portal.ebmpapst-hs.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:63:67:20:a9:d1:ef:a9:e1:12:2e:36:a3:86:1a:bc:22:c5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.ebmpapst-hs.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:67:20:a9:d1:ef:a9:e1:12:2e:36:a3:86:1a:bc:22:c5
Serial Number (int): 295161892201879048543431184362094152393413
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:73:a3:61:8e:03:19:c9:67:38:06:e9:a3:4a:68:c5:1e:cc:46:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:37:c4:42:5d:18:5d:47:8b:18:3b:44:1a:3d:93:e2:de:63:80:69
Fingerprint (sha256): 05:bd:e8:4c:e3:ed:28:3b:6c:40:e4:5b:b2:c9:18:63:12:27:34:2d:ce:a4:fe:63:16:26:71:cf:61:43:5d:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate portal.ebmpapst-hs.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.ebmpapst-hs.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.ebmpapst-hs.nl

Other certificates including the domain name ebmpapst-hs.nl

(limited to 100 certificates)
portal.ebmpapst-hs.nl
portal.ebmpapst-hs.nl
mail.ebmpapst-hs.nl
ebmpapst.nl
mail.ebmpapst-hs.nl
ebmpapst.nl
portal.ebmpapst-hs.nl
portal.ebmpapst-hs.nl
mail.ebmpapst-hs.nl
mail.ebmpapst-hs.nl
portal.ebmpapst-hs.nl
portal.ebmpapst-hs.nl

Certificate

The complete raw certificate details for portal.ebmpapst-hs.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295161892201879048543431184362094152393413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-04 07:36:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 07:36:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.ebmpapst-hs.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877292484305561929468661354952708817160047442207012500805641754537364581843959476525069905827039662781566373939341444446203126659552450663351845813905102054383182068032307698346383219201101818079536982225269103438978178536780062017479935687262364208761953190427916078096703465088146304735069865427540900654115533785881812684921045425336333740836916160701593395517385259610536718763388991830775417613231011777528366634614854294946888119422787291142164202346719719215476820966443771560057592934141775041548910480965470733288842936134147240546421844027712551720075656481947813375615439282174676224125820911495626686380918448145997759997568291027326190779842651961352251636956359881464330272942321898111348160411770980235305036143151010013876943551114384691672614344893113446050457299992914771444037890874842753793876595265142682086376416529190815240088256039986435676398244394939343251332487639181934563745669104308863847126938400126885398102574246421557524271153669683527102636179140977624466007077380153099089845111778974978865921171023945233671990228284021029751480683486188413395536229935964878432371247229141579172687753024053721397842942812120301283530451382831885226237695730738331588867841675723747739754655026591584381886596029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f73a3618e0319c9673806e9a34a68c51ecc4614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ebmpapst-hs.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e243b98df0000040300483046022100da1220bc92979c94745e570f4780a3c2d609595cd606a6559cfa7e9cb6031ca7022100e8f38dae978d7b5e1eb284f6760d9ee0fc944c49cadaa57c5a0f9e3e3ab31d770076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e243b98d300000403004730450220160f35ea4f603cee2d467f7f3523c830e4337c11d3f2fb13d5812bed359df8e0022100c933adc9ac977e155aa0d69a91fd03fdaaa7259ec8795ad552b9d12644ff56d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0034c59cd6aa209daf65d78413839c3531421ee2c0ac7a00e90527f0aea94e3c366478134ae86d71283c67eb06a47a1bfc5864582ae978430523528e00151db43c9f21902bed77e2c569704a37470e02220355fa69d904096192d4f258a0be72f33919e979f14abaa34f7f545db0e55593c4c6bed1a69b9b759204fa2766a5c27d7b18ba565cf404f363872e55bbaf22443175a4c56c1f9e3c80702e68a692a0b1725f29ea19084af5df2a19685134399cdc035b2b5ec6bc0a01a4c6cdd6e5fdd12d3fece1948f5c199d1ef946958fcd725fe11ff5d434b42c8051de3269069a06aaeeaa4d7ca32fc91aa58f88daf021149977ec17a9280bfc609b41bcebadb97f