www.site.nu

Issued by Trust Provider B.V. DV SSL CA - G2

About this certificate

This digital certificate with serial number 36:d6:f9:d0:76:9f:47:0f:66:c7:6c:53:c5:34:04:b4 was issued on by Trust Provider B.V..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.site.nu

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 36:d6:f9:d0:76:9f:47:0f:66:c7:6c:53:c5:34:04:b4
Serial Number (int): 72894530136272808418593786010340164788
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d8:da:ef:d8:e0:ac:71:71:02:de:e6:62:fa:cf:fc:40:3b:fb:a0:52

Fingerprint (sha1): 4e:24:8f:4f:81:80:d5:39:14:29:bb:59:b4:d5:8b:85:85:6d:74:55
Fingerprint (sha256): 07:b8:89:c2:78:13:68:01:82:01:ef:a7:df:17:71:f1:97:5d:c4:b3:d7:d9:bd:55:aa:ae:5b:82:3c:8c:f2:2b

Issuing Certificate URL: http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt

Revocation information

OCSP Server: http://trustprovider-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl

Check the revocation status for certificate www.site.nu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.site.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.site.nu
site.nu

Other certificates including the domain name site.nu

(limited to 100 certificates)
eos.pro.site.nu
mail.site.nu
www.site.nu
meet.site.nu
swf.dev.site.nu
www.site.nu
app.comm2me.com
www.norso.app
swechchha.in
yarb.iolace.com
verkeer.dev.site.nu
mail.site.nu
site.nu
site.nu
joshuahemmings.ch
www.ymurugby.com
www.todalacomida.app
verkeer.dev.site.nu
www.torrentseeker.tk
cmsfriesland.dev.site.nu
verkeer.dev.site.nu
pro.site.nu
site.nu
boutiqueincrivel.com
download.site.nu
crv.myet.com
meet.site.nu
site.nu
aceada.dev.site.nu
verkeer.dev.site.nu
yarb.iolace.com
site.nu
vm.dev.site.nu
verkeer.dev.site.nu
d1.site.nu
verkeer.dev.site.nu
pro.site.nu
startdock.dev.site.nu
dev.images.hilizzy.com
gemeente.dev.site.nu
www.site.nu
ace-ada.dev.site.nu
demo.icenow.net
sitenu.pro.site.nu
crv.myet.com
startdock.dev.site.nu
mail.site.nu
swechchha.in
site.nu
crewchiefga.com
swf.dev.site.nu
meet.site.nu
s1.site.nu
gemeente.dev.site.nu
wijn.dev.site.nu
ace-ada.dev.site.nu
ace-ada.dev.site.nu
ace-ada.dev.site.nu
www.todalacomida.app
pro.site.nu
ace-ada.dev.site.nu
www.parked.buzz
startdock.dev.site.nu
startdock.dev.site.nu
www.codecenter.ro
www.parked.buzz
www.site.nu
site.nu
app.comm2me.com
mail.site.nu
site.nu
meet.site.nu
www.torrentseeker.tk
www.codecenter.ro
cmsfriesland.dev.site.nu
swf.dev.site.nu
site.nu
dev.site.nu
site.nu
site.nu
site.nu
download.site.nu
pro.site.nu
site.nu
worknesty.com
site.nu
www.terron.me
agenda.site.nu
getawayparty.com
meet.site.nu
site.nu
ace-ada.dev.site.nu
rodrigo.dev.site.nu
pro.site.nu
dev.images.hilizzy.com
site.nu
s1.site.nu
verkeer.dev.site.nu
getawayparty.com
meinnovations.in

Certificate

The complete raw certificate details for www.site.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72894530136272808418593786010340164788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.site.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1008285826607168159145671410815654337283829023924570695987162442493504883893011504024960785639635422897316447599984353348007601585234274539135986921105046982915209676006577879292988374559208364530373266369013286872547510750051804743763883220698552158197630181086786785750605171222782300277196307727473164646672203076402680488562611363737524771561787804328818184824622010035750730135446398666110077263720505785984239849449455808754875967187923532273463063149340798388995031764612524052254009321776570610022890319664117489766593178297531959119621677121993607521861383594679682308193001621128836638253919302690886835563868985734903825449883752419182582691427154658647841440070373962592131996639331379429294032083067085640652176899520426595501980412604950407781906150194104044040210159519822317461229065312572320682294178496441686873745529721450674337966731746892458942699740974568523027002698472809432393560676762394050172344117603419546508627765986369639618080735899419313387404708586758089901358663361405307285501575516413654984808854739327700320460548793664839419112309073837109297170510993589148632678373342534212611824988588202778240742321507183421358208824035560697272199873914415902193389604113154336934155088369060998235330094013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.site.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8daefd8e0ac717102dee662facffc403bfba052
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a1410a2fe000004030048304602210085a3b8b7587130732d0b35aba789fa3a071b8f42a2410dfee8c5bfdbf11fb78a022100d5924fb25ace08b8ea3fcb96b610440312203bf3b18c7eaaaac576f3c2cfe06a007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a1410a318000004030046304402200d1cf739f75a1a06283e70d7580b41f7c2682cb46e71bd84e9da92974933c10b02200b49c09b94d5165baf20a0ef4bacb6469a9cb725de0332d0d2b9420b3ac81dac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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