kennisnet.org

Issued by R3

About this certificate

This digital certificate with serial number 03:b5:f3:62:1b:5c:84:86:89:bc:71:21:8e:2a:e7:48:59:01 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kennisnet.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:f3:62:1b:5c:84:86:89:bc:71:21:8e:2a:e7:48:59:01
Serial Number (int): 323251478010993537714669737963713557190913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:26:2e:bd:83:55:5a:2e:d5:7b:c0:18:15:e9:3f:6b:d7:35:07:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:d4:7f:6e:2c:95:a0:ae:07:c2:73:09:9f:1d:7a:4f:fd:f8:b1:45
Fingerprint (sha256): 29:73:19:11:6f:a0:fd:65:50:ad:43:fe:89:87:6d:5f:1c:01:7b:3b:b8:12:3c:f4:65:2e:02:22:6f:42:ad:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kennisnet.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kennisnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kennisnet.org
kennisnet.org

Other certificates including the domain name kennisnet.org

(limited to 100 certificates)
webmail.kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
mysite.kennisnet.org
*.kennisnet.org
kennisnet.org
titaan.kennisnet.org
samenwerken.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
kennisnet.org
hotspot.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
fs.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
webmail.kennisnet.org
*.kennisnet.org
vpn.ka.kennisnet.org
support.kennisnet.org
kennisnet.org
kiwi.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
support.kennisnet.org
support.kennisnet.org
kennisnet.org
donald.kennisnet.org
kennisnet.org
*.kennisnet.org
support.kennisnet.org

Certificate

The complete raw certificate details for kennisnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VLpFuJiz+I8uQfcrOTo
u2GnMd9kM1dyebQbXMhpNLEtF0iGhU7e1rAffGNrcuRlN4eEecFMYmTFnghGi7P3
9//S1WMNKa0t8c4Lyl+fg6EqLriWTTujROd3kqUFCVHYSpEZnVQFiIqVQE+oNvlZ
pcowBTuxaMHeYnbXj/Qb78TmURSi4niK1X4I0bDw6n7aSkTiRcA1Ad82yKQtkdZz
R3tyLrLCyk2f53TljbBUHgvSZaKd6IVqLKJAPbtHEBaTnLp+jqIgBe4R1gleumKu
Prl8c2g9q65Tmv8DwBlg5EFwpABWaepK1cWvmFlv1wbGFFhmuHqeERfI23fmw/P3
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323251478010993537714669737963713557190913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-28 23:11:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-28 23:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kennisnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27434596871659127409541682594557375038179838349310965153354096684319485772851373278827789869784183783223792203589114182046350908350830099966971701440091038857940484328605330601590873690544450824181663095274078137182948887472420264552662429646071496131508108267940073726476852785828707083447438883564279174252239673595112179183257350706166912250211168556219429198400748524002144570472089991890558775483577269532504389516857580657911597589820299026936185482401031324855017754203536870023432979246590652349774660860309443930455925206245335932824610666360331322424173942411491949645049179729534388270403334918471337375499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3262ebd83555a2ed57bc01815e93f6bd73507c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennisnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017e0386a0010000040300483046022100bfcea11c1639b06b6eec946ed174c7298da3d3ba296f3f608a6e0e814a72e1b9022100fd57827de046fd22f6484dcb0be7d2b05b8b1d864caf82f94831e7a1eddb554000770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017e0386a0410000040300483046022100e5c7f98bf401288243cce26bafa1644a8f4a491c46803f78265f007d4294afe4022100d4ee7167bbb69ac673d1cc14d040e94a82e572c6abbb3b33f5fcc6ae3a76668b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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