www.barisict.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:f6:3e:0a:d2:c0:c9:42:9e:dd:e0:ec:0a:02:22:af:bd:ee was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.barisict.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:3e:0a:d2:c0:c9:42:9e:dd:e0:ec:0a:02:22:af:bd:ee
Serial Number (int): 345128788391118963080152742123593102507502
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:0a:34:06:21:fd:da:e5:37:40:49:82:43:44:8e:c0:45:96:fe:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:29:1c:3c:16:32:16:44:28:18:0b:50:41:82:db:eb:3f:63:fc:2d
Fingerprint (sha256): 18:06:e0:02:3c:68:ab:a4:f4:bc:cd:3d:37:32:b1:ad:ac:60:85:e9:46:08:32:5e:48:43:1c:1a:1e:72:e7:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.barisict.nl

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.barisict.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

barisict.nl
geocaching.barisict.nl
www.barisict.nl
www.geocaching.barisict.nl

Other certificates including the domain name barisict.nl

(limited to 100 certificates)
www.barisict.nl
barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl
www.barisict.nl

Certificate

The complete raw certificate details for www.barisict.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345128788391118963080152742123593102507502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 20:36:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 20:36:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.barisict.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668164084814884328380474086526065535612900790230206147272950191493235189948065968238452860679446095220126504847620011022955251738816932361870053406328695512331672984347905819813341038800255109611095109134968297732459083315675883207134498995533693235500183428580433368232920956747820172522925900733941768918169391522887054745893102960967315859241564374560047001455738151647849083239184339298653019593707829610724551901687631044178195487280656330671838821641013821373360644085110315229913478217106948119629871279791400961160137022249345552388468664060402709494643328323260108120619612084205689814681383008917362218630027402329007941519517541131192290621523922796812144507156100685130994031147257518304379754467173094938416140223345188726113971735273622112037529857206215878354476406442391434941091170312625622003824610891717235336242111402621894469534114439135992461835232399254208152342249252150519474435488532039645426042170944420309325081766634010715494198035623624197315440080630600385798144247941761772205489800171744860344975877074808023415692704529835634355584413177954498566734897995284145077064408334130861348395943138051924003155568882362451623440579286914359498055874620890013295809081861560235105841870496919255108908187507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b60a340621fddae53740498243448ec04596fecf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barisict.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geocaching.barisict.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barisict.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geocaching.barisict.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001891dafb7270000040300473045022100acd5e0d1a86b41cfda0f97cd7f7b0f9625ab04681588c1f320afba2cbf7f950f0220216c162453d2e4a3280d02e3729fc0ed2ea0c4b2b30f0909a312f5993b0e1d46007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001891dafb7100000040300473045022100f67f1e75d81bd89f653a763696b0222af88942333b4e577bc5a4459522f38c7c022046aef67cb8b437366a94949ee40c4bbf44bec621edc3d8de072f0fa21ec1b675
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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