bosincasso.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:09:07:b0:a7:0c:b0:6f:d0:39:70:fa:3b:b6:ef:88:d9:b8 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bosincasso.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:09:07:b0:a7:0c:b0:6f:d0:39:70:fa:3b:b6:ef:88:d9:b8
Serial Number (int): 264409620925954528947621518531528214763960
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:f7:f6:0a:0a:50:33:78:cf:0d:cd:6a:0a:00:ea:cd:28:90:97:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:0e:35:77:30:c9:f9:b8:7c:7e:84:1c:34:42:a4:4a:7d:14:45:31
Fingerprint (sha256): 39:78:f2:37:38:6c:af:2c:eb:1b:3b:be:c0:d5:8b:2d:48:f3:2b:97:f3:cf:61:6e:87:1e:71:5d:03:49:f9:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bosincasso.nl

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bosincasso.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

area.bosincasso.nl
biblionet.bosincasso.nl
bibliotheekwaterland.bosincasso.nl
bosincasso.nl
buurtkadoos.bosincasso.nl
cwz.bosincasso.nl
denieuwebibliotheek.bosincasso.nl
erasmus.bosincasso.nl
gelreziekenhuizen.bosincasso.nl
independer.bosincasso.nl
mijnns.bosincasso.nl
mzh.bosincasso.nl
nedasco.bosincasso.nl
ns-spitsreizen.bosincasso.nl
ns-uitchecken.bosincasso.nl
ns-uvb.bosincasso.nl
ns.bosincasso.nl
nsfietskluis.bosincasso.nl
profyte.bosincasso.nl
tele2.bosincasso.nl
www.bosincasso.nl
youvia.bosincasso.nl
ziggo.bosincasso.nl

Other certificates including the domain name bosincasso.nl

(limited to 100 certificates)
redirect.bosincasso.nl
webmail.bosincasso.nl
payportaal.nl
redirect.bosincasso.nl
ns.bosincasso.nl
portal.bosincasso.nl
ns.bosincasso.nl
webmail.bosincasso.nl
transactions.bosincasso.nl
payportaal.nl
bosincasso.nl
bosincasso.nl
bosincasso.nl
payportaal.nl
*.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
mijn.lavg.nl
*.bosincasso.nl
portal.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
bosincasso.nl
*.bosincasso.nl
payportaal.nl
support.bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
portal.bosincasso.nl
bosincasso.nl
redirect.bosincasso.nl
portal.bosincasso.nl
mijn.lavg.nl
redirect.bosincasso.nl
payportaal.nl
bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
bosincasso.nl
webmail.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl

Certificate

The complete raw certificate details for bosincasso.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArtEHd0Vlcs0mF5QYO0tL
WaTDRaslF/OgasdjLiryylFyL2w8UT7UBCmonFDcef8CFm7HbdUAazJb7pD7m8ts
fZYpbzRO8ErN5L5l6045+TlDMGZ8EAt9/CuUjI/H8SX7PQ7KAy3GCZXyAOWrt+HG
IdXvq7M4zhVdIJHd7k6a74dLY62Y67y9o4fS6L3tWZ+JSxpl69iEvIxFW3IpbyB0
GN2oEIwWFTOEkKhIIGiJRrn01A9Vd0nvrw/Q3Gs3C5nOJcZoKZKJNsmvsh/xHfXn
TWUiB1oJ/6O7A+HUcLDZt+ck0cKUBU5+E/HkbfZ/+eJURh/vhm+y8JD/xQKk8eEc
iNFzAuhPLX8g7ETGnm9Jajk+WBZC7+fE0ukho1M5y+S1gFru3lVYoOi6YOdUwvXx
GDTCSyuDM1G6D9SpLrKtxpBm7VQBCpixruG2V60Vkb8CLww6awK5b+EqUrRrTLXJ
YlWAG9HDqHeS0kJLMLaZUifstz3Mklt2vgVQkfJ5IzLJ8+X58Zv3Fzahw4Wdrd/L
KYIlKDlKKQovL5/j3G2VIjLqM3qnd6yckvxHzTklO6lkDYjUIS7iDTt01/BdxTgM
D8hlbwqnqTiG2CPYbYDvGBwYy45guloVn3apT3ItjYUqfvlZZOMG35LWU4wm50ai
/fLlCuiFqyO2ByEkPBaQlkUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264409620925954528947621518531528214763960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 05:38:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 05:38:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bosincasso.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713189179506046842245548589887265531208150262245789561017142950625866561152555903803807458515369030458810888677009288577559217472312715046889066584302904799452695807204233340897872545789975839033790137431470304099890771746282427446699236354014385372527569259145197254570663144296915821185623629486332204950166234230453808461517553353067096224741617506890448007669216502269342014548489395557673719308088240403874772668480284610476158022373900022994946643987270024450481185091252490188888592121690079048765884477947544066542813106129726348619160996796484587168237302591989240235311361404859613765057192773517004540901482360899379655197882880204599334735644850762148683450583231626604526431561734067507939233538384634374222165128202308629181556175923200266365506852830180107888318223163172882015006170737787756619657137815746277446118736452831683346577214375527516793349115503361620467384804591723251220333495496770559175535987881816298514261879239284946049280889875360301676601224899620229893151317916427018523571380884797928917315926488038916965650059411623169290239994083394152281113899313668931537343008461081638690295230615191537639008973307036816502440776460790517002380313175605074005742271056946612267507004980924055200023483973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ef7f60a0a503378cf0dcd6a0a00eacd28909751
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblionet.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheekwaterland.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buurtkadoos.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwz.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denieuwebibliotheek.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmus.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelreziekenhuizen.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independer.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnns.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzh.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedasco.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-spitsreizen.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uitchecken.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uvb.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsfietskluis.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profyte.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tele2.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youvia.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziggo.bosincasso.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eacfac519000004030046304402206a500f6c111a7d6b2866fac9d1cd7ba6b0b0acfdba4ed4d2b2bfd6607fcff96a02206165aabeecfe46ab3be07abe20496c459e3105b93086c1844b900a76e67294a1007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eacfac5f400000403004730450221008f251f5723a98966900ebd9ae1af9401f8ac7e87f88eed5fd4709f29d553213f02206185886cf9bf3ecf94280a16d1d0016150d6d6e875756748f3a324f02216ad08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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