hoefsmidfriesland.podboq.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:b2:b3:c8:4e:32:e7:b4:b4:81:cf:7d:82:8e:1a:2f:54 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hoefsmidfriesland.podboq.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:b2:b3:c8:4e:32:e7:b4:b4:81:cf:7d:82:8e:1a:2f:54
Serial Number (int): 346644985592580220337395571018389765369684
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:22:fd:b0:f2:9a:2d:76:c8:f1:67:88:e8:24:48:58:4b:51:21:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e8:21:9f:b7:1e:dd:75:5f:19:31:53:4d:83:ea:ab:d4:e9:e1:c9:85
Fingerprint (sha256): 00:3f:0d:66:6f:10:10:d8:9c:49:95:6b:9b:d7:2f:93:b0:02:0b:56:fb:b2:07:56:c4:5e:74:58:5b:a8:82:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hoefsmidfriesland.podboq.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hoefsmidfriesland.podboq.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hoefsmidfriesland.podboq.nl
www.hoefsmidfriesland.podboq.nl

Other certificates including the domain name podboq.nl

(limited to 100 certificates)
hoefsmidfriesland.podboq.nl
podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
hoefsmidfriesland.podboq.nl
hoefsmidfriesland.podboq.nl
sterretjeinvoorruit.podboq.nl
podboq.nl
podboq.nl
podboq.nl
podboq.nl
sterretjeinvoorruit.podboq.nl
mooieposters.podboq.nl
podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
chaos.podboq.nl
mooieposters.podboq.nl
hoefsmidfriesland.podboq.nl
hoefsmidfriesland.podboq.nl
chaos.podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
proefpersoon.podboq.nl
posters.podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
posters.podboq.nl
posters.podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
vastgoedtaxaties.podboq.nl
*.podboq.nl
*.podboq.nl
hoefsmidfriesland.podboq.nl
podboq.nl
mooieposters.podboq.nl
kinderkamerposters.podboq.nl
chaos.podboq.nl
vastgoedtaxaties.podboq.nl
posters.podboq.nl
mooieposters.podboq.nl
podboq.nl
podboq.nl
podboq.nl
podboq.nl

Certificate

The complete raw certificate details for hoefsmidfriesland.podboq.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR5pBq+u0/npPxKFDnFZ
NuXUCUGqf2MJdJVJp0mck0A2zvgI+Gm6Jr1AHFBkeR/3pbdOUh6RPizok/v6W8fx
XzPDl1pnKvaLsRajah9OMUOoYVe4OeHi2imkag3+2JBIGRX/CqosuHq9p6WHTi+4
CZdVq+BClrD16RitBMiu9iTIO2QfZO3h/dlcSj34swDuE8fAMLfjs8lxC4PGdNcU
ZahyOh3fJjhI4zxbDYnCW/HBLu4cP5dEzFxFSsiBrZiJ9vlbHsxzQcAcsZp6C2b7
G7JNZoESymdUfI7oNud7CbDwFO+CAVGYgz73/9QqYqMGdsWcaxmscxk5Iy9sM6mW
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346644985592580220337395571018389765369684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 13:09:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 13:09:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hoefsmidfriesland.podboq.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24883941935571836473451540424692756736641750707663013005303555721842726941471902068378500834770683492408682588254532051710035298370638912109093897341869073816556394294752652583801854027605476203953573951515163636945071021878680606549563871403902763801228004087374458433031317980784715364805427049701707644735162221261155969931012979007145679026952979104492103792031182937251649348774284729466816420634500824601028622923602202775607207511884262654801506264070126780757927943940482572641056241579907220735497593125999075178953081737748339937708305559152216189127907496658516275368029801356429664554114635810133013796577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2922fdb0f29a2d76c8f16788e82448584b512127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoefsmidfriesland.podboq.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoefsmidfriesland.podboq.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e319937090000040300483046022100883e382fe325d2d5008ef4ae85f2dc031d770dcbe425bcc691b4e6e85cb3bfff02210085b60e4580e7edeb33049c38c492b75ee6d1634fd8ac258c6b3607a6e902eb6100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e3199372e0000040300473045022100b582e9e3664f7fb36018da0ce009232a8e25c7f6a1f795b48f0f9e5340f0edbc022051723badcadb90a3acaf0253726eef1fe57f6a9645c6c69c86c9e9de9c608759
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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