Issued by Let's Encrypt Authority X3
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
RSA
4096
SHA256 with RSA
Digital Signature
Key Encipherment
Server Authentication
Client Authentication
8 extensions
No
unhandled critical extensions
This is not a CA certificate
-----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgISA4iYr9cFAKJH/xOST7p+53FcMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjEyMDEwMDEwMDBaFw0x NzAzMDEwMDEwMDBaMCExHzAdBgNVBAMTFnd3dy5lbGVrdHJvd2l0aGFnZW4ubmww ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDPWj+Rtr4w9Uyb4+OxPD72 oOXnNAUjvzdMjt3lnBjYdNNrX/MF3F9jzX1yXXSGOwJwyYhU5aMC7mOGSX7z5OqH TvqZuYiSbqyoDD640W4eC1w8WEm7Ve+ZuXv0LpBYMXfUikFrAoBqHWIkMub3Rn9Y WQDQT0+1KxGypOQxSocoI+pCvYuyx0yLDOEF++bLLV4buKzwhVSWonVGSDSvyoTg QSC4Wons86cI87dIPsPkGaqjrZolCDL63rnwuovR3gmln8Z4B9VsD1ksL0ixIppK Ie7pVsNep1l16OcBBUMRrIOWxq5FPiIxs2in+MDWa7/c1klg3XPdwC50zDuAsCHZ /yFvKsXgfxQ04YUIbJ6WQ6ts+Io6xu0r9hr08gLFcoa9LmVZcoVcfGW4ujAxYx+q wQGOJS7X21L1lMF/Rk+plt+x0JNstlSJ2YctQUKtRpS2Bd1M+WroiLOcF8TprHMW R4M2plqGXiqKD7IUedTgeqfkAtbmjitXVWjpJmifkkcBIHsgCbIXSLSJ+xLv17w1 m/goFsVHvHbgbdFtOzq83pqWQUNCUxZ0ER/m6mbw7fxGt/gzanGC+DLrI6qEWuXY GrjQFHymdw7jHHjRAnn0R68jRf6JxTVR1n64tyX9REWd4xKWvCUnW0b9Ivl6BPUf fmRvH/FbMUUNYytP/E2QsQIDAQABo4ICFzCCAhMwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBT4gAB10v4en7RuzOWwB6qPSh+BxDAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8v Y2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYghZ3d3cuZWxl a3Ryb3dpdGhhZ2VuLm5sMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD ggEBAArYuxnZKFcTW+DsNNKwL/yu1N1Yqs6YFjVjODKvTNDoNkYekezk7Q10P1tl lMuIuOATEdtcAg+Zpk+8t/etvlNCaP81GX/+E1nXKhBImK3nV3NPgTgSpo+vTGra TeykxnWWiDWNnwvigCjFeQr3hgy91sqvWL8a+PVUwoEZnIF2zf9kZ/rbL1TNIOUB CLyUlQkjO+zgbpiNmkaIy6am9P7++R4kLCALEK6eLhTC1JQzmkzh6aNoSjnXDf/r m+eUZVmiLhsUP3AvcmdHoj9MFW4/vR6/KGH3p4KVDv3s3UZUywk95WP6oh6Vy1O2 KiKeHuR5TeugwbbP8F90iZGVyh8= -----END CERTIFICATE-----
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz1o/kba+MPVMm+PjsTw+ 9qDl5zQFI783TI7d5ZwY2HTTa1/zBdxfY819cl10hjsCcMmIVOWjAu5jhkl+8+Tq h076mbmIkm6sqAw+uNFuHgtcPFhJu1Xvmbl79C6QWDF31IpBawKAah1iJDLm90Z/ WFkA0E9PtSsRsqTkMUqHKCPqQr2LssdMiwzhBfvmyy1eG7is8IVUlqJ1Rkg0r8qE 4EEguFqJ7POnCPO3SD7D5Bmqo62aJQgy+t658LqL0d4JpZ/GeAfVbA9ZLC9IsSKa SiHu6VbDXqdZdejnAQVDEayDlsauRT4iMbNop/jA1mu/3NZJYN1z3cAudMw7gLAh 2f8hbyrF4H8UNOGFCGyelkOrbPiKOsbtK/Ya9PICxXKGvS5lWXKFXHxluLowMWMf qsEBjiUu19tS9ZTBf0ZPqZbfsdCTbLZUidmHLUFCrUaUtgXdTPlq6IiznBfE6axz FkeDNqZahl4qig+yFHnU4Hqn5ALW5o4rV1Vo6SZon5JHASB7IAmyF0i0ifsS79e8 NZv4KBbFR7x24G3RbTs6vN6alkFDQlMWdBEf5upm8O38Rrf4M2pxgvgy6yOqhFrl 2Bq40BR8pncO4xx40QJ59EevI0X+icU1UdZ+uLcl/URFneMSlrwlJ1tG/SL5egT1 H35kbx/xWzFFDWMrT/xNkLECAwEAAQ== -----END PUBLIC KEY-----
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 307818215364952323562063607334728215523676 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-01 00:10:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-01 00:10:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.elektrowithagen.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845924529157424476187186739635257137119335345340726489443728302808240702721458712694425952744927479056121218157932255935915010775342199722867088714802989889789301061794634020974541059027442684456502607829411822465671390596602917410157173225250422604872415649942745040271361213064259147870798934737222478932806986223004649409987952288777030572052413696323978633709957229482919820201972187825407158644411639306046334164754662616466435021375259830667613761400464787524783563056372685617040747512488622825061703763981014392327023559639015782128494983388769328601208199519325730121134636209389393887886421156056677048588566807299691433182441544609799298949371075844452454184280462484500046894892842686381364082953502007100842130537463597889276959087306610042996568622209548757983479468695008526662023643842307886665792444484716547504176650098941333881027953375849052481607134544064644552416727528456312898121041916121485319345098331252058657735569777223293390624757006322087520563500197322925029090374822718512670858131610565318021815744073818811862735708918413327309459043030969885554060396035101311988921960286931083435169227146732999700022278119732915843799732643516931868082945998501515475793610217078358017388272267646081068113432753 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f8800075d2fe1e9fb46ecce5b007aa8f4a1f81c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elektrowithagen.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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