formulieren.cursor.tue.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:22:d9:27:d5:81:5d:03:53:37:bf:99:7e:de:6a:dd:cb:fd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=formulieren.cursor.tue.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:22:d9:27:d5:81:5d:03:53:37:bf:99:7e:de:6a:dd:cb:fd
Serial Number (int): 360307393507418168614769512477720064150525
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 78:70:a4:18:79:bd:a1:99:4f:50:86:01:1c:c7:72:5a:d5:82:06:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:1c:d1:1b:c9:88:d5:f3:b9:7d:88:24:19:d2:c5:2c:be:9f:17:b8
Fingerprint (sha256): 04:b3:75:4e:24:f6:84:ae:f0:c7:7d:5e:7a:9c:39:e2:9f:51:60:b5:e9:49:3c:7b:14:a6:89:c7:3d:e0:28:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate formulieren.cursor.tue.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for formulieren.cursor.tue.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

formulieren.cursor.tue.nl

Other certificates including the domain name tue.nl

(limited to 100 certificates)
peach.win.tue.nl
cirrus.tue.nl
venus.tue.nl
ernsi2019.tue.nl
anankep.tue.nl
forms.carolinehummels.tue.nl
webmath.tue.nl
sites.win.tue.nl
plasimo.phys.tue.nl
cswennenhuis.win.tue.nl
sitb2020.win.tue.nl
jobs.tue.nl
alumni.simonstevin.tue.nl
compprog.win.tue.nl
groep-een.tue.nl
peach.win.tue.nl
vargas.icts.tue.nl
owas.test.tue.nl
owinfo.tue.nl
bep.win.tue.nl
articles.il.tue.nl
studyweb2.tue.nl
oocsi.id.tue.nl
trainingenonlinemedia.tue.nl
dialoog.tue.nl
kvaesen.ieis.tue.nl
nadine.icts.tue.nl
skills-assessment.tue.nl
peach.win.tue.nl
alumnionlineforms.tue.nl
delta-dev.win.tue.nl
webhost.gewis.nl
sites.im.tue.nl
peach.win.tue.nl
opennebula.tue.nl
calculuslecture.tue.nl
vandeburgt.tue.nl
pas.tue.nl
evo02.win.tue.nl
svn.win.tue.nl
rdmwiki.tue.nl
hrlink.tue.nl
seclab1.win.tue.nl
powertech2015-eindhoven.tue.nl
bep.win.tue.nl
forms.dies2015.tue.nl
alumnionlineforms.tue.nl
sites2010.iec.tue.nl
oslo.tue.nl
connecttest.tue.nl
carlos.win.tue.nl
groep-een.tue.nl
formulieren.cursor.tue.nl
platoolab.id.tue.nl
*.dianus.libr.tue.nl
dashboard.tue.nl
vpn2.tue.nl
peach.win.tue.nl
p-e.ieis.tue.nl
bnp9.win.tue.nl
sites.im.tue.nl
openepda.org
is.ieis.tue.nl
step-t.icts.tue.nl
autonomic-networks.ele.tue.nl
lyncmedpool01.campus.test.tue.nl
crowdfund.tue.nl
security1.win.tue.nl
forms.tuexperience.tue.nl
assignments.win.tue.nl
opac.ieis.tue.nl
accept-horafinita.tue.nl
sites.bwk.tue.nl
groep-een.com
technificent.nl
acapulco.tue.nl
industria.tue.nl
vandewouw.dc.tue.nl
incapsula.com
kerstwintercircus.tue.nl
innovationspace.tue.nl
landingont.step.tue.nl
tuwep.tue.nl
industria.tue.nl
peach.win.tue.nl
alumnionline.tue.nl
gale.win.tue.nl
pathways.tue.nl
ocmstest.tue.nl
faraday.ele.tue.nl
momentum.tue.nl
incapsula.com
w3.tue.nl
peach.win.tue.nl
vandewouw.dc.tue.nl
security.tue.nl
ooti-projects.win.tue.nl
autonomic-networks.ele.tue.nl
security.tue.nl
peach.win.tue.nl

Certificate

The complete raw certificate details for formulieren.cursor.tue.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360307393507418168614769512477720064150525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 13:55:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 13:55:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'formulieren.cursor.tue.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729439698896964997371815407335530916392183343241868339090045296261497804970868197122476986340303646615176465395016215837751074653575296654023476515700438755821992080519858229252020475357490553531968511592654637593509257650375332458798873494311933751524707426749157019849565118162659363525878476804841750773699502266454822214114849435067600655063458501231671712862044522308057596901657512750939379887277524334651461978878180614001234881436422117012200387926468419067247191783333522159004266224147057579231668422589654098583581836125154616367743626383789786428037563965213379519394975735568216615305206464400136719585440847609917760983894318179607290681844621224133881628266762794135357544826554310300432631318401531106387139406545525150920929919499559185728106710213526042325135008019588702972014571962974666842615419407146103308594863857779329562319682620882619101601101308376016374972679675482665036501857025327860431352488862444528574696252575776823489970507985719418760916704410047815258386028851445888354418545924991924062867805152891945736385912051809851441541222168223448169764647199841722365179638344628278042399563928591524387867673474114724509286658137744956177978942681075388447837425320931582139355088187371495439538904571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7870a41879bda1994f5086011cc7725ad5820646
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulieren.cursor.tue.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fa9b3e3e60000040300473045022100d8a5bf6be5e6807102fda72b229f4c67f6030ebf9ae758cc05c089b7d95b120f02205785b46debb90903732e8299ac7461042e20ad05c9fe9d7aab341aebf30fd45b00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa9b3e40d000004030046304402207332a6fc7b947531ce5a7c174f182e6c5aa9b4190a2eff84ef37dc0a33fcdee70220420e4a25256b3a949092579a3afb0d11bfdc64e3b02f48511b296078baa8f90b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00091266c436196d2d8fae8750127352468805b64288fe16fc6a46b8936ec7c9d4adc8f5de6cd8bf22d0d9b62db515862ecb4fa73436cb2d877d9bb1a40018ac57eeb50f51d1a41424015be1979f94d6a997352847cc0c4d468fb5e53194aa6967358229db498b75715b52df6fb3ad8665b603bad75a54a7f1f5635e53059a0b07ddf9d7a5706b2641c42bd849c545474336f1337cfa232c011b6b30fcb29c11fa998b26a5036ad49c74e993a1fe1728a3726a31cef55f4b782fb38205278874426db43ffe2b6c97bc1e10feb440dd821a7e5fa7ac4c585724e2281f6f3b609b771361d23da9d208de9ec6c0b875820870bfb1f6c6d65ce3d92127facbe34afe69