checkmate.kluwer.nl

Issued by PositiveSSL CA

About this certificate

This digital certificate with serial number f4:b7:ba:e4:e5:bd:1d:02:ba:5d:9c:e1:79:45:28:3d was issued on by Comodo CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Certificate Subject

CN=checkmate.kluwer.nl,OU=Domain Control Validated+OU=PositiveSSL

Comodo CA Limited

Organization: Comodo CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f4:b7:ba:e4:e5:bd:1d:02:ba:5d:9c:e1:79:45:28:3d
Serial Number (int): 325285611959939370135463568228640696381
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 56:1b:60:75:e1:91:ed:2c:d8:37:47:5c:33:cf:97:9e:90:91:6d:b4
AuthorityKeyId: b8:ca:11:e9:06:31:79:db:c3:94:c6:e8:19:2a:bc:bb:35:16:31:a4

Fingerprint (sha1): 2f:5e:1e:50:77:39:12:ac:86:2d:76:28:e3:16:a4:cf:85:e1:e8:5e
Fingerprint (sha256): 37:ba:45:0a:0d:e0:1f:28:72:48:a3:cd:c0:8b:94:c8:66:03:7e:a6:40:f9:32:38:19:5f:ab:ff:2c:ed:0b:68

Issuing Certificate URL: http://crt.comodoca.com/PositiveSSLCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/PositiveSSLCA.crl
CRL Distribution Point: http://crl.comodo.net/PositiveSSLCA.crl

Check the revocation status for certificate checkmate.kluwer.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkmate.kluwer.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkmate.kluwer.nl
www.checkmate.kluwer.nl

Other certificates including the domain name kluwer.nl

(limited to 100 certificates)
verhaal.kluwer.nl
pdf.kluwer.nl
velvet.stg.kluwer.nl
login.wolterskluwer.eu
pdf.kluwer.nl
cp-stg.kluwer.nl
checkmate.kluwer.nl
*.communities.kluwer.nl
login-stg.kluwer.nl
*.communities.kluwer.nl
hulpopafstand.kluwer.nl
*.creator.kluwer.nl
login-qa.kluwer.nl
velvet.qa.kluwer.nl
gebruikersregistratie.kluwer.nl
*.kluwer.nl
auteursapp.kluwer.nl
topdesk5acc.kluwer.nl
kluwer.nl
i.navigator.kluwer.nl
login.kluwer.nl
navigator.kluwer.nl
checkmate.kluwer.nl
extranet.kluwer.nl
checkmate.kluwer.nl
*.navigator.kluwer.nl
sni.cloudflaressl.com
navigator.kluwer.nl
sni.cloudflaressl.com
pumaapp.kluwer.nl
opl.creator.kluwer.nl
webmail.kluwer.nl
verhaal.kluwer.nl
*.kluwer.nl
checkmate.kluwer.nl
*.kluwer.nl
hybrid.kluwer.nl
broker.kluwer.nl
acc.creator.kluwer.nl
*.navigator.kluwer.nl
login-qa.kluwer.nl
velvet.qa.kluwer.nl
oplauteurs.kluwer.nl
broker.kluwer.nl
kluwer.nl
broker.kluwer.nl
checkmate.kluwer.nl
*.navigator.kluwer.nl
*.creator.kluwer.nl
topdesk5.kluwer.nl
creator.kluwer.nl
*.kluwer.nl
creator.kluwer.nl
custom.info.acc002.communities.kluwer.nl
portal.kluwer.nl
login-qa.kluwer.nl
redactieportal.kluwer.nl
velvet.kluwer.nl
*.kluwer.nl
sni.cloudflaressl.com
sni.cloudflaressl.com
accpumaapp.kluwer.nl
webmail.kluwer.nl
topdesk5.kluwer.nl
velvet.kbd11.kluwer.nl
pdf.kluwer.nl
creator.kluwer.nl
smartdox.kluwer.nl
checkmate.kluwer.nl
checkmate.kluwer.nl
*.kluwer.nl
prod.shop.kluwer.nl
hybrid.kluwer.nl
sni.cloudflaressl.com
e-invoicing.kluwer.nl
sni.cloudflaressl.com
iam.acc001.communities.kluwer.nl
login-stg.kluwer.nl
portal.kluwer.nl
*.navigator.kluwer.nl
sni.cloudflaressl.com
behacc.creator.kluwer.nl
topdesk5.kluwer.nl
hulpopafstand.kluwer.nl
verhaal.kluwer.nl
*.shop.kluwer.nl
accpumaapp.kluwer.nl
login-qa.kluwer.nl
iam-qa.kluwer.nl
prod.shop.kluwer.nl
navigator.kluwer.nl
velvet.stg.kluwer.nl
*.kluwer.nl
oplauteurs.kluwer.nl
checkmate.kluwer.nl
sni.cloudflaressl.com
hybrid.kluwer.nl
iam.acc001.communities.kluwer.nl
smartdox.kluwer.nl
login.kluwer.nl

Certificate

The complete raw certificate details for checkmate.kluwer.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwndZ1YMM7E5Z8+aLJAf
SeKjLCTtIB2Xt8dKVULKjxFsv/+KuqRVTPd5jT+3TfuBhaKTUsvoB9YaOKXuKQk5
sMSkqRySemg3W4z1qx3amGVLQ+dHciSXsv6AndM+gsRYgie4Ifku3xzur+62VSRs
yFYhkQGk9MlkPpdA50GBJcIdXOkEd1DpjPOh2aihjwzkjT5m/Tszhw2jhA9HNMMw
XhWfY7IRJXV0uTapnC6XQ4GJhQTcnXS+F4YQfro7kkURo15hMtJDb5gTnBCUMAXM
6Y29v1sBSQh7h4kk4wKwwIWcMiK6K3bJ80ZeCfKQ+/tf+2gOvDBPfpE+re6CqT4n
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325285611959939370135463568228640696381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comodo CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkmate.kluwer.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24116380791317811463514696030582376498775629474765299570228283125893679952838150231341470367259542520957687659316854597998029475786346395579630414537694103567578915181766042803625010139926343894567263352323242432825567631595699458810643688648785914658584371231328589076654657231652396370371603570009001998749815628150498458380702430889485133183326930566281662901021962974850294478497509971779438553218174277737471854801467650631288492600063053555758508743167580568456543135621410083851693202320029141614299971245402136506455060107485429737717563850378625862670155867335133622457210519196880190307095132888708675413819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b8ca11e9063179dbc394c6e8192abcbb351631a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							561b6075e191ed2cd837475c33cf979e90916db4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.positivessl.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/PositiveSSLCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodo.net/PositiveSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/PositiveSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkmate.kluwer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkmate.kluwer.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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