innomatic.be
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ab:0f:65:ac:88:e2:f4:8e:1d:2c:72:29:2c:68:fd:61:15 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=innomatic.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ab:0f:65:ac:88:e2:f4:8e:1d:2c:72:29:2c:68:fd:61:15Serial Number (int): 319545608880100424139053866664346362142997
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e5:27:7d:b8:e9:78:f5:85:ba:3a:34:31:ab:e3:8b:d2:ff:c9:03:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bb:1f:2b:ee:be:31:79:ec:a6:31:25:ac:1c:69:8a:ee:0c:04:0b:c6
Fingerprint (sha256): e6:93:92:4e:a3:7e:70:6a:50:03:85:d0:d0:62:4d:39:d3:b0:17:57:5b:e1:06:de:11:e5:13:78:5a:44:90:73
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate innomatic.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for innomatic.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
innomatic.be
www.innomatic.be
www.innomatic.be
Other certificates including the domain name innomatic.be
(limited to 100 certificates)
Certificate
The complete raw certificate details for innomatic.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISA6sPZayI4vSOHSxyKSxo/WEVMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTExNjI0MzhaFw0y MDAyMDkxNjI0MzhaMBcxFTATBgNVBAMTDGlubm9tYXRpYy5iZTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANFmhGD2hIW85iL6/deHW/aLgf5aDpnZSTN3 3eZKc9c0toqPnpQ/c7MkWlYhfjjMgCJCtVf/SBV3Dw/Zrpj3v1WYqGDHfk3lcGsB ZBEpykAjL6WsIVWFonb34nL/D1iqB2RaRXg6dneh1c0HP3za67DGlgIGAmOmM5Qu xYKGo9LkeAh+Ew9+HlK9jtB8j9cmzCFaLrLOL6rj3oSCEqNEtIpCdAOyf3DvZIpi D0ABvvpPVWZlNvejqq5fnnNfgExfV4/cjuMp5D9UIY90G0yctugKan4PjoI4zLAR CEB0oC0TIE4uNvFIQniOXI8SnjpVycnPHxkL4AODrlorO/MuNgvyivgDlzg7EUcf auohPZ4otv1FmrTdUN2IAGmKoFXSpD/qP9h2L5O/Dz6W4+GUfpiI9LcDtIcb78+L pazROoa1edHtkDO89BpjOdhAsUopfOWJuEj6CpCx1Nhu85z94re0wJn1ICk1SZAK oXzAZ626Dg805qRr+34vvCRIN5knaeiZ4XyMTeX4Q2KGK8Wqo9rqlw1DhoI3vpzK x27C1C3hbFoQMt3YJD3mI8Q/yAFj/gMZQpWLpykcZrlTDuKDaqZMsqeM0vqsL/0e bQWNV+oq3H/DwZ0rsp+StydrSo04PuPCQSF8FVDqIfKPOEHhmDis3LoFy7C2xxwu F6YT8a97AgMBAAGjggJzMIICbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOUnfbjp ePWFujo0Mavji9L/yQPNMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMaW5ub21hdGljLmJlghB3d3cu aW5ub21hdGljLmJlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1 loFxRVgAAAFuW3770gAABAMARzBFAiBNa+LAcXTLHIX+xvA/lv1BydQv95tMUBxi rDGeyyLcywIhAJSf5IF8OzSt6hUFsSJlBcvGXukgdmhTQcCQsIQC+zsTAHYAsh4F zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFuW377wAAABAMARzBFAiEA gvuTFIffCOQ1oz18f54dJoeMSF2WJBU6fu6WFSkKd8UCIGLKT/JcilliNbDZ3QdA VVFJGgRaiBT4SX6OTp1zMcRvMA0GCSqGSIb3DQEBCwUAA4IBAQB3v7/T6GW1T5X3 dolvtg48JcRUOKlJ67Mog2d858dc1ovjsbF6zPb27hDPJMsLqj2Y8DPBzeJtkcjB lYcRL/oPabZ5FaGswRpNHRzaUCpAD9Jyi9JxYHpmaW9p2wzPmaLBqUMcRl08IIoH jr3kwWpWHHgxtE7h0jPzZCr7iN4DsJQXRl68DLjpZJAiICfQ058z1lNC7jFOkeyu FcbrluPaDm9RFC/rBZlOlRnXM+HFoovutbbahG5fCUIkIQudZKD4kXaakO1kSD/n z0xcGYMjB5vX7sS1ZNYAnz0NzgDzh2PC43z2SEGm+n/XZM9svO+RldzBZpiWV54u AnK9g3jF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0WaEYPaEhbzmIvr914db 9ouB/loOmdlJM3fd5kpz1zS2io+elD9zsyRaViF+OMyAIkK1V/9IFXcPD9mumPe/ VZioYMd+TeVwawFkESnKQCMvpawhVYWidvficv8PWKoHZFpFeDp2d6HVzQc/fNrr sMaWAgYCY6YzlC7Fgoaj0uR4CH4TD34eUr2O0HyP1ybMIVouss4vquPehIISo0S0 ikJ0A7J/cO9kimIPQAG++k9VZmU296Oqrl+ec1+ATF9Xj9yO4ynkP1Qhj3QbTJy2 6Apqfg+OgjjMsBEIQHSgLRMgTi428UhCeI5cjxKeOlXJyc8fGQvgA4OuWis78y42 C/KK+AOXODsRRx9q6iE9nii2/UWatN1Q3YgAaYqgVdKkP+o/2HYvk78PPpbj4ZR+ mIj0twO0hxvvz4ulrNE6hrV50e2QM7z0GmM52ECxSil85Ym4SPoKkLHU2G7znP3i t7TAmfUgKTVJkAqhfMBnrboODzTmpGv7fi+8JEg3mSdp6JnhfIxN5fhDYoYrxaqj 2uqXDUOGgje+nMrHbsLULeFsWhAy3dgkPeYjxD/IAWP+AxlClYunKRxmuVMO4oNq pkyyp4zS+qwv/R5tBY1X6ircf8PBnSuyn5K3J2tKjTg+48JBIXwVUOoh8o84QeGY OKzcugXLsLbHHC4XphPxr3sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319545608880100424139053866664346362142997 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 16:24:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 16:24:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'innomatic.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854279334034161189362588120228117498481588951560366541456419997498372094754648288631850054936263698820224130267649721802528061894129428450930079999938545619449130665608048952958390055061628512345249329651122821194749938767068419041960025535021757614333433005000802066041704840710918920983888290627808790895861646305656641321642298355743953274623065155643575856797088589731454097608206851138274733242940397965103849307833204216410718121748660729857423553591660644436704475947455644624223254801497912455426323004626864194761436886974336454912553101609861813835143239737784052164383251022273870695648233551743149164475457702710196120691010382991579667589771762803280513217210569187807438552450866566454316757435100372428825902954720591850003241610281731988877387464796509020597634626578631176836645336299322922046297904467175270092105252945637691053754489022994945348079367551516385186198622337789663486262388271496164630568403713649273700973213524000551089775309446351953221846102078658979496980069712577517031560600914200043671365914855954851784206132629569622174846033732760880585991875808267439195670919455144464928829032781690061474137687442846511435321169700188534601958137872595323658842310807567451826941080732972000009149067131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e5277db8e978f585ba3a3431abe38bd2ffc903cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innomatic.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innomatic.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e5b7efbd2000004030047304502204d6be2c07174cb1c85fec6f03f96fd41c9d42ff79b4c501c62ac319ecb22dccb022100949fe4817c3b34adea1505b1226505cbc65ee92076685341c090b08402fb3b13007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e5b7efbc0000004030047304502210082fb931487df08e435a33d7c7f9e1d26878c485d9624153a7eee9615290a77c5022062ca4ff25c8a596235b0d9dd07405551491a045a8814f8497e8e4e9d7331c46f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0077bfbfd3e865b54f95f776896fb60e3c25c45438a949ebb32883677ce7c75cd68be3b1b17accf6f6ee10cf24cb0baa3d98f033c1cde26d91c8c19587112ffa0f69b67915a1acc11a4d1d1cda502a400fd2728bd271607a66696f69db0ccf99a2c1a9431c465d3c208a078ebde4c16a561c7831b44ee1d233f3642afb88de03b09417465ebc0cb8e96490222027d0d39f33d65342ee314e91ecae15c6eb96e3da0e6f51142feb05994e9519d733e1c5a28beeb5b6da846e5f094224210b9d64a0f891769a90ed64483fe7cf4c5c198323079bd7eec4b564d6009f3d0dce00f38763c2e37cf64841a6fa7fd764cf6cbcef9195dcc1669896579e2e0272bd8378c5