DV SSL/TLS Certificate for verweij-juristen.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the verweij-juristen.nl DV SSL/TLS Certificate

This certificate with serial number 06:8e:67:7f:fc:9c:be:81:83:93:e4:dc:49:0d:1e:4c:7b:fd for verweij-juristen.nl was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for verweij-juristen.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:8e:67:7f:fc:9c:be:81:83:93:e4:dc:49:0d:1e:4c:7b:fd
Serial Number (int): 571131386722187394146661647891286213819389
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 96:c3:15:c7:94:91:7f:33:dc:e5:2a:9a:ca:5b:76:f6:ed:eb:16:d6
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): f0:dd:6f:41:e2:20:78:14:63:ad:03:cc:8c:ec:09:cd:9c:0c:e3:c5
Fingerprint (SHA-256): fb:24:5c:dc:2a:c1:4c:62:03:17:70:8a:a4:b0:db:e5:2f:36:58:71:02:68:f0:6a:65:25:45:c8:85:32:d6:d5

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/126.crl

Check the revocation status for certificate verweij-juristen.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for verweij-juristen.nl

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for verweij-juristen.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuoUICC6QY6np57AkBh86
L/dOm27UO39fhmWxCjl3FHMwJRD+brM0+VHFx8l83TVeUKJU81v4VD8TWczPnPvB
TJibvsaFfm3PLorIi95rPfqYFRpaDoNTCG19SuJUk3Hy8zBWVwcbmj6L7VCT+IOL
6UPudEBTxj+5FaRXPJ7+NdBW0ClWMvzwuwaCgz8VhxfIPO0xEwhfsMpHMc/lBcz+
xJs5Q9PwbnvMXnod/7F0yxH/DXLAJ+Bzv0Ul0CK34TQzCfQSEbIMaMm1ke+xowzv
O3nUoKCdhFB/Kp65SE7azYVbsijh3JSyAsnpQwEKhTDJJDff/zX/0JsjKS7VJzL/
xme3fVYQJmSNBl57fe9WtVefSKNos88Oyb9hdECOD3GY5zK3BmCsco3SD6VOCMey
DoQEFD+dJ56QCSJzi9m85fsP2u1YSVlYl+Lt1fXPgUacPLUUelp5tRohmicc8/cE
1tW75Sx8xACNg9iwgcDW4M1cvDpZ9CpDJFaexuHMtLwpLX2ubm+BwEdAT72QhD9a
d09MtvZ1Ri2s2edgld/uv5Y2eXQCdqevRDA8c/uw5oTL1YGAeBqSGVHYXvE5rOnZ
4zFELXCTirFrVGst+FMt5PHdhNairML7bRnG4wQGF1vfg0/wFJEtpdWPk0Y7ciQs
GwUMdhC3ML5Dx9JTPOi03zMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 571131386722187394146661647891286213819389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-21 13:02:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-19 13:02:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'verweij-juristen.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760933799226938942914466944094924074757321518481900562150207381162628417121793388471130476692359263212465072976584066225870313769172291283934375731032451183796792140415459238972806543261588751984872726034769400380461938348995616772327289169606003248043621390033401618898461316823064478156228562638791127650290121783474806828951890337347778519403905102493538044458233078505605855865601997522150446743914953073711870356906201267190048927355147010415766765990512499689177906260784267423172616755487190975743329159555921338828914519735984312211689970021060304830091008779475904563692495418976803787958998052150457773724852811655188586028412806707087312130591226589945163435202802850041571183444502154081030756470142174230225911804617159469470214654876208277125827399714421323516136476076137782737610639173475408237451448210978162390273048760320298047468774700217928967012876037120535191395938450137729644808379567910061840246087234671288081057478711637051059156436872838493836992574132577203830902577901698266901988856027844372103659351938109501103939204679815495519199523229870397288425367661041240584620253189205268468776356254599940075453266282876126368758942782228009636504772248473700681608545208078243726592483023830461823258517299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96c315c794917f33dce52a9aca5b76f6edeb16d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verweij-juristen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verweij-juristen.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/126.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196f3256bda0000040300483046022100adf828f3910f2bbd7c947b7139c95bab16b8e6d32431f70cec73c4d46de781bb022100b0140f0db70eaf2555a21c6ab9498b913479fad5a778fde3f9033cc142c26f52007600af181a28d68ca3e0a98a4c9c67ab09f8bbbc22baaebcb138a3a19dd3f9b6030d00000196f3257558000004030047304502200fea092d74b21f918b091dd8142a0d1dd91aeccd9007299da0dd52250fb55d97022100b0fd9522f197e61c75fa50b30d86385a0e5d77a638a4eb0d4758ddbb3a971d04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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