paradisier.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:65:bb:7b:0d:fd:b5:11:46:78:4f:36:05:36:e3:b7:2f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paradisier.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:65:bb:7b:0d:fd:b5:11:46:78:4f:36:05:36:e3:b7:2f
Serial Number (int): 330209121396241998041882409510360387401519
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:0a:28:7a:c4:14:9c:0c:20:d7:bb:8d:52:5d:c7:32:4a:02:95:6a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:1a:42:48:80:14:32:d3:6e:ca:ec:0c:ab:89:99:34:f8:5f:cf:d4
Fingerprint (sha256): fb:b9:8c:84:e7:0e:33:4f:c6:8a:66:13:59:d9:b3:47:17:7a:f3:d7:a3:43:5e:af:a4:93:f9:27:09:1f:81:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paradisier.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paradisier.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paradisier.be
www.paradisier.be

Other certificates including the domain name paradisier.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for paradisier.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZjCCBU6gAwIBAgISA8plu3sN/bURRnhPNgU247cvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjIyMTE1NTdaFw0x
OTExMjAyMTE1NTdaMBgxFjAUBgNVBAMTDXBhcmFkaXNpZXIuYmUwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDNmOQR18kU3oDsU2tdndEhadStHcQHAGVX
xOpzKcRF+9ynzHMveKJuLeRWeMsRa/FPcgl+ODc+VjsFuM52p8il0Gk2oYTPzVFd
oRpI1msUvpXdhj7z4tJzlGBMIMS+2fzv3pHVpmosCa7kxmfPcxGy/xGnIhU4oPRT
oo5PDGjz4NvITz/b7o38QmBNJ77qpelviL19XW9LbQHAafWpcXqInDd7id0K2c/h
XzoyMXhFQmLxVXPdPf9aap5QU7/XpaWV072McYaeAZdDarFaSU7ZgCeEBKxqwTP9
eYoiqiI3H7jJWlUYP+hgBCCTTDs0HeTCpzJDxlvfs7SqQesbOoi1nMFOG0UK/j+L
HmHr/YXddvOP0kjx5qpVWy8Seb/nhqDaSoG9Wz4UE1X6o5hDi+I/ddTD3ULqKC7J
e2IHks5+RmQ664UUQy0J12K2LMd4WgOiL+S7Ug9iPOSbFs5Ijd2wAPIq0cdS1o6+
3cZ72pEbEV2Il4LmNjqRXulF0eHmVj2DlPgAaM9ewDYxcOutAJQZ4bTs3n+m1X/q
5QzNYfV7vSCNuoWHny6bAX23lQSO5zdTTzPG2zYjiVMtJZCv1qdu49w4OYlZ+UJt
vMk9iozt1ixHjlnveRMT5n65rYrNof4EEM9RqxvqJZRdXfC74C2EXSveUMk421wY
v1FiD98RsQIDAQABo4ICdjCCAnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQKCih6
xBScDCDXu41SXccySgKVajAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXBhcmFkaXNpZXIuYmWCEXd3
dy5wYXJhZGlzaWVyLmJlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjG
NzV55hB7zFYAAAFsu2aTagAABAMARzBFAiBZgM+BJo1pvTPlB0H9S75xmEf6+d3r
Or0gsP0rdUzQ6gIhAMzLLzVqH3zb4dwr9zyZ+lreWq70anACKjGYp36hAx3XAHcA
Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFsu2aTiQAABAMASDBG
AiEAgxJPb+oqS7aXx0YrhcK0TWvMvdQsAQpux8pJY7jys3ACIQCoW/BzA71xiTYr
umBBqgJVWnLAC2lZyiX2zQqXVHL/IDANBgkqhkiG9w0BAQsFAAOCAQEAJcuiTLkz
65AplqKXnhyMG3GPaz/Db2RH+qSBAp0cgZg/3A8mmEcIyaGjvYbkcANVYp+uI4Yd
ASBN150KVlrkJOTNq1Ndt/3iKZFCMuPQrFnqJ7tmpPESqJvQK/IJB8VBEbWqrzVm
MDTSURDr9FQrCcCEJRg4eeGqJCylAv+7J/NIgvEu4dM5exrNntTzhikxnG8YGVyP
v09HsG307MEuC2MJIxvkrGx/r/T/DwSzRfUYHaN/l75icZHnH0qGFF+FygicB0wA
fTYiyt5YQjaHPUUBmvqIa3pM3surV6zMPfOF4+BtaCZ+Z8cDVllJCzvf69BOnnwK
Rc9PVsO5AFbcoQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330209121396241998041882409510360387401519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 21:15:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 21:15:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paradisier.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838763520045946555021803676677264668992962624818380129761436058189042495873484239963178335392220064649309018497180951460127151425457173148143695551441910409425213082638494199518476438411048684348516305375311052707768371924201604479602134745827237850205326438550846900374217573482058462824819730485263954442293076369737930162778466750351255447731240398723680247138110920574372404945174041285657068512202632416769725593880644887722723330254895668602750072746098197272358023491712445230617538691657934452527563400666107354016605705457090603185203515881319072916263747746237687602189686231562577206387597751175708927584126214936586499179918246190583709344486646186143344951301654757225698644758049212586638696063123398252622489731521974302425793721133113855605417799961282181876662054462266229931748595287281431504030214784806202764758863187852796444845897158947704343849035773870400706426826961195350864225809033297529881358096672066143516757345615312544233912769461519246023493437338179266000487130348598936766497682810552694530489073085051339833124384362389379125952635502921844461948121048927271042231949490266582977478148581875452285562678583294191144636647512164860323383792149090797142854975886980920525589878782569126279579111857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a0a287ac4149c0c20d7bb8d525dc7324a02956a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisier.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradisier.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cbb66936a000004030047304502205980cf81268d69bd33e50741fd4bbe719847faf9ddeb3abd20b0fd2b754cd0ea022100cccb2f356a1f7cdbe1dc2bf73c99fa5ade5aaef46a70022a3198a77ea1031dd700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cbb669389000004030048304602210083124f6fea2a4bb697c7462b85c2b44d6bccbdd42c010a6ec7ca4963b8f2b370022100a85bf07303bd7189362bba6041aa02555a72c00b6959ca25f6cd0a975472ff20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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