www.heylo.nl

Issued by Intermediate Certificate DV SSL CA

About this certificate


This digital certificate with serial number 18:cc was issued on by Intermediate Certificate .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.heylo.nl

Organization unit: GT01536268

Intermediate Certificate

Organization: Intermediate Certificate
Organization unit: Domain Validated SSL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 18:cc
Serial Number (int): 6348
Serial Number lenght: 13 bits, 2 octets

SubjectKeyId: 4a:f0:d3:b4:39:1f:80:01:fe:f3:b4:b9:ed:01:62:45:69:dd:9d:17
AuthorityKeyId: 2b:46:ad:c8:d6:87:ed:cc:90:04:0c:62:a1:57:3f:fb:6e:86:18:a0

Fingerprint (sha1): 6a:ce:0b:e1:4a:dc:ea:f6:55:08:6a:99:9f:1c:7b:f8:ba:8b:87:41
Fingerprint (sha256): f1:7a:40:9d:a5:58:b1:ac:02:5d:b6:9c:7d:bc:ed:03:a9:5d:de:f7:4b:50:8f:95:7d:a4:ae:4a:67:cd:de:8b

Issuing Certificate URL: http://ica-aia.digitalcertvalidation.com/ica.crt

Revocation information

OCSP Server: http://ica-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://ica-crl.digitalcertvalidation.com/crls/ica.crl

Check the revocation status for the current certificate on www.heylo.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.heylo.nl
heylo.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgICGMwwDQYJKoZIhvcNAQEFBQAwfDELMAkGA1UEBhMCTkwx ITAfBgNVBAoTGEludGVybWVkaWF0ZSBDZXJ0aWZpY2F0ZTEdMBsGA1UECxMURG9t YWluIFZhbGlkYXRlZCBTU0wxKzApBgNVBAMTIkludGVybWVkaWF0ZSBDZXJ0aWZp Y2F0ZSBEViBTU0wgQ0EwHhcNMTQwMzE1MTIzNTQ3WhcNMTUwNTE3MTY1MDA5WjAs MRMwEQYDVQQLEwpHVDAxNTM2MjY4MRUwEwYDVQQDEwx3d3cuaGV5bG8ubmwwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCF+nygaPMnRdVOkjR/YjnLHVn co2ie1JqTnjSv0FA7J1kVvQqrYW9XzBpe1+1fhZlEjgtyCzRgpY/UrFx5GMl1lPc 9I89Tye4llFKIYuhOfFvKb/Lg97dzQUciiGxBxsMP9a0AwpkJSbBS5iXEGBcXdGu IoueQEvVGkzlsYEmT4AzGniEKDxELRq1ypyRq6aseK3OVKaQu6c02F/COkEz41gk kYSpFON9gdvymgWe/Czr2KXHH47UPLvzVjH5FUtsf0ZMYp/37FJzGRoFUCIST6Ww 1LLPoGPRGdVDKG83gI6aTgxMFOeGp5JdzwtoY2XvALh8SnzO97s8UeoWMsVPAgMB AAGjggHAMIIBvDAfBgNVHSMEGDAWgBQrRq3I1oftzJAEDGKhVz/7boYYoDCBgwYI KwYBBQUHAQEEdzB1MDUGCCsGAQUFBzABhilodHRwOi8vaWNhLW9jc3AuZGlnaXRh bGNlcnR2YWxpZGF0aW9uLmNvbTA8BggrBgEFBQcwAoYwaHR0cDovL2ljYS1haWEu ZGlnaXRhbGNlcnR2YWxpZGF0aW9uLmNvbS9pY2EuY3J0MA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwIQYDVR0RBBowGIIMd3d3 LmhleWxvLm5sgghoZXlsby5ubDBGBgNVHR8EPzA9MDugOaA3hjVodHRwOi8vaWNh LWNybC5kaWdpdGFsY2VydHZhbGlkYXRpb24uY29tL2NybHMvaWNhLmNybDAdBgNV HQ4EFgQUSvDTtDkfgAH+87S57QFiRWndnRcwDAYDVR0TAQH/BAIwADBMBgNVHSAE RTBDMEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcCARYlaHR0cDovL3d3dy5nZW90 cnVzdC5jb20vcmVzb3VyY2VzL2NwczANBgkqhkiG9w0BAQUFAAOCAQEALOkLkfF4 Vtn9gfHX9mQY2p6/1Vi53rRuoFR0ISjPBey31vY8LXT651N3oRxUiLRZTNkw6TsI Sn7qSbwYh3zid4xhfNaU60fyw5hIsfUWO92YzULiBiR1NnI+7Ty3wbjIzRJeDBUY ZrbCnfl5K9VvZ0Qzd0ADwC1EL3DKp2DO+0vsHUYapC/e1M7IMyCwgYNl7Cq4nDPz ijn0oxohQqfxUyyVtnvwWsN3Q4CjfnEyiCmr6KDAefFv/+kZJQTDd7mjlXw3ZKPW vLYhmzimmiuxGUqka6qhKS05DDfc51/TnoHheeM7HzNThQ+YsWW/eq1TZghm6C3V AI4jNDpMxfi8Vw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhfp8oGjzJ0XVTpI0f2I 5yx1Z3KNontSak540r9BQOydZFb0Kq2FvV8waXtftX4WZRI4Lcgs0YKWP1KxceRj JdZT3PSPPU8nuJZRSiGLoTnxbym/y4Pe3c0FHIohsQcbDD/WtAMKZCUmwUuYlxBg XF3RriKLnkBL1RpM5bGBJk+AMxp4hCg8RC0atcqckaumrHitzlSmkLunNNhfwjpB M+NYJJGEqRTjfYHb8poFnvws69ilxx+O1Dy781Yx+RVLbH9GTGKf9+xScxkaBVAi Ek+lsNSyz6Bj0RnVQyhvN4COmk4MTBTnhqeSXc8LaGNl7wC4fEp8zve7PFHqFjLF TwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6348 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate DV SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-15 12:35:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-17 16:50:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT01536268' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.heylo.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24502023525614207415536176642098437979529944143352333111011647108303513061686676586475863298954433755368772245555546743250545772288925615840788984930578042429838428506225461983659467355652438102979013103970745694061005712111568642515028878512951351079407181157874905997438359887970398404744363386190961787530723171682767201306885647648181693817227473325783092100546382068103548222888957779133643182352397894675410265378055923367865956019025182582964021119220037715665081964312028807584689625181399684592581636858600933463988850213740486984720707396587105544548606822697659068770595477525498048169537165118262090057039 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b46adc8d687edcc90040c62a1573ffb6e8618a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-aia.digitalcertvalidation.com/ica.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heylo.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heylo.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-crl.digitalcertvalidation.com/crls/ica.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4af0d3b4391f8001fef3b4b9ed01624569dd9d17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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