www.mykot.be

Issued by R3

About this certificate

This digital certificate with serial number 04:df:8d:3c:dc:c1:02:c4:fb:24:c4:26:c3:74:af:ed:35:4f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mykot.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:8d:3c:dc:c1:02:c4:fb:24:c4:26:c3:74:af:ed:35:4f
Serial Number (int): 424519848713049454440658285860420175344975
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d8:a3:7a:4d:aa:d5:ad:61:18:2a:2f:6f:3c:b1:8e:81:34:69:76:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:4a:98:bd:4a:e1:66:0e:ba:f6:82:d5:7e:ed:f0:83:73:af:4d:3e
Fingerprint (sha256): f9:bf:59:fc:01:8c:d7:57:df:e2:12:21:0f:d8:48:2d:e7:9e:f6:21:b7:86:85:5f:1f:e5:8d:d0:ba:ad:9f:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mykot.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mykot.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mykot.be
www.mykot.be

Other certificates including the domain name mykot.be

(limited to 100 certificates)
mykot.be
ple.mykot.be
*.mykot.be
brik.mykot.be
ple.mykot.be
brik.mykot.be
brik.mykot.be
ple.mykot.be
mykot.be
mykot.be
brik.mykot.be
mykot.be
ple.mykot.be
ple.mykot.be
mykot.be
ple.mykot.be
brik.mykot.be
brik.mykot.be
mykot.be
mykot.be
brik.mykot.be
brik.mykot.be
*.mykot.be
ple.mykot.be
www.mykot.be
mykot.be
ple.mykot.be
ple.mykot.be
mykot.be
brik.mykot.be
ple.mykot.be
mykot.be
mykot.be
brik.mykot.be
mykot.be
brik.mykot.be
ple.mykot.be
mykot.be
ple.mykot.be
mykot.be
ple.mykot.be
*.mykot.be
ple.mykot.be
www.mykot.be
mykot.be
ple.mykot.be
www.mykot.be
brik.mykot.be
www.mykot.be
brik.mykot.be

Certificate

The complete raw certificate details for www.mykot.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424519848713049454440658285860420175344975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 21:33:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 21:33:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mykot.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679566518326464522748199937428120380329060704520935697572813729075828748418710173467318768323733142801720317232908439127441769296142213660678899775231511193764291076517437766118744812988386379121569844971302413570173052204454644399343737357854287344395065951629264224396739786537745873804380454037032035942375093490869210805263502779177598715379755789119620106929181445200446704195997908789452853911214883423663851797853152398806431216410528115538811668059830656352828007399732980971513516233129671284638162814949755733773300812741057437059047161921048003715167506930910998637525239623485250609427221155604408808371516414974980740585218926899071722511772899665799113797161163488011089483529781742708231405126441489401521848715912986803681976777464227442938858611042305219100400298331159128432390646009489386362525300204317920029890169631366157570115083124234093964500630125538935865300628534609142122363162576752860187280841473779146907837904470366609651327189094207826136501876722585257605731140551534393554732939022628292059873546890893198658494175543118066449122719350695932346490533316283110873954894828518254683071350092371210667695158656938055610801048553778694944357758070395601997838132401401430921142055271039307438007273789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8a37a4daad5ad61182a2f6f3cb18e8134697630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykot.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mykot.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bbb5e56290000040300463044022072543d33ea5181115e418cbc7e4d56e2ad5621f25abf7152a1ff176922cfc3470220034a0e3abcd217442a516808c4aefe72e723f7e78c8073c81b1accbc6ef4837400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bbb5e562c0000040300483046022100881f76d5ac6c929df257bb1ede149a5f53936f2fd19945352ab214eb223780ab0221008f41f26acd5916bff33a6ccedb5e9c84edf6ba4033d87fd88ba3ba522fba6757
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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