vrijwilligers.staatsbosbeheer.nl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 14:58:58:21:20:90:8e:c8:e3:e3:79:0b:28:13:fa:02 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vrijwilligers.staatsbosbeheer.nl

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 14:58:58:21:20:90:8e:c8:e3:e3:79:0b:28:13:fa:02
Serial Number (int): 27043269515902146521225305614670100994
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 31:28:6a:6d:29:80:cb:e4:f7:0f:93:c6:78:12:b5:73:54:cd:47:7e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 77:6a:47:70:0d:2c:e7:29:54:9a:4b:6c:e6:cc:9e:6e:1b:0b:58:70
Fingerprint (sha256): 29:22:68:33:27:0e:36:64:c3:67:52:9d:da:3a:64:45:d3:f7:9b:5d:12:c0:ce:ad:6b:ae:d0:1d:e3:df:80:d6

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate vrijwilligers.staatsbosbeheer.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vrijwilligers.staatsbosbeheer.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vrijwilligers.staatsbosbeheer.nl
www.vrijwilligers.staatsbosbeheer.nl

Other certificates including the domain name staatsbosbeheer.nl

(limited to 100 certificates)
jabber.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
www.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
tunnel.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.ambuj.tech
hermes.thegodschallenge.com
cdn.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
eas.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
mx.staatsbosbeheer.nl
www.ambuj.tech
clicks.w.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
www.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
SBB10VS010V.staatsbosbeheer.nl
xn--trimtch-198d.ml
vrijwilligers.staatsbosbeheer.nl
werkenbij.staatsbosbeheer.nl
marketplace.hashcove.com
webclient.staatsbosbeheer.nl
SBB10UX010V.staatsbosbeheer.nl
magazine.staatsbosbeheer.nl
line-dev.onedee.ai
vpn.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
www.yowai.band
embedkaart.staatsbosbeheer.nl
monitoring.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
www.m-rental.co
w.staatsbosbeheer.nl
beeldverhalen.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
www.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
app.scrollytelling.io
elswout.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
scrollytelling-2018-436854.c66.me
www.winkel.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
jabber.staatsbosbeheer.nl
sbb10ux010v.staatsbosbeheer.nl
covid19reports.app
mx.staatsbosbeheer.nl
app.scrollytelling.io
mdm.staatsbosbeheer.nl
kaart.staatsbosbeheer.nl
carsonbook.carsonh.com
www.bluebeak.ai
vrijwilligers.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
sbb10vm010v-ms.staatsbosbeheer.nl
groenalliantie.staatsbosbeheer.nl
merkportaal.staatsbosbeheer.nl
*.staatsbosbeheer.nl
millingerwaard.staatsbosbeheer.nl
sbb10im010v-ms.staatsbosbeheer.nl
www.npiapi.com
kaart.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
betalen.staatsbosbeheer.nl
bentwoud.staatsbosbeheer.nl
sbb10vs010v.staatsbosbeheer.nl
vrijwilligers.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
eric.smyth.app
cdn.staatsbosbeheer.nl
elswout.staatsbosbeheer.nl
vpnwolk.staatsbosbeheer.nl
SBB10VM011V-ms.staatsbosbeheer.nl
embedkaart.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
webclient.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
cdn.staatsbosbeheer.nl
SBB10CM010V-ms.staatsbosbeheer.nl
mdm.staatsbosbeheer.nl
clicks.w.staatsbosbeheer.nl
beeldbank-cms.staatsbosbeheer.nl
beeldbank.staatsbosbeheer.nl
sbb10im010v-ms.staatsbosbeheer.nl

Certificate

The complete raw certificate details for vrijwilligers.staatsbosbeheer.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvkkxUI+Oq9YLsyA8r1w
nxCLSa2Z9USpYKF70utNxVCqkSEQQzbnUfVgcw4gfzcgmD5tW7OYs+R3XB6qRCs9
g5uU2llBT2X2PPfmj9XCEvkPk+NFaoknl0BnWm9uu3BhMDSGOLHhbO/Maaw0zvFE
pXyA6oQ0u/QqCzLJFdJrHQH//tstXyQO4Q4/Qqy5Jkeo4gXjIlY48ZzJXplJOmuT
nHU3j2oFhrfOKWaBalZj8BL7CGPyK2N5oDX/kiwFmJBenUGJGtS4z5IDE0dLJbLj
6JmDfYmXhVXr68N+WGliwJIPeOyH9psDxMdGkcNZaITJ36KSzDSLedmxcc1CAr8/
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27043269515902146521225305614670100994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vrijwilligers.staatsbosbeheer.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24108135248889519523458112795515331572497147671380365882461101218062806184093736902027964714073136889031477341350301498820404562358301721293359812298846683133737611551924848046284337070089455126029666609660208756307111962529552429040408306772277627739988502276424067466547154533304571237966652529826559448341934144660713931464297496585253800375212935035807272754443111625236609787709285172194785953750036781610266288859257515445603974805703942527564091765706279588913683711573722383840557243913519505173636381753525901878555250495398846476981899429000204081218828938940357542673552962761428795109683811211980341985117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31286a6d2980cbe4f70f93c67812b57354cd477e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrijwilligers.staatsbosbeheer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrijwilligers.staatsbosbeheer.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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