groep-een.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:11:c4:65:0d:9e:fb:db:a4:ba:e9:4b:3b:ed:72:8f:7e:e3 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=groep-een.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:11:c4:65:0d:9e:fb:db:a4:ba:e9:4b:3b:ed:72:8f:7e:e3Serial Number (int): 267382711418360570142289836849272533778147
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d3:94:e7:72:28:cc:59:31:e1:9a:3f:6a:68:2f:38:12:c9:da:c0:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d8:9a:d2:4f:fc:02:f7:d5:d9:69:c8:43:3e:73:9b:1f:42:99:cc:d2
Fingerprint (sha256): 19:c9:2d:10:72:36:df:2c:ee:db:85:29:e4:39:1b:be:39:4e:57:5c:eb:02:ba:13:19:94:8e:dc:e9:a0:bf:f3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate groep-een.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for groep-een.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
groep-een.com
www.groep-een.com
www.groep-een.com
Other certificates including the domain name groep-een.com
(limited to 100 certificates)
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
Certificate
The complete raw certificate details for groep-een.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgISAxHEZQ2e+9ukuulLO+1yj37jMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA0MDQxNzU4MDBaFw0x NjA3MDMxNzU4MDBaMBgxFjAUBgNVBAMTDWdyb2VwLWVlbi5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDAkVr4WNBLW1taOo/eMH3c5m0hFC65pFUj jTODN1xZxXkU5A7MXdQ39/pqMWRzqRdIBr2Sgjv1kCx4UXpPLX0zM47OptIBuNth H634sTTDCIrssDyPM43ObAyVGx1nH0UyNYxjNCNRcK4t7JeaeRRJ0L1lX0Dvv6kq QYut5ru3vGqCMWGFqKq0H5mFYV1UyJQdobn3Vwl2NhGQL4BYjD8ucQbEmVA9EEt/ l0ZKt2ISO1rRc1zh+SxWBv4uv9ZKrb4mea6OtDScX66BbWubj/kXePDemZpsY6wk Me+qr7J0t4Yexpk2Ven2aZm1+Ditv1refZQcmC54dygLlCWV+Ym++MIja8xXEN5R ero69rA1Sk6ZW04eiZRQgDbFZG1Aavso2kt6RxZwvXRaH2y8PO/XeHLjiU59KO6A 8h9hI58M/fnxkgWm+p1jVBCKqPZg5n4brB/ZLpBqKhLw4igAfGdlF3UENQsPbohF GM+IxPEy5n+68WJq/gIrdkkUMPD7Qa9zvXf3Pb1ZgKUSF+yBSj6bbk4F0ob2B8AX hyB+qJq6u+irr08yQ8/F8Qpqh3xVd/2aRV4Y2J/BC54UEOZFmYcwEoGs/0zB111b HCN/VTBRHd6d5+ZuzJR4Qv8jjZRHGUtLfXQHp5M+Op8CZVZZJ7nWu177NnXWssWA MEYwfgTTnQIDAQABo4ICITCCAh0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTTlOdy KMxZMeGaP2poLzgSydrAcDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzArBgNVHREEJDAigg1ncm9lcC1lZW4uY29tghF3 d3cuZ3JvZXAtZWVuLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYB BAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkg YmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFj Y29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0 dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUA A4IBAQBHz0U59YEU9LXF+7amnORn9UM+eQop22ziGUhB8hmbxjZLR7Q0h7rNMIA+ g1zLG/QAvbMBV1dcBJmjg0o5kAc6BaaJgWwFVtXZOaLOTOOQPpKqzwyIc4292Rgn p1k9IipEfzg8HPkeCHDXwSfz/X7+iMBwM7Iq6uGK62IsKTP9GQ3nrISiHOh52mqo jmdlrQX/ouTVTBnjAIQKokDpJ9B9SywsuuGiEqJnhEH/hQoXIxSg37xQDAdosA/U eDDcL9fgxuWIKGpXoQwsoJrTMU6nnteXX+YkM0ub4oixOo1jT3VOuG1iHmIQKzXS eSCc5HLJI8VlbgmRVjCWeurZwoXf -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwJFa+FjQS1tbWjqP3jB9 3OZtIRQuuaRVI40zgzdcWcV5FOQOzF3UN/f6ajFkc6kXSAa9koI79ZAseFF6Ty19 MzOOzqbSAbjbYR+t+LE0wwiK7LA8jzONzmwMlRsdZx9FMjWMYzQjUXCuLeyXmnkU SdC9ZV9A77+pKkGLrea7t7xqgjFhhaiqtB+ZhWFdVMiUHaG591cJdjYRkC+AWIw/ LnEGxJlQPRBLf5dGSrdiEjta0XNc4fksVgb+Lr/WSq2+JnmujrQ0nF+ugW1rm4/5 F3jw3pmabGOsJDHvqq+ydLeGHsaZNlXp9mmZtfg4rb9a3n2UHJgueHcoC5QllfmJ vvjCI2vMVxDeUXq6OvawNUpOmVtOHomUUIA2xWRtQGr7KNpLekcWcL10Wh9svDzv 13hy44lOfSjugPIfYSOfDP358ZIFpvqdY1QQiqj2YOZ+G6wf2S6QaioS8OIoAHxn ZRd1BDULD26IRRjPiMTxMuZ/uvFiav4CK3ZJFDDw+0Gvc7139z29WYClEhfsgUo+ m25OBdKG9gfAF4cgfqiaurvoq69PMkPPxfEKaod8VXf9mkVeGNifwQueFBDmRZmH MBKBrP9MwdddWxwjf1UwUR3enefmbsyUeEL/I42URxlLS310B6eTPjqfAmVWWSe5 1rte+zZ11rLFgDBGMH4E050CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 267382711418360570142289836849272533778147 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 17:58:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-03 17:58:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'groep-een.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785608059885775445086905578243470635747483401043374975466421226074545738933232106308880525188521684890670693510509268296169076223669630684985535816927708677224160240384856181427897163793138551642049704902090044581094666934669442132744658181950384778045441171240304632991841518389635042203180247434565219066095710291926456376153766159380465919110051954630256402183228746143998604787751453922922286036214788617464826226082022714768140823501984725482336577043619363422139693239173700559321817520108798976086796628621530519936948836179135878537442332099809255603124455970528608042353042089996824917627735070053445414384065663183061949605863666807219820634185200454272463785221278719539557130250442764917790740028392308375671741082592447416257263220145988902157238975166452953665623027601085210989859054955232399210940953780775075674864346892678070309450626850582731035584441538339319353156553613252088716552789844725881683604246332279030776159944715265759832192290366503842404121646264938705291537875413989291248684755624355139130488234447678178107582955032216468450868684223503862181449172617406570310205075604819741576203197559704082625245451279923922057815395982676478148957182432835308687022471133999693061262164182542602432315446173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d394e77228cc5931e19a3f6a682f3812c9dac070 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groep-een.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groep-een.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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