DV SSL/TLS Certificate for oqapi.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the oqapi.nl DV SSL/TLS Certificate

This certificate with serial number 06:56:9c:82:c3:ac:b4:78:4d:6d:b6:6b:b3:ad:bb:dc:28:9c for oqapi.nl was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for oqapi.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:56:9c:82:c3:ac:b4:78:4d:6d:b6:6b:b3:ad:bb:dc:28:9c
Serial Number (int): 552146037680449213544399769806422752897180
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: d9:4b:3d:a7:96:5e:2f:21:79:5b:aa:9e:65:d3:7a:b8:69:cb:33:9d
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 09:a2:76:cf:24:06:1a:56:52:fc:6c:a1:a9:f3:76:1a:4c:e5:25:b4
Fingerprint (SHA-256): 77:5f:49:22:1b:09:e5:67:66:f6:82:d4:43:85:8c:df:7d:b4:5a:96:58:01:cb:eb:cf:cb:83:14:27:16:7a:d1

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/29.crl

Check the revocation status for certificate oqapi.nl
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for oqapi.nl

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for oqapi.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 552146037680449213544399769806422752897180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-16 10:10:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-14 10:10:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oqapi.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883503389731874978684101267327546752299234629215878466795952629990903323027717915736750803117340460922122668824500759343350676911953900704278383036273744511157039457220443425582920992686174224790670816027847059331753336274635391808554441019757583681201114812354247073543851466051239191410753398610487853256900894391493044431390990946279899948418846571141613148649892194330533503792595689537938323169904389862052107266456481284031445253144229644607737408636797169697178737116983534651492214695062093138130123079345489466619245166010340340036060451062809214820036096307479744550917833242504852752768208735814964144564759167070565265384864095610764796925974279623437056626328342697234171448206350266194210294320804954085157793840705187943596963809970665067493029769953537774791087269338151126286512698670347306376499833154152450792479248770463122902952024198520943045787009501119490482874236657329909767488008060624523265624029639448198849072422811905800013399089729944721259088011203304841901444449164119736211094830466958628067911018724744023339520131253542249118987903121264115686800082276990511855531249089061891315525006399077197111512863225036327790393414737839397292041626179738842158954777322135720995838583174748803298430594527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d94b3da7965e2f21795baa9e65d37ab869cb339d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licentiewijzer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqapi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqapin.site.transip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oqapi.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/29.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019812ecbb7f0000040300463044022028bf3e433dbf3ab8d829ba1a51475a85bcc7f6b963c9435bc91356e2dc13814602202a3611ff91ce2999d059e6842b401cab2d5eb183762d6256204f53ea8d2211b1007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019812eccb1d00000403004730450221009e681cb450a0faff0cc1caf80ea38487e5ca4d1abe012198714eb8f22a344a9b022039ee40ed4b8efd0f335da4fac7c9a049fbc25767d7d7b8b537055f9fb683e998
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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