DV SSL/TLS Certificate for mail.stucpatje.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the mail.stucpatje.nl DV SSL/TLS Certificate

This certificate with serial number 06:11:25:57:20:48:5b:3b:31:fb:5c:97:b7:80:c3:7b:c3:f4 for mail.stucpatje.nl was issued on by Let's Encrypt.

With 3 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for mail.stucpatje.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:11:25:57:20:48:5b:3b:31:fb:5c:97:b7:80:c3:7b:c3:f4
Serial Number (int): 528508149648657937892352236319619864577012
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: ad:52:18:0c:71:d4:51:d3:44:e7:58:e8:6e:28:1d:72:f4:41:ab:de
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 1f:54:5f:65:16:92:a3:c0:b5:8d:45:da:83:78:42:0c:3c:f6:e9:4f
Fingerprint (SHA-256): b1:4f:b1:7c:c2:b2:2f:4d:cc:fd:9a:31:e7:b8:e1:8f:8f:e9:0f:f2:99:29:71:ef:a7:89:3b:df:e0:30:27:64

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/117.crl

Check the revocation status for certificate mail.stucpatje.nl
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mail.stucpatje.nl

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for mail.stucpatje.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISBhElVyBIWzsx+1yXt4DDe8P0MA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNjA0MTgwNzEzWhcNMjUwOTAyMTgwNzEyWjAcMRowGAYDVQQD
ExFtYWlsLnN0dWNwYXRqZS5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAKM3xI99GaaoA1tCMEfq4xd6UK4REfC5BhylcXDw1pEQTCV7H7rX67ROvmLd
ebrBjwx6Waofyr2uu8PRR6/J8oJCrinmV/T6c/wO6iO6+vFj07LK9Nc6x5Z96XPk
TKM3XFYviz7KdAF8sgogOFGEP6OH6Fdpqy80BjfbP7vj54u5NiwEz5r2E/S7Z67Y
nW8nH9YZMcOW5UFwDwRjm5cxzA4BkOdNHaST8FEE7i6vEby9w/NICdQCtzxuqAh+
UPIksk2mCmVZjac9sOkwewXcgmXDqND9FvsOukbIKKaFyisYXObRsiGYU+UXWraX
RyGN0ud0ZQgy3MiXXhmzjk8smzUWnYrTP9iDdQB+m4vWZrHjRRtRVgESQaMqlwkn
kmcjF+LGwjzvaRnEi+nuMrRhbyEw7GLBeRc6A7/YvRZxC96/292C+OHNq/vIMqy3
+2atBFPui0dwFIyV9oSdoXDWgveDVHy/bD4/S6ZY59XBxIIOgtVBp1fXUxOUtClX
DM8rWWvRch2zFMRyeAMiyXpIgUplsvZJPoHzva/Uy4VLhNyWOMks5fHf5z3CYwDf
0l+BMEf+3y2a9dLYy/wibHiaUwwAwLb7QDzLMchhCIsKfDRebBqQEIdOO86xi3z5
Br9iQWvlv3Pl4cQ2uDB469c9Ux8DixlYNNjNtKGVyrcXSfLhAgMBAAGjggJAMIIC
PDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK1SGAxx1FHTROdY6G4oHXL0QaveMB8G
A1UdIwQYMBaAFLu8w0el5LypxsOkcgwQjaI14cjoMDMGCCsGAQUFBwEBBCcwJTAj
BggrBgEFBQcwAoYXaHR0cDovL3IxMC5pLmxlbmNyLm9yZy8wPAYDVR0RBDUwM4IR
bWFpbC5zdHVjcGF0amUubmyCDHN0dWNwYXRqZS5ubIIQd3d3LnN0dWNwYXRqZS5u
bDATBgNVHSAEDDAKMAgGBmeBDAECATAvBgNVHR8EKDAmMCSgIqAghh5odHRwOi8v
cjEwLmMubGVuY3Iub3JnLzExNy5jcmwwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4A
dQDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAZc8VcS9AAAEAwBG
MEQCIGv4DlQv3I1WE9PoX72LDLNXdjtQNps7cE3HNqaaXnYwAiBsZSE1Whj/065G
H9JbkRjYqOO0D2jQH5vYpBV3zPdzxwB1AA3h8jAr0w3BQGISCepVLvxHdHyx1+kw
7w5CHrR+Tqo0AAABlzxVxLAAAAQDAEYwRAIgDJyBMW2rCKkfs4i7ZM64Zjhn/vxA
bQi0DmZUxMQ+Y/ICIC+df/rfUEiqn4eG7ivt0gBpGgLLTWbt+tih2hNm72MaMA0G
CSqGSIb3DQEBCwUAA4IBAQAOkzeXcbjGGxzPc+E9V+1jnEnG+OR1N8eisImfDC+Q
gUkvcHBhrfrgoHHo+XASs4d43onKTVLgN5YN/0MDTUIb9PHuuzS4nhtYiBOjgREU
2EJpW/Z5BOqMw6N1OQt2Bj7rq6T/+c3KBcldRQpQArRHAwv25QtVIuWGKnT/z4T4
J3Qtce9eQ/fGB4aRKITiHWGms1senE22E6gRSANI2nf7497Rda72rREu6g0nCdlz
C3RmQ9g7IETXmMphxPFrUcZ8zA1HR0sA5D6JvKfd9vKnjROaDc9xtVqbjXH7zQLL
acP2azflygNVR0jG7PNQ5LHv29L5Oh+kz39jhBt/aRQq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 528508149648657937892352236319619864577012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 18:07:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-02 18:07:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.stucpatje.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665870705092991679880891165240299144694755175810489248808465433585597125533427104917707378427286522106753962070112187546877154794728982548847409917311293654580904146347823902304604721214106484070951515621829585186838133934543450126008840739026848019016669107984637357880642593414758270695412365897282274773591257224651813089641497970734633556039586550695307417491197698410844047715967046632946055037343824863636715177910323428727795507945463842497730227917189726089495993991755650006889887823936618259171988541566938273810695758718026984263416800005138491338646133999347524311990339674472595450644691779812602758619672427660294315788776549203598385085687874200121431341672650603606396728113947149828616214455701585386682193197466545774965210844500018026521770588297350907556601659262556193650075682691803533440642784343628897715984252391566999509305163669474748140960786059155659553613872701754700347250807058624058132818358251264618108371647308117950772310960782953217292554094792338826842654005406376892513630265039615847456981662474396722770165814199465601564372264745955271524794074050182172510084619987409953408671959071618998779600968807779823644847012917403633817837910874153427246314102903700090531182848011168073706533155553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad52180c71d451d344e758e86e281d72f441abde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stucpatje.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stucpatje.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stucpatje.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/117.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001973c55c4bd000004030046304402206bf80e542fdc8d5613d3e85fbd8b0cb357763b50369b3b704dc736a69a5e763002206c6521355a18ffd3ae461fd25b9118d8a8e3b40f68d01f9bd8a41577ccf773c70075000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001973c55c4b0000004030046304402200c9c81316dab08a91fb388bb64ceb8663867fefc406d08b40e6654c4c43e63f202202f9d7ffadf5048aa9f8786ee2bedd200691a02cb4d66edfad8a1da1366ef631a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e93379771b8c61b1ccf73e13d57ed639c49c6f8e47537c7a2b0899f0c2f9081492f707061adfae0a071e8f97012b38778de89ca4d52e037960dff43034d421bf4f1eebb34b89e1b588813a3811114d842695bf67904ea8cc3a375390b76063eebaba4fff9cdca05c95d450a5002b447030bf6e50b5522e5862a74ffcf84f827742d71ef5e43f7c60786912884e21d61a6b35b1e9c4db613a811480348da77fbe3ded175aef6ad112eea0d2709d9730b746643d83b2044d798ca61c4f16b51c67ccc0d47474b00e43e89bca7ddf6f2a78d139a0dcf71b55a9b8d71fbcd02cb69c3f66b37e5ca03554748c6ecf350e4b1efdbd2f93a1fa4cf7f63841b7f69142a