groep-een.com

Issued by R3

About this certificate

This digital certificate with serial number 04:60:a4:6a:08:a8:0f:b4:16:34:b8:b8:0c:ee:29:7f:6e:3d was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=groep-een.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:a4:6a:08:a8:0f:b4:16:34:b8:b8:0c:ee:29:7f:6e:3d
Serial Number (int): 381334794901801278092133635548533806296637
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:f7:77:3b:be:d7:20:1a:84:45:8e:d1:a5:aa:b9:0d:10:c0:4b:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:ba:7c:fa:71:58:24:3e:c7:20:52:f1:4d:99:e5:a9:30:60:2f:f0
Fingerprint (sha256): 27:40:53:c2:32:49:90:cd:b2:3a:4a:f3:b9:b8:98:ee:d9:b3:8a:e5:f8:5d:c9:e4:09:f4:a4:ff:0e:8d:7b:b6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate groep-een.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for groep-een.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

development.groep-een.com
e.groep-een.com
groep-een.com
mail.groep-een.com
onderzoek.groep-een.com
research.groep-een.com
staging.groep-een.com
wiki.groep-een.com
www.groep-een.com

Other certificates including the domain name groep-een.com

(limited to 100 certificates)
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com

Certificate

The complete raw certificate details for groep-een.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381334794901801278092133635548533806296637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 02:32:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 02:32:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'groep-een.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759592428787039818723024296746481727104610504352251102880313168071107761557733085891249581559227506316859136279737494396417701389667952376295837009070456039094916526803208962082529484085896420414874545229193966921702329714016641628236360000430149189497964077584791774918780824838405864104135218961490788153782192929297617590718307123349722133996024271577889639202742862273348757487148272461562920288580814918100211635794137929817835178012780556171982705137797065664633750073966010571429807975857178414803245418726595533433466424193262522484893116268071795995553123832223997766254018243193450472797454783680494393454643642585891319136982426735470914770291985543841424073632118116490665922601626357713591279756711552524144189003556993957076373252010450008391458073233354096417030780063947639712105972185279407684906080108433036526403779603611489348868894421100869968966339166612257230144202762388144535187888665477285767299236138628278778892181244376374125286052359291846150230873526268731108099733909270406820847516532745325112547720352517208633354937078377245057228748277648098515225776510314418230973308211365433471305323676645756466671925438127067672843522923113066641918465500468261815056321573670713134275137845421213419157129211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80f7773bbed7201a84458ed1a5aab90d10c04b72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onderzoek.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groep-een.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189e7cd6b150000040300483046022100c64d9fb2d880f30c20c9bb336675c49621dc94950dfe1b67d88f04c7957d082f022100fe527f19207ad0e0202b3d7a53be9c1140ca4c7c304eb8fa563b4863d1f188c00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189e7cd6b420000040300473045022022118787dfd583afd9045229cc34440c669945c5b886212fa6b2104299acc5f6022100e122275ae8e5af4744006849376167fee86d4a06660695c771e524978ca04b73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ad8db4eba3dc284948ccb4d605b13505ef883c283e16dcab3f503bc851655d585fea9d257cd70457227520e4f0af394060b75c1bd600b91bcd797361e6a66af92b2c917e9ca07f5427c600e6021e6567a203b4516dfe2380721e44575a7f0bb7df1e4369966bc53e1b75b51874f10e96b11f592d343520726325b813a917eb82390d4d6dd56efe049738cbefafdc9b31351f23781238c9ca969b2d49421e3def9df1be9aa04c20a759646d3b0e4753d9a8de25e8c9f6469692896b9077761510f4a361e580af503bc24c1c3b835a0361558559241599f7399049f3730d43852fe986ef956d08425f939546814a0c744f6beeb543b3b5473e552e0af691f211cf