tttsoftware.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:1b:99:7d:d9:83:d3:c2:22:40:7c:65:60:c7:93:64:02:51 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tttsoftware.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:99:7d:d9:83:d3:c2:22:40:7c:65:60:c7:93:64:02:51
Serial Number (int): 357840792966096043394226996187250030805585
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: eb:07:81:b5:f2:be:1e:70:8c:80:7f:59:3b:00:cc:e4:d9:0c:d9:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:34:82:cb:69:e1:8e:90:08:fc:de:f6:0c:6b:3d:c6:76:12:79:d2
Fingerprint (sha256): 08:99:3f:63:48:23:9d:23:61:fd:fd:8c:bd:aa:f3:1e:20:58:cf:b3:73:4f:e0:32:1f:92:ac:1e:d1:87:7e:7b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tttsoftware.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tttsoftware.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tttsoftware.nl
www.tttsoftware.nl

Other certificates including the domain name tttsoftware.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for tttsoftware.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mlXGfX9kBlL6W10dZGQ
a0/aqIJ8CDGmiT9yg2RCxtvUg+X3zYlwOsazDMygEI08sYFZ1YAEnNq34Egh1M6A
MBPF+IAdl0poaJskzDOaRJ91KIU5wMYjsY+/kvKTW+4Gd70+y5ZBPJKFcxGYi17i
IOOVhieUmTXbtTlHb+DfhilsEDx06dGFem0LeovTV7kYVsnJDGUQpfR7ztkBxfrN
gN9eQRFAxYgy+UFgIWdykdJqE8OdMdLwEDF/j35gEthI9xi8DJwV0Vz1VBT2LdTh
jIvRjsdSfCY0dv1oPRSlxrlrbwgjf00sazOWJ2/vYw8ggi2CJHpx5H9T06fLt7b3
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357840792966096043394226996187250030805585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 06:53:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 06:53:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tttsoftware.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26561989251182503189133001651006195047154283804796896805118330075618927511960452770033885067000077757693052084109806501404345767049265321628760844084317518212970829807102777168377104865027622848595266990896111358408969664662254795507799958827781984497735422939243110368609552751406057699856555253956849974601897506710498421718441971366863574660133302777473938107314205032899553619725944413564636424543243638802469775544159276910124072396354507683932425252257228204822464252907901711291999872818575984084089423626590771512970548013459368070257262453330634119228016602369680947054611372343578372451060565203624840853409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb0781b5f2be1e708c807f593b00cce4d90cd90f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tttsoftware.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tttsoftware.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aac6dd5e90000040300463044022075d6f0e57210d0740e1cb4308728165b90fee2cbb2c266f23e9dff8e4c41500b022069b0c86bbb9e2434ecceede96ea77f186fa4200cc1597fdddcf648a1d3e968c2007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aac6dd609000004030046304402202418f9245e756be332c6bc9d31d77c10d4a5375c8dab7c08adec62293745e44c02203e083511a1e943ea42dbf9cc2a37349c0ac9a7550512717a619710f76091d8c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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