caught.nu

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:97:41:e7:eb:a1:58:2c:25:2f:76:38:f2:f5:2a:1b:4a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=caught.nu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:97:41:e7:eb:a1:58:2c:25:2f:76:38:f2:f5:2a:1b:4a
Serial Number (int): 428276273217105084412441010167832904342346
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:f4:29:49:1a:f7:3b:0d:0c:a5:3a:18:bb:8b:43:e8:e8:7a:e1:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8c:c8:f9:2e:cb:76:87:d5:76:6e:32:26:5f:f0:7e:95:9e:fc:81:a3
Fingerprint (sha256): 38:c7:59:82:c7:fd:e5:6c:87:65:6b:bb:1b:f1:16:a9:34:1f:51:a0:80:a7:da:5d:60:09:9c:47:a7:e0:f5:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate caught.nu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for caught.nu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

caught.nu

Other certificates including the domain name caught.nu

(limited to 100 certificates)
wave-citygames.caught.nu
stadthelden.caught.nu
advidi.caught.nu
tbevents.caught.nu
test.api.caught.nu
bizon.caught.nu
wave-citygames.caught.nu
www.caught.nu
caught.nu
catchit.caught.nu
amerpoort.caught.nu
catchit.caught.nu
test.caught.nu
advidi.caught.nu
mini.caught.nu
stadthelden.caught.nu
uitjeseneten.caught.nu
lockdown.caught.nu
puurevents.caught.nu
mini.caught.nu
bizon.caught.nu
platform.caught.nu
puurevents.caught.nu
stadthelden.caught.nu
test.caught.nu
tbevents.caught.nu
lockdown.caught.nu
catchit.caught.nu
platform.caught.nu
catchit.caught.nu
teamgeist.caught.nu
specialtours.caught.nu
landgoed-golfbanen.caught.nu
platform.caught.nu
catchit.caught.nu
specialtours.caught.nu
test.caught.nu
amerpoort.caught.nu
test.caught.nu
test.caught.nu
puurevents.caught.nu
platform.caught.nu
advidi.caught.nu
amerpoort.caught.nu
uitjeseneten.caught.nu
uitjesbureau.caught.nu
uitjeseneten.caught.nu
monsterevents.caught.nu
wave-citygames.caught.nu
stadthelden.caught.nu
advidi.caught.nu
specialtours.caught.nu
stadthelden.caught.nu
advidi.caught.nu
www.caught.nu
uitjesbureau.caught.nu
justcurious.caught.nu
wave-citygames.caught.nu
uitjesbureau.caught.nu
landgoed-golfbanen.caught.nu
amerpoort.caught.nu
wave-citygames.caught.nu
puurevents.caught.nu
activents.caught.nu
teamgeist.caught.nu
landgoed-golfbanen.caught.nu
amerpoort.caught.nu
amerpoort.caught.nu
test.caught.nu
caught.nu
uitjesbureau.caught.nu
justcurious.caught.nu
uitjesbureau.caught.nu
uitjeseneten.caught.nu
uitjesbureau.caught.nu
test.caught.nu
tbevents.caught.nu
test.caught.nu
teamgeist.caught.nu
uitjeseneten.caught.nu
smitgroepsactiviteiten.caught.nu
stadthelden.caught.nu
specialtours.caught.nu
uitjesbureau.caught.nu
test.caught.nu
tbevents.caught.nu
tbevents.caught.nu
www.caught.nu
teamgeist.caught.nu
smitgroepsactiviteiten.caught.nu
uitjeseneten.caught.nu
smitgroepsactiviteiten.caught.nu
specialtours.caught.nu
costaexperiences.caught.nu
teamgeist.caught.nu
stadthelden.caught.nu
landgoed-golfbanen.caught.nu
monsterevents.caught.nu
tbevents.caught.nu
justcurious.caught.nu

Certificate

The complete raw certificate details for caught.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgISBOqXQefroVgsJS92OPL1KhtKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTYwODEwMTlaFw0yNDAyMTQwODEwMThaMBQxEjAQBgNVBAMT
CWNhdWdodC5udTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOjz6RSt
HDIwkuIbw6Ac8L9wLkb1tRlTWfmtxZ6d6wRrcNWP1NnDkALUzkDeqyGMewjVR5KJ
8W/DONIzcSLVRpnRyt3gI2AtEDQrvgC7sMWMzxbL1bAuKJGegLnIfzs4S8k36IsL
FnttHkcDkarUhGd8PgvaEnmZzCTmaDVA7N8UiFR9yeh4fyNJDgbIvRq4HnHw9xww
qO2qdA8iFCwT/SR9vfSNzP+B+o5ND9GT9Hl48G31fYwOt4wnhlSv1oJGTPMCuBxp
g3v97Gi3LXstyjMl/dElH6VRQuwvSQzuW5zQPZW99FSGziMaoWeKbnwaJigp4YYD
mFRHr5lSaIaTjzsCAwEAAaOCAgswggIHMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
uvQpSRr3Ow0MpToYu4tD6Oh64WMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFAYD
VR0RBA0wC4IJY2F1Z2h0Lm51MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznY
hHMAAAGL12VDRQAABAMARjBEAiBQtY63nxlNw9GBfuxsEVmeJgCjnjOZJ0VRxAgd
I08bqQIgcu30+9NVwViFSGrbcROZpwqEF9qXEkrip3gGZ92KXlEAdwDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYvXZUPrAAAEAwBIMEYCIQDAsUtW
IbKJUfrqca27NbPxbQc63m1Ilxo9DTJGurmICgIhAOix9s4ZHoVlpdDQr0K6RKiE
zZiakb9K5ql7bYfuP4x/MA0GCSqGSIb3DQEBCwUAA4IBAQCdf2ppjrO/YtZJEyiV
5gv0wGEC4o2Z8X8RHmF4180eaCz5h9uIadhbyIsvsQ6CTVsvi0UvqRa4N4JQ7O6B
7AybZDYgY9ff2NFawa98gnr85Iuwg1yu6j51Tq0irDLsepPdSI6vGOljatDq0FtJ
hSdqG1i6aLOxY6EMrb8uhQT3ZaYcoOCVAlXajVdOaz6s4haYOZIds6PwWTtddsDU
ND7kVwIUVTntmoDkILiga4kE/NOMlh9rwNzujOPxZ57/vmwRFYISn9+VcU0VAsVu
1TSF2x9cXOWs0/BAkeouulkyIq5V2H530lDTwsap+5srtJmkGN3AaOlB7c88U4OY
2fC7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PPpFK0cMjCS4hvDoBzw
v3AuRvW1GVNZ+a3Fnp3rBGtw1Y/U2cOQAtTOQN6rIYx7CNVHkonxb8M40jNxItVG
mdHK3eAjYC0QNCu+ALuwxYzPFsvVsC4okZ6Auch/OzhLyTfoiwsWe20eRwORqtSE
Z3w+C9oSeZnMJOZoNUDs3xSIVH3J6Hh/I0kOBsi9GrgecfD3HDCo7ap0DyIULBP9
JH299I3M/4H6jk0P0ZP0eXjwbfV9jA63jCeGVK/WgkZM8wK4HGmDe/3saLctey3K
MyX90SUfpVFC7C9JDO5bnNA9lb30VIbOIxqhZ4pufBomKCnhhgOYVEevmVJohpOP
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428276273217105084412441010167832904342346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 08:10:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 08:10:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'caught.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29407563488517897033712341423169820075024758281816439882965847241701825602588000938633627409165906330060546892354973729840798282007047590074081753556062740046092290051369812186179476634652400220060496595028529704132504806845721458386242901540785687161090406060607535961422185120823008300351287117572336550660216486921574812363620489998010554604249196542525753828870826566443338583832521767181375754480254325273285791537603573615569652786811748595730776331336294997115892520007356750903835839259813861435340735473277650498509238314022036156364941959684065893146545028605695565946957176351988751257407213828745611939643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							baf429491af73b0d0ca53a18bb8b43e8e87ae163
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caught.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd76543450000040300463044022050b58eb79f194dc3d1817eec6c11599e2600a39e3399274551c4081d234f1ba9022072edf4fbd355c15885486adb711399a70a8417da97124ae2a7780667dd8a5e51007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd76543eb0000040300483046022100c0b14b5621b28951faea71adbb35b3f16d073ade6d48971a3d0d3246bab9880a022100e8b1f6ce191e8565a5d0d0af42ba44a884cd989a91bf4ae6a97b6d87ee3f8c7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009d7f6a698eb3bf62d649132895e60bf4c06102e28d99f17f111e6178d7cd1e682cf987db8869d85bc88b2fb10e824d5b2f8b452fa916b8378250ecee81ec0c9b64362063d7dfd8d15ac1af7c827afce48bb0835caeea3e754ead22ac32ec7a93dd488eaf18e9636ad0ead05b4985276a1b58ba68b3b163a10cadbf2e8504f765a61ca0e0950255da8d574e6b3eace2169839921db3a3f0593b5d76c0d4343ee45702145539ed9a80e420b8a06b8904fcd38c961f6bc0dcee8ce3f1679effbe6c111582129fdf95714d1502c56ed53485db1f5c5ce5acd3f04091ea2eba593222ae55d87e77d250d3c2c6a9fb9b2bb499a418ddc068e941edcf3c538398d9f0bb