kanselarij.be
Issued by R3
About this certificate
This digital certificate with serial number 03:54:4d:41:33:17:62:dc:2c:8a:88:89:b0:25:b6:5e:0f:63 was issued on by Let's Encrypt.
With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kanselarij.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:54:4d:41:33:17:62:dc:2c:8a:88:89:b0:25:b6:5e:0f:63Serial Number (int): 290023265707866547385850306095857587326819
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 26:f5:f4:ff:7c:78:e1:c6:44:1b:fc:52:22:79:23:f3:8c:d0:50:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c6:38:fd:7b:23:9f:87:37:3c:25:58:c4:63:b1:17:c8:09:d0:82:d2
Fingerprint (sha256): eb:c7:43:3a:90:7a:d6:96:ac:37:76:07:8c:b0:c1:02:e9:d3:68:33:0a:c6:e8:9e:89:0f:63:10:0f:69:f0:c9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate kanselarij.be
16
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kanselarij.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
chancellerie.be
chancellerie.belgique.be
chancellerie.belgium.be
chancellery.belgien.be
chancellery.belgium.be
kanselarij.be
kanselarij.belgie.be
kanselarij.belgium.be
kanzlei.belgien.be
kanzlei.belgium.be
www.chancellerie.be
www.chancellerie.belgium.be
www.chancellery.belgium.be
www.kanselarij.be
www.kanselarij.belgium.be
www.kanzlei.belgium.be
chancellerie.belgique.be
chancellerie.belgium.be
chancellery.belgien.be
chancellery.belgium.be
kanselarij.be
kanselarij.belgie.be
kanselarij.belgium.be
kanzlei.belgien.be
kanzlei.belgium.be
www.chancellerie.be
www.chancellerie.belgium.be
www.chancellery.belgium.be
www.kanselarij.be
www.kanselarij.belgium.be
www.kanzlei.belgium.be
Other certificates including the domain name kanselarij.be
(limited to 100 certificates)
Certificate
The complete raw certificate details for kanselarij.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgISA1RNQTMXYtwsioiJsCW2Xg9jMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTIwODQ3NDFaFw0yNDA1MTIwODQ3NDBaMBgxFjAUBgNVBAMT DWthbnNlbGFyaWouYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb Ctwp2gS+SDILjBxMYeCNzoBbw/HzL16Y1wmEHAs7o37bGjcHGBqAbLMvWCTMKqtU n5WrQ2gGLXA8wIc7CFDRlpSKjK1ONM8dtM+dzWymGlSFrany9P0ipieM6RnxohJD I5wdtKMLggjLo0qnFbMutRjszZPIAR6rBM2nhPfD0JsO1XvyGwjObtBNVHQqWjlR Xz+l8mShBDcZbTlyAMCI3Av3MWFweumgmTEB7lP0vgBhw1B22HgLDDw4UdI9YgKP 8d/bXWeVJk4vTyff4a9V1Gwlyg+DQPV2dkShGggrV8N9djXclkdnYSBjAKW+hsYW 1VzycpAKAKb5Vb/+pRDjAgMBAAGjggNyMIIDbjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFCb19P98eOHGRBv8UiJ5I/OM0FCwMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv MIIBeQYDVR0RBIIBcDCCAWyCD2NoYW5jZWxsZXJpZS5iZYIYY2hhbmNlbGxlcmll LmJlbGdpcXVlLmJlghdjaGFuY2VsbGVyaWUuYmVsZ2l1bS5iZYIWY2hhbmNlbGxl cnkuYmVsZ2llbi5iZYIWY2hhbmNlbGxlcnkuYmVsZ2l1bS5iZYINa2Fuc2VsYXJp ai5iZYIUa2Fuc2VsYXJpai5iZWxnaWUuYmWCFWthbnNlbGFyaWouYmVsZ2l1bS5i ZYISa2FuemxlaS5iZWxnaWVuLmJlghJrYW56bGVpLmJlbGdpdW0uYmWCE3d3dy5j aGFuY2VsbGVyaWUuYmWCG3d3dy5jaGFuY2VsbGVyaWUuYmVsZ2l1bS5iZYIad3d3 LmNoYW5jZWxsZXJ5LmJlbGdpdW0uYmWCEXd3dy5rYW5zZWxhcmlqLmJlghl3d3cu a2Fuc2VsYXJpai5iZWxnaXVtLmJlghZ3d3cua2FuemxlaS5iZWxnaXVtLmJlMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcASLDj a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNnLcYZQAABAMASDBGAiEA kD1vlE2gEx9HMLoI5C6VXndHzu8PSEMR2XWKbKPabQsCIQCDE4tLO5RyhYWU4lSU YaOaFT3Wbn3uohTdGOBooo/saQB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI WUZxH7WbAAABjZy3GJsAAAQDAEYwRAIgAKOSq99QSgfNg4iSZhjzyJ3PXwXFBLBO SGnbnh086IcCIC0M/huX6LaYucDP2AiBK8qHsxQPLOPwSKChkadHZEDcMA0GCSqG SIb3DQEBCwUAA4IBAQB0EIgXRh5FK8cAVQmPffxU1tynjFq9VlBL9AYkkZ2fG9xp oyoy8nfAlvk39HQqAWTXOZbyOg6FEcmctbCfb3spvDbGa2fyY9lpvX/Ak8gnROZK r0VXrAKlHr43Qc0m1OVqgtndB4Qf6KfIWcMdVB4Vmwed8Vc3yTM6rtgHeoG8dehC JD7DxJUq3ICBbVJeJqTmKwyd9w48HTrWwzTjbsfaPsAT5E2h5hiCe5/ShnyaIqsa FNGp1fOMBXgSOsRE+gVLqYrNBp2a0bTR6iwT88YJU6VNck+rq8HiIPODsXmaJyXq mg9c7dp4xpzuM6oc5016C9+SVAY0wXD9Wj91DEtc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wrcKdoEvkgyC4wcTGHg jc6AW8Px8y9emNcJhBwLO6N+2xo3BxgagGyzL1gkzCqrVJ+Vq0NoBi1wPMCHOwhQ 0ZaUioytTjTPHbTPnc1sphpUha2p8vT9IqYnjOkZ8aISQyOcHbSjC4IIy6NKpxWz LrUY7M2TyAEeqwTNp4T3w9CbDtV78hsIzm7QTVR0Klo5UV8/pfJkoQQ3GW05cgDA iNwL9zFhcHrpoJkxAe5T9L4AYcNQdth4Cww8OFHSPWICj/Hf211nlSZOL08n3+Gv VdRsJcoPg0D1dnZEoRoIK1fDfXY13JZHZ2EgYwClvobGFtVc8nKQCgCm+VW//qUQ 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290023265707866547385850306095857587326819 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 08:47:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 08:47:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanselarij.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27651544059869328243651539885598140449226826720799004872090491222637029756832728102417637979786461741585573983721000057411467123316930137135957880941267836650881389753773082478995391741339008336757548881240711522805947386949309424038820881746572015581494652217588800526538809541815696232264236516775261807509946389187111581992663027512061951752971104066185570944369166913865675768770796413645912004956864820717392122585756185624417887753850353984101143338314000608194263977190479158920164695257855697869653158093496656540867774589978254523774012650654245328730725585061923959645864537095031070673831723349610938568931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 26f5f4ff7c78e1c6441bfc52227923f38cd050b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellerie.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellerie.belgique.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellerie.belgium.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellery.belgien.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chancellery.belgium.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanselarij.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanselarij.belgie.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanselarij.belgium.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzlei.belgien.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzlei.belgium.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellerie.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellerie.belgium.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chancellery.belgium.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanselarij.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanselarij.belgium.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanzlei.belgium.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d9cb718650000040300483046022100903d6f944da0131f4730ba08e42e955e7747ceef0f484311d9758a6ca3da6d0b02210083138b4b3b9472858594e2549461a39a153dd66e7deea214dd18e068a28fec69007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d9cb7189b0000040300463044022000a392abdf504a07cd8388926618f3c89dcf5f05c504b04e4869db9e1d3ce88702202d0cfe1b97e8b698b9c0cfd808812bca87b3140f2ce3f048a0a191a7476440dc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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