server03.100procentmorgen.nl

Issued by Intermediate Certificate DV SSL CA - G2

About this certificate

This digital certificate with serial number 21:6c was issued on by Intermediate Certificate.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=server03.100procentmorgen.nl,OU=GT56765002

Intermediate Certificate

Organization: Intermediate Certificate
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 21:6c
Serial Number (int): 8556
Serial Number lenght: 14 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 63:1c:a8:a7:b1:93:35:8f:16:76:9e:e5:fa:5f:c8:e6:ad:bf:2f:b9

Fingerprint (sha1): 84:a9:02:fe:bf:38:7b:eb:4f:4b:71:6a:5c:f2:b3:8b:7a:e3:53:64
Fingerprint (sha256): 22:18:22:22:c9:f7:e5:7d:b0:20:12:7c:55:14:7c:dd:f7:96:f8:3b:ff:2a:82:db:84:cb:5b:33:86:fd:a1:3e

Issuing Certificate URL: http://ica-aia.digitalcertvalidation.com/icag2.crt

Revocation information

OCSP Server: http://ica-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://ica-crl.digitalcertvalidation.com/crls/icag2.crl

Check the revocation status for certificate server03.100procentmorgen.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for server03.100procentmorgen.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

server03.100procentmorgen.nl

Other certificates including the domain name 100procentmorgen.nl

(limited to 100 certificates)
server02.100procentmorgen.nl
server03.100procentmorgen.nl
server02.100procentmorgen.nl

Certificate

The complete raw certificate details for server03.100procentmorgen.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/yG/cHh84ZDzOb4ALJ
ycSJ86AePGVrESrQ1DJduXLwI7tWdsjdl4EXozTQ9rHGlUqSg+79IdaBO4PNwcG6
QBOb4ZlAjnRBT7UOBvzT0jLdzknNb6TPkVnUoQLvonzMndpR7c8QWHJAJUD3faJo
clZC6XXXmbekPRiaYgV5bi2u+P/zwZiM6FdbMS5HuxUEMhAgqlu1AZMKFzkh4yb8
FbeHLffxzuccuLp6etuRQoXPgNQKrp8ir2Exb74Q2uQ8FHABGzyV3hp7BdigmKW+
Nqs7DAkzPZHkA2ECRk5H8rKk+5gaLjb0lSCQ+EFuwNQ5fDgK/HPUaRq2sMd1XPEj
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-06 08:53:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-08 01:07:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT56765002'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'server03.100procentmorgen.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23022684111192838425012975838205003256388735669934084260574842474681656463199345086338146971148248778135328373245926437966059431917434137651615107805852088751572282315444699548619204760241208238053611411096114244218100302596886691239178455706896133133311615831987342019963162510134751808742374525167972790631453282909070839834195859595076963883522439507155429639085231695936653739688522926963851946237715689135475533621419275506469413381688146127871229331358282027709302693038382463871143665201333543857427470610062405071708739293405131877121363829359826788240354823462592851031500761747857189372158813460162751308609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 631ca8a7b193358f16769ee5fa5fc8e6adbf2fb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-aia.digitalcertvalidation.com/icag2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server03.100procentmorgen.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-crl.digitalcertvalidation.com/crls/icag2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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