iohanalyzer.liacs.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:33:e4:b1:2e:0f:0d:0d:4a:91:1e:4c:89:41:c8:a2:86:49 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=iohanalyzer.liacs.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:33:e4:b1:2e:0f:0d:0d:4a:91:1e:4c:89:41:c8:a2:86:49
Serial Number (int): 278995242462014826639002339329638398068297
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:13:59:7a:69:b4:3c:0b:4f:b0:99:d3:bd:b2:63:ff:c7:de:c9:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:11:7c:89:0c:24:03:b1:d6:3b:eb:b1:41:27:68:65:22:39:a0:c4
Fingerprint (sha256): 25:1d:7b:20:2d:36:79:cc:b2:d9:cf:f1:13:46:eb:30:df:00:17:2f:e0:b5:fe:44:09:6c:cb:bc:4c:40:82:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate iohanalyzer.liacs.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iohanalyzer.liacs.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iohanalyzer.liacs.nl

Other certificates including the domain name liacs.nl

(limited to 100 certificates)
tls.automattic.com
deleidscheflesch.nl
tls.automattic.com
deleidscheflesch.nl
git.liacs.nl
deleidscheflesch.nl
git.liacs.nl
deleidscheflesch.nl
basilisk.liacs.nl
deleidscheflesch.nl
naco.liacs.nl
deleidscheflesch.nl
bio-imaging.liacs.nl
deleidscheflesch.nl
erumpent.liacs.nl
erumpent.liacs.nl
tornado-p-https.web.leidenuniv.nl
keep.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
tornado-p-https.web.leidenuniv.nl
deleidscheflesch.nl
deleidscheflesch.nl
basilisk.liacs.nl
elaborant.com
deleidscheflesch.nl
deleidscheflesch.nl
naco.liacs.nl
iohanalyzer.liacs.nl
lcm.liacs.nl
git.liacs.nl
deleidscheflesch.nl
tornado-p-https.web.leidenuniv.nl
deleidscheflesch.nl
tls.automattic.com
git.liacs.nl
basilisk.liacs.nl
deleidscheflesch.nl
computingfrontiers.org
ada.liacs.leidenuniv.nl
basilisk.liacs.nl
basilisk.liacs.nl
tls.automattic.com
tornado-p-https.web.leidenuniv.nl
cyttron.org
tls.automattic.com
lcm.liacs.nl
elaborant.com
keep.leidenuniv.nl
deleidscheflesch.nl
deleidscheflesch.nl
tls.automattic.com
press.liacs.nl
git.liacs.nl
deleidscheflesch.nl
cf19.liacs.nl
lithium.liacs.nl
bio-imaging.liacs.nl
tls.automattic.com
bio-imaging.liacs.nl
lithium.liacs.nl
deleidscheflesch.nl
deleidscheflesch.nl
deleidscheflesch.nl
tls.automattic.com
cml.liacs.nl
bio-imaging.liacs.nl
bio-imaging.liacs.nl
bio-imaging.liacs.nl
deleidscheflesch.nl
basilisk.liacs.nl
deleidscheflesch.nl
deleidscheflesch.nl
basilisk.liacs.nl
deleidscheflesch.nl
naco.liacs.nl
deleidscheflesch.nl
deleidscheflesch.nl
keep.leidenuniv.nl
tls.automattic.com
erumpent.liacs.nl
git.liacs.nl
git.liacs.nl
erumpent.liacs.nl
deleidscheflesch.nl
elaborant.com
deleidscheflesch.nl
naco.liacs.nl
git.liacs.nl
cml.liacs.nl
keep.leidenuniv.nl
lcm.liacs.nl
naco.liacs.nl
bio-imaging.liacs.nl
press.liacs.nl
press.liacs.nl
deleidscheflesch.nl
theory.liacs.nl
deleidscheflesch.nl
bio-imaging.liacs.nl
erumpent.liacs.nl

Certificate

The complete raw certificate details for iohanalyzer.liacs.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278995242462014826639002339329638398068297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 02:36:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 02:36:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iohanalyzer.liacs.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833767870152956929207759385144717752689625237033354343985965425725960619506440469444587247090121534940378046132889096651163326339914118327007227946189452996635100025155807424528873477676387904546866612619651703408269472762448803491958304977187993927620512821367354448298848996324284138737845985372774180091239788946941840838158205279019258224196310019231980998125597547964378289988570715237848120089756497842073257618856173390011822741047430835202344423611279935766369710046882254354032005411731104885778174247823222810218680973782404662825299743472178880722795486076562584163932618652069847898448086056398432375474380136098944347497564377470574341421330141354037178092264316744495912007917288959949649331790269620927424771556482074976534140064658635020983287215090509926039351756901097577629763516814787770606747229448191497187995122540682398150662114361382118196858620666779512331569520089676581080724563680195859769500908860829228351886966991296221504930868070351333987851862509644472484742438178573424762713621494906421287988528456012459223021506335458304220811117941272692649342510817349647277342464414510632262444342139573530263690129402902619940072438933510926030366460742733984793904099696370509728539146119312690281301052723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad13597a69b43c0b4fb099d3bdb263ffc7dec9e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iohanalyzer.liacs.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e8847d9e80000040300473045022100909b0d4310981303cdb83e7b30c0781600bbc48ae7da2a8a992666194079853c022017d9c8dbc2c3f6b16a4a08b032615a54e2ecc6f00806475f40d03c100db309b800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e8847da250000040300473045022100b4095c11df827bbb5a5e7337123a45242e8f44d54d08bbda796e41fdf901634b022065a0736219a4e3ba55057999c6f5d7bfc7ae21927a9c1bf93a21000564372c9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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