX3gWBF+gfblKreoEsPMFNYBRF+7gP1J/+p9R7 QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343213451115865778790866588138543901494823 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 20:32:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 20:32:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.utick.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24635553154726964524595881929687086074924642407306993944026766090057840278028440881978371293862850882555910072387934710662329820644097700268033317342413292669204654219774066466755773799835119497300457093814347163228558906305131851396611753071832426339348892150366202687784934138594179233835920207459357942632673820479116364241922633796807213782285228645191377222168378579791438821594184212513244730347512843705144520960925082995500703321171284204857087423465831059538056077294800677779243433011614741168880039334662238756928984737612998139312652590571486580006394336265198039176762687538596621925302814538132215855939 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 92626f1fd9a2c353fb70b94ca87f4664e2510120 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utick.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utick.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolverine.utick.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolverine.utick.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utick.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utick.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001699d04f3d700000403004730450221009dd1d2e8bf79e3012d936fe7be20df1f031fd331dff33db6a004c51269141dda022034296d39082a00c82abf43ad5c908b73f9fd177d8a86df4863dfd5d3be41632900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001699d04f3d80000040300473045022010d79e91fef8b8b17d4045d9c3687975a543d708c5f0540c7202c2c9e1e51cf30221009e9e8dceaddd08c4e8017a0f4b9978a303a8a6694a4745eeaeec830148361818 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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