ns.bosincasso.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:55:c3:ca:51:a8:83:07:90:da:9b:b2:85:66:14:e0:b8:8a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ns.bosincasso.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:c3:ca:51:a8:83:07:90:da:9b:b2:85:66:14:e0:b8:8a
Serial Number (int): 377633394874690299492282074658286833023114
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:09:9a:05:e0:99:96:53:07:61:8b:45:a1:3f:b5:80:ed:a3:b0:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:ae:6c:ce:a5:86:0f:3d:71:3b:76:65:e4:a8:39:c9:5e:24:e6:e3
Fingerprint (sha256): 27:82:4f:4f:93:0c:f5:ec:fa:c0:f9:c7:4c:81:92:5a:5a:6c:5f:6b:cf:b7:df:ab:ce:b8:73:18:ff:ff:57:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ns.bosincasso.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ns.bosincasso.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ns.bosincasso.nl
www.ns.bosincasso.nl

Other certificates including the domain name bosincasso.nl

(limited to 100 certificates)
redirect.bosincasso.nl
webmail.bosincasso.nl
payportaal.nl
redirect.bosincasso.nl
ns.bosincasso.nl
portal.bosincasso.nl
ns.bosincasso.nl
webmail.bosincasso.nl
transactions.bosincasso.nl
payportaal.nl
bosincasso.nl
bosincasso.nl
bosincasso.nl
payportaal.nl
*.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
mijn.lavg.nl
*.bosincasso.nl
portal.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
bosincasso.nl
*.bosincasso.nl
payportaal.nl
support.bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
portal.bosincasso.nl
bosincasso.nl
redirect.bosincasso.nl
portal.bosincasso.nl
mijn.lavg.nl
redirect.bosincasso.nl
payportaal.nl
bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
bosincasso.nl
webmail.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl

Certificate

The complete raw certificate details for ns.bosincasso.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377633394874690299492282074658286833023114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 11:02:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 11:02:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ns.bosincasso.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722867141941697000957350181629378722916027038370928178495892913014533777489173400207692752016176121137721717843647307412998863465119588516187269839510350604276249401188616261615893019963928719880447100591417454671602153048067801031236077887924988057084205808925344523720060608239731625980426165912236168367749374083082612863268197093783627990945119090252670950439756432015067130763406385091980661825075486574061571732075306627535733367569916556147996071591001602034185273471152676319201744535761218958188057839317138147262262304422484984645640950477485234125271036661925220518575780775572608368576308297017853556807483704277048395197705626012554167492089114404353482553290026511474922016004300968666563759950583131664580798912404463487070608470557001859828525672043813455311616691910435813442930825291061945638154856017222773956159853793737480345634565836694429529211055376125758402650758272245729162792326456793431729376914511084707688252031891791087640569108252949779718995542443407713056428341168274402996934912202118725189436496013713114828558304912627455731339222649923161030779057317886685181965043794595823779718155794854373538913332201326949161163904812064229761066568986848086863914923042432618699266966020792397988954919309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d099a05e099965307618b45a13fb580eda3b049
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ns.bosincasso.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ac5abcce000000403004630440220591abd14b88dd5f1dcdce50759a34a9c3c67525d0629004b703faa62e5dc77800220157f04ed1b465e6dd9e5f18a4d9121c595134b9fb43a6d1509847e597b43593e007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac5abcb1800000403004830460221008c00056f20f813b5592d8da615dcde444f655ec1535603394e7a790e904243ca022100c5047feab24f23110e2d43e1740feb0e63eeb65d4670051571b0817997177b8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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