wokgarden.be
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:66:58:20:e1:57:ec:22:d7:1e:99:6a:fa:a7:b2:6f:37:b1 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=wokgarden.be
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:66:58:20:e1:57:ec:22:d7:1e:99:6a:fa:a7:b2:6f:37:b1Serial Number (int): 296162802008853100466471354618224902617009
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c5:0c:9d:3f:53:e2:f5:af:75:bf:09:b4:ee:83:fd:a8:df:3d:03:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e9:73:7a:56:8d:9b:61:01:ae:f7:aa:80:38:00:b9:4e:24:f8:19:55
Fingerprint (sha256): f1:a3:4a:87:0c:62:8c:51:75:33:63:6f:b4:33:21:09:30:3b:8f:ad:c7:a3:dc:14:94:85:de:0f:e0:90:61:c6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate wokgarden.be
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wokgarden.be
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wokgarden.be
www.wokgarden.be
www.wokgarden.be
Other certificates including the domain name wokgarden.be
(limited to 100 certificates)
Certificate
The complete raw certificate details for wokgarden.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA2ZYIOFX7CLXHplq+qeybzexMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MDYwNjQ2NDZaFw0x OTA4MDQwNjQ2NDZaMBcxFTATBgNVBAMTDHdva2dhcmRlbi5iZTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAPhbOWEkB38E+mZkDhdSbmse6cSoV/bnNodW RVIjfgXdyGCXPXzTA3fZW9DfuIzD/PF03MIdJx9wzDq1AidKaHTXKOHXB/huyqXm KYPJuZScBQe2zr0bvI5egLX6yRHt2U3vbGxVu1rcbNKLX6K/s90VQOCDRPRt98oV NVD76+AAPYxpdKNQabx7KBwbfgs3Jvf+G3tLpaXN37NwWHI0BnQUuImGhSiQfbv5 NjbLFtjiDOmCTx2O7k9Yd6AcZ/zMLm74gSZLRo14CRcDryXw3CnCT2zABPWcogGc E+FzHjHSiwyrAvbTy4pdWteEZb1mezdQqLCVBiWCuGAFmKbHFiVq7ixK1+uOTFAw sub4/2r9RPDC6yIorGms40UJncNhGPw95Yy9wwBFm3aHPgg7yH+AAfEDr8F4Ezo3 JsjVj5PPTiyHNbNXCYc/7rJI+RmJt7VpWVlfMWmYPMAUqePWGI4tU6nn0mwfFCDJ oOw+HVog3CV7mAXgroVSgytNReQDTt+j42h2qToXCVou+AwYq17FEmM4S9SvcAKl zwFnAxgfBlOqQqedYQqxy9w/dBXV42HofwCO5fT9Hdkw/LR/fTtzJRSpgHMi917L hs2Wu0GLUP28CqTBK/veEB+hGl851SxThcHP5VveMxaWjrttvFDW3f14TKaP6Ike 3HGOkx8HAgMBAAGjggJ0MIICcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMUMnT9T 4vWvdb8JtO6D/ajfPQOGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMd29rZ2FyZGVuLmJlghB3d3cu d29rZ2FyZGVuLmJlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHcA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMB nd3x2/4AAAFqjBv+lQAABAMASDBGAiEA+klmunZnqmkc0nSMqs1EUPUPrm0POAJq 2IywjejaY/sCIQCGExE/UVAMkMcSuc+9N98OoTWVaGvARAiGXmFLSCnpbgB2AGPy 283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABaowb/okAAAQDAEcwRQIg PN7QNx2KPHNE5iqug6KwdyEkklVsrRdgM0WH4Md44X8CIQCWPAxlGW+SiuUB+/ze yaeGuZrLH1SDU+ctZbNZC31bFzANBgkqhkiG9w0BAQsFAAOCAQEAINaUMFlWzpdS XJXomA1zUD9kLKX3cIoZrGl4SgqfqU7mt0uj4Fkvl0c71kG6KOvwP2blaJdjIq0b NZaRknK3acEPiOGVOSnu1yc6BEMoDMYvjbb8ixQLhjfP8dvn2n2Krmx41AnKokod kfUWol2yriSJS4pYqL2m9lygsG1nR/wQd4iN4k665dgAEm0bWKVcZMau/f98bsqs AfYpwPH6j+HdltABoLPgE9OVQOa4LuZDVY/MNBPAGaFUf3CTwz/iyeQfFsYzQ7g0 SRWJGqzQlPeLNe5IW2e6vztAkSvYt/6IA0U/8YLGyGNmUPEsdyT8SOQyw19+ORRy fY7JgDZY7w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+Fs5YSQHfwT6ZmQOF1Ju ax7pxKhX9uc2h1ZFUiN+Bd3IYJc9fNMDd9lb0N+4jMP88XTcwh0nH3DMOrUCJ0po dNco4dcH+G7KpeYpg8m5lJwFB7bOvRu8jl6AtfrJEe3ZTe9sbFW7Wtxs0otfor+z 3RVA4INE9G33yhU1UPvr4AA9jGl0o1BpvHsoHBt+Czcm9/4be0ulpc3fs3BYcjQG dBS4iYaFKJB9u/k2NssW2OIM6YJPHY7uT1h3oBxn/MwubviBJktGjXgJFwOvJfDc KcJPbMAE9ZyiAZwT4XMeMdKLDKsC9tPLil1a14RlvWZ7N1CosJUGJYK4YAWYpscW JWruLErX645MUDCy5vj/av1E8MLrIiisaazjRQmdw2EY/D3ljL3DAEWbdoc+CDvI f4AB8QOvwXgTOjcmyNWPk89OLIc1s1cJhz/uskj5GYm3tWlZWV8xaZg8wBSp49YY ji1TqefSbB8UIMmg7D4dWiDcJXuYBeCuhVKDK01F5ANO36PjaHapOhcJWi74DBir XsUSYzhL1K9wAqXPAWcDGB8GU6pCp51hCrHL3D90FdXjYeh/AI7l9P0d2TD8tH99 O3MlFKmAcyL3XsuGzZa7QYtQ/bwKpMEr+94QH6EaXznVLFOFwc/lW94zFpaOu228 UNbd/XhMpo/oiR7ccY6THwcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296162802008853100466471354618224902617009 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 06:46:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 06:46:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wokgarden.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1013205486742007045719739298110380321256526329855063078349920681399976853280553376827593740314868445389120188155016856751557534965057489682635802090534437309009591137009400642429397070420175448056151450572048436309386942684687833639159411771653841865078912826359722389803222482569677143985361014687017880466037120766712498536444442453639988606857323633283653722124253085472046398648786369421550320977255395759070099334676975918648042162580442552279425530490457696396510456998627981316880936697176929406659748649755368138999348687936574005223306491155593138294137344794675867143824789634354688447277292322996168725392060272887320483755253088253894752843546013475246801893606177167588409220387863781726199330006303403655662995648857241419645141678854282800856243286961658515964963819459873605503977050577968472669150284938423203279017755902961835302063141353460238755232428023018344446374025770509933406436159152186720286578569226582302209518748205662532299872289393668872127333543202164066411037586953535244662671782701760050961313217048917787275927050600112488589441453095814150264283783845725000987368218071633854784167810194133289717642733161939712502186896418251228362015689897548565698379743591458307464741307734598353778457648903 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c50c9d3f53e2f5af75bf09b4ee83fda8df3d0386 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wokgarden.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wokgarden.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a8c1bfe950000040300483046022100fa4966ba7667aa691cd2748caacd4450f50fae6d0f38026ad88cb08de8da63fb0221008613113f51500c90c712b9cfbd37df0ea13595686bc04408865e614b4829e96e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a8c1bfe89000004030047304502203cded0371d8a3c7344e62aae83a2b077212492556cad1760334587e0c778e17f022100963c0c65196f928ae501fbfcdec9a786b99acb1f548353e72d65b3590b7d5b17 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0020d694305956ce97525c95e8980d73503f642ca5f7708a19ac69784a0a9fa94ee6b74ba3e0592f97473bd641ba28ebf03f66e568976322ad1b3596919272b769c10f88e1953929eed7273a0443280cc62f8db6fc8b140b8637cff1dbe7da7d8aae6c78d409caa24a1d91f516a25db2ae24894b8a58a8bda6f65ca0b06d6747fc1077888de24ebae5d800126d1b58a55c64c6aefdff7c6ecaac01f629c0f1fa8fe1dd96d001a0b3e013d39540e6b82ee643558fcc3413c019a1547f7093c33fe2c9e41f16c63343b8344915891aacd094f78b35ee485b67babf3b40912bd8b7fe8803453ff182c6c8636650f12c7724fc48e432c35f7e3914727d8ec9803658ef