DV SSL/TLS Certificate for epcon.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the epcon.nl DV SSL/TLS Certificate

This certificate with serial number 06:04:c9:62:2e:3e:fc:05:3b:fd:8b:d1:3b:b8:96:5d:11:a3 for epcon.nl was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for epcon.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:04:c9:62:2e:3e:fc:05:3b:fd:8b:d1:3b:b8:96:5d:11:a3
Serial Number (int): 524302529668471122631420185754980432286115
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 6f:2f:3f:07:53:b4:d4:c2:01:d0:c5:10:ae:58:78:24:41:9f:11:ec
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 3e:89:e9:6a:3e:d7:71:24:86:f0:22:79:eb:38:54:a8:05:81:99:e9
Fingerprint (SHA-256): c6:10:57:74:2f:77:ea:54:05:d8:6a:07:1e:e8:4f:7f:0f:a5:9c:d9:48:8d:59:f8:fb:fe:3a:ae:78:17:22:12

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/36.crl

Check the revocation status for certificate epcon.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for epcon.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

epcon.nl

X.509 Certificate

The complete raw X.509 certificate details for epcon.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvslfFTloi61zMUJnmY8E
TOhbd55/412sAWJmw4yPpZNXtOWNwsVeEXQdQd75LJbAJBXaqaWE/F32huf0Mvhz
oDRdzuEC2Nw05/zOp8nBY4be1dNdfvrsqWiFXVyAc7RswE2cOl0WsEvLZ5mzzIzs
nTCpTyDGtCplyqYcj8vJ1FAs65AbRNN822m4rMtfYE7KIGk9c7kCb8TSRUWy+InU
5bZ7e4DtbBqkdLFhqds0mw8G8x9KSN4cQ5bN8LzxbbMeqekxkpGEcPg3x1KM4YsU
SFSVYXHjKQQUhT83l4gdVsatLC0PHfZf75kalKwgpuY7bR9oEySDjJ0T4dSDHmXB
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 524302529668471122631420185754980432286115
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-29 12:57:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-27 12:57:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epcon.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24084577890532549565528778635256402158731450564913539247803137084807398614856615065148287609983539003206899994973199620105685373000105727744734610265681324373928189345655566324951327715425864479026897016433889470026045509152777771847484244641304618476053069378811062053993610432256527896404549012610730809608088576466137764259702771070523662618038253109661757886042588649171460885281372709035861805751160729512383917169580619118426075069536925467670343226875477448005717945449435167545772275251673384541524942850026372519088186235383182769874378923317244475779462587717159253819691972351391433906609804759028612841813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f2f3f0753b4d4c201d0c510ae587824419f11ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epcon.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/36.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001971c540785000004030047304502201a0a2cee480d7eb60b421a7a3b52017f73cc9d62a588e90c0c5f9cc08875e6cd022100908a6425b476dd0462a61db193ecbf7e6f16dd3fdfc4d751ff1d765dc48d92e9007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001971c540f9c0000040300473045022100a80fcc31de33d4b000ece6b16d4eb12d8413d2ae589012ae69c401a2fa4cdeba022004c64affff95dec844e9e14e06e11bc0e2ae07117e8a3075f461011df0c650da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0037f67990304fd87462a184c487c89a449c2903dc0766b23298ec403ce7978d2feab65c5c5381259bffb326b6413bf8c5666b289bae55b16fa5c643d7bdf44301d61e1984233f3f93b8a262f7870743951408da57f38006a9db39ed15d95c39eec8a2c6330b0d56b6fc64abd158cdcdaa66e42ac3ff1af069d65854975be8dfa82c79ac46ee8d3f720722d1b70e4ef7b900b6b4c78e628e03501b6350b48bde3f6176b0d05641a06739514d362cb32290a722f72cb6dab480f042b93c97fc11f2ca7db6f51681175604b51b8edde378914dfd1d90fae534a57fb94c059293cf3ad1d861309f9f0dbc2f400f1e76854873a1102ca51c5ead8fe6a204636333b325