www.mykot.be

Issued by R3

About this certificate

This digital certificate with serial number 04:52:5b:68:36:a2:d0:f3:a3:b6:17:07:98:9a:5e:fa:e5:c8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mykot.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:5b:68:36:a2:d0:f3:a3:b6:17:07:98:9a:5e:fa:e5:c8
Serial Number (int): 376473798669197403905622664738073093006792
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0d:da:35:c1:16:a3:5d:27:de:81:86:9a:e0:de:8e:3a:8f:84:0c:28
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:b0:5f:71:56:a8:90:98:c8:24:cb:ed:d4:46:d8:76:f9:90:85:52
Fingerprint (sha256): f0:f6:e8:58:f1:f3:13:13:4f:a8:90:d7:4c:5b:3d:8c:25:f1:3b:71:9e:6d:5e:e0:2c:30:d8:d7:51:e5:e2:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mykot.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mykot.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mykot.be
www.mykot.be

Other certificates including the domain name mykot.be

(limited to 100 certificates)
mykot.be
ple.mykot.be
*.mykot.be
brik.mykot.be
ple.mykot.be
brik.mykot.be
brik.mykot.be
ple.mykot.be
mykot.be
mykot.be
brik.mykot.be
mykot.be
ple.mykot.be
ple.mykot.be
mykot.be
ple.mykot.be
brik.mykot.be
brik.mykot.be
mykot.be
mykot.be
brik.mykot.be
brik.mykot.be
*.mykot.be
ple.mykot.be
www.mykot.be
mykot.be
ple.mykot.be
ple.mykot.be
mykot.be
brik.mykot.be
ple.mykot.be
mykot.be
mykot.be
brik.mykot.be
mykot.be
brik.mykot.be
ple.mykot.be
mykot.be
ple.mykot.be
mykot.be
ple.mykot.be
*.mykot.be
ple.mykot.be
www.mykot.be
mykot.be
ple.mykot.be
www.mykot.be
brik.mykot.be
www.mykot.be
brik.mykot.be

Certificate

The complete raw certificate details for www.mykot.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz2ka6vw35W7cTBKWlzSV
yFvllKQKM8G65HR4atwout/CU6ynzIti+8xLdPsirvnemuG32O7bpmPGR7WQllhG
YUWfutLtu4OtiAcDo3t39ve5H/C6gxi5U2ODM6zJbH3zDF9nMYVQj/1URYqOu4cU
4o2EQ6yjGhLcCMvSq9mnqx7qkScRbCTrteHr8SIW+e8bi2tjSkeETWQgG/OMhfGX
aI/qvP7OIyd9/sHyeL3rgmFuctWdDtCIKhEzEsPg0fyWwCyVM1uPUhB9moJ3VbeZ
BJ/BBp/ZzawyZibYtYB0Y7NnctXkZfUKNDbfqU3woDDqQaaNazDIXDlsh7kcLJNI
v6RDm27w/Io6uLf1ljuJBmw3FE6cNTVL8E7y7DAQQfVmh1+rslz1Xve5NBP/ej9m
oLJMX1yB7ZauDKau3VzsFPEwyY5TIY7feUNF8XgMG7uhFgd0i5wfxlC55Yds8GuT
2QDw9CCR7w4xpNmxoxXgPS1do7JlCqf4ItlZJBbVT10sSaR26662sVLE8mfJ5KoB
HkGiabYfbyWWSvnjf3LkFe9qkKdBEshFiwaWiZO59Wl0e4H+NRgcgKkdeJdBS0zW
/CJY88ey3CA8Tc1DXNF6Z29zSjHzQq1AtwGkihpvZmSNbqMLJrExEXCp2+1i+h4D
WK3vn9iTKIsn0aC9M/lEQ/sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376473798669197403905622664738073093006792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 23:48:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 23:48:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mykot.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846161289243931321250425971993673168884850615514974920768056956669837194901919870452007762711771511395762248233947050857499448071768692358609958579455779457973163822978822111491333658031166369859393283000357900070636946623934967326248783945896174346384147294963889173762035735586499685729527833661158561907489199803224728206493759449148110818340600208136352078756822482743499961937243254285777013924340493100961183374344279144450027541414943104385053009716809513414300804023724485301159813185434616906501278187595023196439316100462566150397480559871863796085483889851786408767315078808741383144699341477114398821246298166637708816956272093424648499933874575856678062560422946387082206329239240524231348749712864414770584203207856807637662592944398734612350240721944466722904822451413633590920799624788781607810595181167718916037772421045552821203497341485105597501795988509516153721037163323643772501049092156914559006337620176143101954977130566958270280795035748930661822495137859888085909541505787826505300635924832275552662267137304955135157356682090000147248803051538811033277578244862899836601597018721930180573605884283786259212801547904582069940048569838792622014236390914629561191632810667496515776154708886538306951909229563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0dda35c116a35d27de81869ae0de8e3a8f840c28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykot.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mykot.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cebb0ee34000004030046304402205d9604cfc22757418680e9ec90a1a9d49dfecdb1a37a688901990c11793bfc4902201881002725ada27d5e1229cdf38dc7136ee33139c4333a76ed91e2f48e8f848100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cebb0ee87000004030047304502210099ee40647b7be93f948eba5e545b7b66458ec1f143d798302d22ef09c3ce151402207165ad7aed0f13ab97f3719302d54a7da45bd575d25cae88a87c14bd7678f7c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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