DV SSL/TLS Certificate for www44.totaalholding.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www44.totaalholding.nl DV SSL/TLS Certificate

This certificate with serial number 06:92:a7:04:6b:b0:c0:ad:7f:aa:b1:9b:5e:ee:f4:99:38:11 for www44.totaalholding.nl was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www44.totaalholding.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:92:a7:04:6b:b0:c0:ad:7f:aa:b1:9b:5e:ee:f4:99:38:11
Serial Number (int): 572576945189723625697662577708270339307537
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 30:f7:85:c4:f7:df:38:7a:00:e3:fa:3a:4e:cc:0e:10:93:eb:33:8e
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): ef:fa:04:51:ab:cd:75:7b:1f:34:74:3f:be:19:99:92:53:89:84:ae
Fingerprint (SHA-256): 65:27:5c:97:60:7c:1d:5a:df:54:47:0d:0a:ac:3f:b0:4e:ec:56:f3:5d:68:d7:bc:03:76:1a:f6:97:c3:5f:9d

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/18.crl

Check the revocation status for certificate www44.totaalholding.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www44.totaalholding.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www44.totaalholding.nl

X.509 Certificate

The complete raw X.509 certificate details for www44.totaalholding.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv5bOo9Z4tanlQLQG3JS
Ddtl9JsiW5KIBeA3SauefE6MlxMcnxb446ytm0rJbupwqAkmFInDmVyKTT1qdRRa
245CpzpAWyWfVt5ixVyOtt/U9JyS6ZJiWyRqGYPzKtin+X/p7vx8i5z0LegyePop
4UTwi6nb9gFu+e/+jRVd6ANbrRqTZsZoghrdNxIHtMJQqz8vn2duL7+B/e55hTuS
aD/uZIQVFgPmZ3DZZDoKBcgOLigTnOuGukf+vtJjz9GY1cmowtkubGtnElXpu4AP
0cisZhLJ/2CupNnOZYbrlB7lt+VlJeZah+nej8CZdCunVAtKfFJytsWDNiWRsQNB
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 572576945189723625697662577708270339307537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 10:53:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-11 10:53:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www44.totaalholding.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24615658960425566481894867065433793166939383368534972667264729685974242401871074629509297625581715777286601421990068265115841401434108823348936974653487325110334264534569712682169950023577378037358041463770978858815734612091535343635180321963087362045808254663570797340800883753342480251935204091516530938281433310353348433995011676134684420566846347684777018346295085883682154631522413443307360981336441146841506260658249033740954142184851994222862818741163493867103156483404767954596292747263049337801460218070831577754853794211795533656266497713348602055237701154390043826889512060497712280789016168345763613720867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30f785c4f7df387a00e3fa3a4ecc0e1093eb338e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www44.totaalholding.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/18.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196c97cd7620000040300473045022100e18dd27dc7b24e7f979859b8fb396b12aac5e437ccb42b54785d6e6836286d5e022025662b1b380c25f3c5e2945aad8d003d47601c23db40f16fce8e07a75affb14000750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000196c97cd7720000040300463044022016474962194b9f9e0164ea52c1cf9db247112e1cd8588a04e25334fc18e4c2bc02202a72b3f67b0d233cb4fd527ee0d7d24130c9df337fe881ba65a7fe2c81937e5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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