wivodeurne.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9a:7e:2e:36:6e:a7:13:6e:60:fe:3e:ac:3b:06:73:1d:eb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wivodeurne.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:7e:2e:36:6e:a7:13:6e:60:fe:3e:ac:3b:06:73:1d:eb
Serial Number (int): 401020350910006825923151617796362973945323
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:d8:9b:67:8c:a0:8d:bb:2d:b9:87:61:4b:37:3f:b1:6d:74:af:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:36:fa:f1:25:06:aa:d0:98:04:db:37:7b:6b:e9:57:29:a9:8d:42
Fingerprint (sha256): 02:9e:77:2a:82:64:b1:2b:2b:52:ed:e1:78:2d:84:c9:c8:41:0a:cf:96:7b:5f:28:17:2e:3d:f3:d5:2b:aa:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wivodeurne.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wivodeurne.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wivodeurne.nl
www.wivodeurne.nl

Other certificates including the domain name wivodeurne.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for wivodeurne.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxO1qUetXfoGdBWv5LJ2D
pnRUMpYhzBx0H3LrxRhtzMEOMmaY9nFOlqAaeWYyjN6rsWvA7dPzXgN1e1ePAxeu
KaSjE4QQ/WQVPc+5YSy6KP2nbIWAoc+3XWuMb/zLkn0TE90IPIS/80ffJf711/eG
TfwHh4Mi53iYUxyrGJKJUdih/WKUVm3WR1dC6HmMzVe5DThyUEQtZA4xpgFciGuK
0l1rUju0uu2+041pEQXz9hDfToXrnPyoj4IY5ggxz9Ewd7C/qYFNkQtC9czhRgQH
YQ06S6dNcPLEORjAnHl/VuOdaXndrmEHoKuPxZQqD0ITcVTQNa0+/e3352qgqqE1
BeL/huI6O8DvL6V9+UutrJkPd/LzpsXo7JpdNbdr+sgH2yxU0XX2Do4GlU9lKguL
pRIwCwEB9HF5SX1yA5g4Ev5pmpN7jwUhNEq+EHFm5vNGEtok/WrwKnBbFM8JRVlG
7ZzUL2ijX+QqxOqfWpoA7tDhXLbHj93LEQ/xuVUwPa/1AKF4hjA9H68DdPVPkVLb
IDUfc2Ta/y5ihXJ4PuCcj4oNzW2oSUpl1K1y6Xoygtp8CJWfvDFNL0X6WCAl0s/v
dYYbXSyxqXjXuUDh1p8vS9nz/aPMAfn+iPtRSlf/DiL/Qm4N7LbbO0wNYYxScmjU
GUCS/WLlhHu2JefBkzAws88CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401020350910006825923151617796362973945323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 23:30:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 23:30:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wivodeurne.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803393713782157510072112822213327423126897395429275812818823936802445798716202507274151314114846762635651568938821976291946965558959802693226370456677009485096076900505276576459747003391033646442923871217494735756198076890126464683349388366608656940416556696205951429737198924470642720763058692200711042196036468127101158237397014351844432570577334179528160633140403465194248358630015954790656017864148607232563089146636329336656056513408349572767130390572738765267188270070817732616803006003597759063794255613163107259831712978519272413313481556168147689471601662148756761864210811996930217374739740107426256726236659101945951571698104835350238399227681862151673772508903622488397568676439697987816460520137478539615117884581670557666105653919286675645012633014118359392444128908337833648488330475466007718182068625339159360235018034436105665354611241321731080190531942774073178138226481818821529370660435361544209378028775053215544080641593149375078137801147731031406834204167888303308892982422493715211982979284215166990622629160185518463362701990832447090361108635809450659932720404067165964807294860705579157218416694880140053956787742734460751647154455017871285128974489141896086074140250563299465394195992070344880074787959759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ead89b678ca08dbb2db987614b373fb16d74aff3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wivodeurne.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wivodeurne.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017022340cf7000004030047304502202c883d987ea3f60ebb83627ac1a8e8a907dd6e8f7fdd06bdc025e60c0eee7596022100a405a5a471bc49da1c774be76a955612b3c1301f5883ac4db4fd01868ae3ce1b007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017022340d01000004030047304502202a08e2fa13ed83196c3fe0fd6b8adf02fd586cae528a6e587c4274012c08b923022100ab2696c67adcb965d048a75a3ca09aa3185779feebef80a661af56e57d23f5d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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