dataintelligence.zuyd.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:18:ea:7d:20:eb:28:58:59:d5:00:07:6f:77:55:b7:9f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dataintelligence.zuyd.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:18:ea:7d:20:eb:28:58:59:d5:00:07:6f:77:55:b7:9f
Serial Number (int): 305946966869196693192669961050258849249183
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:34:2c:05:69:00:b7:0e:d1:97:ff:e8:a2:1a:38:e1:e7:0b:54:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:25:da:97:ff:66:a6:32:10:60:db:c9:e1:79:f9:06:79:75:41:4d
Fingerprint (sha256): 09:99:dd:b3:5c:d5:10:8d:c4:e7:18:7c:7c:98:a5:70:06:0b:a4:a3:0a:f7:c9:df:90:66:5f:2d:77:46:42:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dataintelligence.zuyd.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dataintelligence.zuyd.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dataintelligence.zuyd.nl

Other certificates including the domain name zuyd.nl

(limited to 100 certificates)
desktop.zuyd.nl
print.zuyd.nl
gitlab.services.zuyd.nl
vpn.zuyd.nl
moodle.zuyd.nl
guest-networkaccess.zuyd.nl
osiris-basis.zuyd.nl
osirisdocent.zuyd.nl
account.zuyd.nl
icto.community.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
regularstudent.zuyd.nl
events-api.zuyd.nl
rbs.services.zuyd.nl
hybrid.zuyd.nl
idservice.zuyd.nl
osiris.zuyd.nl
*.test.zuyd.nl
qmp.zuyd.nl
account.zuyd.nl
tol.zuyd.nl
community.zuyd.nl
osirisacc-cursusinvoer.test.zuyd.nl
gateway.services.zuyd.nl
vpn.zuyd.nl
cardsonline.zuyd.nl
managementinfo.zuyd.nl
magic.zuyd.nl
exchangestudent.zuyd.nl
acceptatie.zuyd.nl
betalen.zuyd.nl
hybrid.zuyd.nl
direct-access.zuyd.nl
moodle.zuyd.nl
crmzuyd.nl
www.zuyd.nl
desktop.zuyd.nl
print.zuyd.nl
sorry.zuyd.nl
account.zuyd.nl
*.community.zuyd.nl
covoordummies.zuyd.nl
alumni.zuyd.nl
crmzuyd.nl
exchangestudent.zuyd.nl
desktop.zuyd.nl
centralerepro.zuyd.nl
dynamics.zuyd.nl
vpn.zuyd.nl
desktop.zuyd.nl
vpn.zuyd.nl
rooster.zuyd.nl
exchangestudent.zuyd.nl
webvpn.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
osirissup-basis.test.zuyd.nl
blackboard.zuyd.nl
sts.zuyd.nl
api.zuyd.nl
crmzuyd.nl
cardsonline.zuyd.nl
osirisprj-basis.test.zuyd.nl
help.zuyd.nl
gateway.services.zuyd.nl
sts.zuyd.nl
hotelschool.zuyd.nl
www.zuyd.nl
covoordummies.zuyd.nl
facilitynet.zuyd.nl
netlab.ict.zuyd.nl
*.test.zuyd.nl
covoordummies.zuyd.nl
digitaledidactiek.zuyd.nl
rbs.services.zuyd.nl
facilitynet.zuyd.nl
osiris-basis.zuyd.nl
magic.zuyd.nl
test.crm.server11m.eyehost.eu
rbs.services.zuyd.nl
dataintelligence.zuyd.nl
print.zuyd.nl
crmzuyd.nl
sorry.zuyd.nl
crmzuyd.nl
www.zuyd.nl
crmzuyd.nl
covoordummies.zuyd.nl
covoordummies.zuyd.nl
crmzuyd.nl
crmzuyd.nl
uaportal.hszuyd.nl
garfield.services.zuyd.nl
netdb.services.zuyd.nl
tol.zuyd.nl
netdb.services.zuyd.nl
print.zuyd.nl
osiris.zuyd.nl
vpn.zuyd.nl

Certificate

The complete raw certificate details for dataintelligence.zuyd.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305946966869196693192669961050258849249183
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 01:19:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-15 01:19:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dataintelligence.zuyd.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838907189679359282260729814321986466100823555135621045873593375248577221511092396850766795528107843930426061138160380451481005972030618448455536281470812629135380335693953099022489034864122536013310704786728382092903590723148036187802319387491427456042489978864999158775853657280390817472654644306911653808550514081096875917222837968612714532672631888033590204395797487895199519195145577303075338595325300153085641084863909781872090423238800129963459972130985301959255171317519171512897535845339948057638507709413798073808142209298754377255541739424189219088295170054859390748502635580142127989567661534570195172685950960383561949817198498881276876010071724544413143175161877837282675218430141233646122091207712630304014983250470245231633603296713957976388817322002823954408435807052725807036714061526027176147546698400409411027919981181711243379124030461725214573408049387821031054543815251277105407885791482705863881144615895134873485719584330565749956007174337480773535907025882208683638364516560430886015535455240347422097234589959584770527803107554155995258212395913554703002992878787407956944971542859815978528301235932308886596411003856412678737532509125076018476572588259371497363582959908408002545225879387846713536734824377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5342c056900b70ed197ffe8a21a38e1e70b5401
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataintelligence.zuyd.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e64a123e000004030047304502202730274877a0b3b25db196a106325003444148845bf7d8d53d5d3ca101cadd57022100c36bd841050138c516fd54abf2dd52607311996c5868de38bb3c885526170456007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e64a1234000004030047304502202fdc139f7fd6365b81db94fa8608fb1337822e62a4e1a39949d56e393c6160fd022100f338e0c8e1ba763d71dbfc262e3422db1f39fba18992e2cbbda6aca2b38a03dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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