allardteraa.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:0e:4f:76:7d:1d:e4:ca:03:92:a5:bc:81:63:f9:81:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=allardteraa.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:0e:4f:76:7d:1d:e4:ca:03:92:a5:bc:81:63:f9:81:93
Serial Number (int): 337579129772200874028806697979035566834067
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:72:6a:4a:9e:50:01:e0:42:ce:63:57:be:d0:98:d9:2a:21:72:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 39:d2:99:98:e0:4a:5f:a7:0d:07:bf:00:ac:77:b2:61:72:df:58:c7
Fingerprint (sha256): 25:d1:ea:9a:59:ae:e7:09:dd:45:d3:09:9f:e1:17:ae:8f:44:1e:95:06:d9:0a:98:f1:b9:20:a6:91:8a:e0:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate allardteraa.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allardteraa.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allardteraa.nl
www.allardteraa.nl

Other certificates including the domain name allardteraa.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for allardteraa.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337579129772200874028806697979035566834067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 00:11:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 00:11:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allardteraa.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 598649113397048658556156078984266912031832227759260484895333102922801609729876786894317353984994506876148162041722559519934228727100544132646157726725364025731205608235744250188237944021171546506190528356287829844778137961461739352377848928116399677234855197445847094782708916402650787325936515341061323948266858728212318777288073937766538057845053086826934268236586682873474131634382630726909366259160398340050151204778255115397537756705967534486627737465310865887221948603819273954386978491155160373621527080605976938040635737133278963037337110322459697126891141207091294330486925934026974568349653353556962150648884835248603311183970916873819351374404235762479118635342974384208766032588878714692774531452260587156845792007560592216508779801025676444518645940564304195552541817045264882056922701562537583250120294612168525716937261645515940905462447174362949601293196423177990363784508749968873594362218684054265474380485366211748651335484914475845074943160340192606270937821512615140807520813437689374874347246138631544212099151006445692280565803222911544379376535601827445753178278017831964612776295507737876616232997620491034394934613866290961710485060943781632405906874553355245119197725144656230300931084155425513007958114431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43726a4a9e5001e042ce6357bed098d92a21726c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allardteraa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allardteraa.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017012e6e12e0000040300463044022076f6e20bbf75fd595de1987052bb4d4c68604166771c1f35e51f2b46ebad6b9e02207840181c3c2a2a32b4c07ec7688917091049e4ec183c81df9f0efda4a2a7d643007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017012e6e122000004030047304502210087e18e2cb9e3a3c8be7e6d091e00bbb76372f85a723014b5d9d3b5eb77e2311802203b01efd30dd0d49fb3a38b3ac0f6a924f65f7eeb8f074c1d3ccec4a720d8b1b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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