stucpatje.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:ff:db:67:90:31:41:9e:66:d2:20:a3:82:5d:66:89:52 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stucpatje.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:ff:db:67:90:31:41:9e:66:d2:20:a3:82:5d:66:89:52
Serial Number (int): 288899539501405278363649038691157957577042
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:aa:ea:5b:25:74:3b:d9:fe:f9:93:97:53:cd:25:48:b7:2c:46:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:4d:20:a7:2b:f8:ce:d6:c3:9b:01:b4:8b:d4:c0:64:f2:29:bc:ed
Fingerprint (sha256): 24:9d:a1:83:8d:e9:fd:2d:71:f3:ee:cc:0b:bd:71:04:aa:5d:df:58:55:0e:f9:91:ca:7a:e6:8d:cf:21:db:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stucpatje.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stucpatje.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.stucpatje.nl
stucpatje.nl
www.stucpatje.nl

Other certificates including the domain name stucpatje.nl

(limited to 100 certificates)
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
mail.stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl
mail.stucpatje.nl
stucpatje.nl
stucpatje.nl
mail.stucpatje.nl
stucpatje.nl
stucpatje.nl
stucpatje.nl

Certificate

The complete raw certificate details for stucpatje.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvkAywevHmzNB8smCVom7
lyyFEhLQymF88J5M5kJlntA8LboDa9+yBRWd7y2xC5kZaC2BI3GKsS1nFeFj1fs+
5jp1fX5eCCk5nDSM5mDoGlNciEKLP/pKkJlb1n9Up+TC9NhYwHRIlrJ55ibQEGjk
OyCML+Wn8b0b3GfHK8O517Up0v0JQBzelXDLSGNbHrBTkJ8ejIRdtBcBH5YCmGyK
CB+eDUssXoTGq58oNRgrcRq6ReOFrb3Wy73Ftu24xPKeFrP8UHp6Pn6Q9zSnL5EA
lG3ycq5olZIr1Iv5WB1uROmZM/j/407MXbKzTAsQxCconLWoxLOTKi3jcPFSyjqS
kheTz+jelY3psegNdYnS/n1l7gORdJngzfaJ1fdYSH/0fmAz79f7lngCnEeS/1Zt
BFpxrOi8scDkI/OGH3xH8S4adkKAj03KAy7+FRl4tLDk7RG+Pv+8tXnLuNA0ODFn
otbodlx5bPwWn7LKG7Rsq/dCvD55AnvN6IyTdPtRGSVgkbIKaRz8wWm+A2spQia/
RKxxJzk2I7KmV6htuPRU3LLVgKJgwnJAZKMvDBr/JG/4PoqBOVRs1NWXdbava8vg
UshFlFbzIerv9YvwP5QREhUKXaElMYXN7F8kigrg7NWrJAxxnB33xAUc6N93K2K8
JQvGhh/7iDCpDvKLihsgMQkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288899539501405278363649038691157957577042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 21:13:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 21:13:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stucpatje.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776155443617189474420240508645845678986476956534444962681941194488830125643752537341588009816719770371650128930760136216516433633163061312241354817544122044727612607970174418017639185470197551284309548478114008429257809951282938144249274514478282277263385096160758680179419778337067677214258930956713113642784927836472959794591593388969858122135628413259236483216527362990628298545590210983144518634949773982791805302730855439559198763307916918481744122349735796677553063903631462866735125652601738799229751081528132003754949125263031308095520885858227696712781799319857819401259401158302499198094156637375995673576595788014055382103599137614250823846219900382952528565598914000428088083725947103211215225055483400966844431908381347748910998755345083074778155374898686104008902342312201919453436255940826093647857718577194432840823174600154600243135603864391695200826322484070800867876194166860281548286516434196404598316973180590036627876676342367150917429468885404892617941277202638956445084694385611331345149491893069155547591638329483587411044605772794012592813843427554508421994265512211206024355474479635767927545657760334541746170527865795572827364334874903170736730307829135626918184204049243271863769480769925135905675292937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							baaaea5b25743bd9fef9939753cd2548b72c46a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stucpatje.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stucpatje.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stucpatje.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d12f0bf63000004030047304502201fc81271c006a7b603269b6102f7efa0cafc3aa4deb74383db10bb2fd3d3c0b3022100d41c19e3dc27e97bc5d6b0483c3280b50edbbc68b19e7dd65751e2a9f7bc3bc1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d12f0bd5b0000040300483046022100dd0cc261f7ab06f55836dd2e541c8932e15eec36c8a83248ef52c7ccb915b3d2022100ccc896f2bb4022f168954adc83405b2b42c96b31cd1c1f090c043ade6a00ff3d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004216f358fde813b47140dae041576017c02ad30b64ebbfda1b3cd12f48c3f6c750d36a6327fb390cc0db7d21e068a5513b651729b6341aed1a895a19d21a137778231d46a6448056e01bb5f615f36713fdc80506f080496b0f3ae75f3b3bee32cde9bbece1266b8725e53c1978a9afc1ccb64cbef867d155dd1258601c65ff1937fc231dd38d566132f5a0b66bff0238445ff4805e0c1dbd4ae098eedbda0d9c13a7011ffdffcecc8d768668d8fa348a0fe4ae5cf33d52e24cc548eb6fb20cdefc512653d3aa76a76fc1c416df2b0c2290f230a04354e5c1c4fc849dd5171469fbb9e3e8ab18ebc6208a111fd9a7e5f9da4328873585978005f6f7256e68c64