acc.creator.kluwer.nl

- Kluwer -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 4d:d4:8a:b9:49:d9:44:d8:d7:c4:39:40:e3:ff:1b:71 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Kluwer

Organization: Kluwer
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Overijssel
Locality: Deventer
Country: NL

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:d4:8a:b9:49:d9:44:d8:d7:c4:39:40:e3:ff:1b:71
Serial Number (int): 103454136262038342481042302759103044465
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 7b:ed:12:ba:09:b1:18:e8:62:53:00:2d:c7:4f:df:f3:96:49:ba:6f
Fingerprint (sha256): 3c:b8:b4:92:40:27:7d:52:3a:0b:bf:6b:8a:55:3d:02:96:fb:b0:78:aa:a9:1a:75:02:da:a6:10:63:f3:86:a8

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate acc.creator.kluwer.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acc.creator.kluwer.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acc.creator.kluwer.nl

Other certificates including the domain name kluwer.nl

(limited to 100 certificates)
verhaal.kluwer.nl
pdf.kluwer.nl
velvet.stg.kluwer.nl
login.wolterskluwer.eu
pdf.kluwer.nl
cp-stg.kluwer.nl
checkmate.kluwer.nl
*.communities.kluwer.nl
login-stg.kluwer.nl
*.communities.kluwer.nl
hulpopafstand.kluwer.nl
*.creator.kluwer.nl
login-qa.kluwer.nl
velvet.qa.kluwer.nl
gebruikersregistratie.kluwer.nl
*.kluwer.nl
auteursapp.kluwer.nl
topdesk5acc.kluwer.nl
kluwer.nl
i.navigator.kluwer.nl
login.kluwer.nl
navigator.kluwer.nl
checkmate.kluwer.nl
extranet.kluwer.nl
checkmate.kluwer.nl
*.navigator.kluwer.nl
sni.cloudflaressl.com
navigator.kluwer.nl
sni.cloudflaressl.com
pumaapp.kluwer.nl
opl.creator.kluwer.nl
webmail.kluwer.nl
verhaal.kluwer.nl
*.kluwer.nl
checkmate.kluwer.nl
*.kluwer.nl
hybrid.kluwer.nl
broker.kluwer.nl
acc.creator.kluwer.nl
*.navigator.kluwer.nl
login-qa.kluwer.nl
velvet.qa.kluwer.nl
oplauteurs.kluwer.nl
broker.kluwer.nl
kluwer.nl
broker.kluwer.nl
checkmate.kluwer.nl
*.navigator.kluwer.nl
*.creator.kluwer.nl
topdesk5.kluwer.nl
creator.kluwer.nl
*.kluwer.nl
creator.kluwer.nl
custom.info.acc002.communities.kluwer.nl
portal.kluwer.nl
login-qa.kluwer.nl
redactieportal.kluwer.nl
velvet.kluwer.nl
*.kluwer.nl
sni.cloudflaressl.com
sni.cloudflaressl.com
accpumaapp.kluwer.nl
webmail.kluwer.nl
topdesk5.kluwer.nl
velvet.kbd11.kluwer.nl
pdf.kluwer.nl
creator.kluwer.nl
smartdox.kluwer.nl
checkmate.kluwer.nl
checkmate.kluwer.nl
*.kluwer.nl
prod.shop.kluwer.nl
hybrid.kluwer.nl
sni.cloudflaressl.com
e-invoicing.kluwer.nl
sni.cloudflaressl.com
iam.acc001.communities.kluwer.nl
login-stg.kluwer.nl
portal.kluwer.nl
*.navigator.kluwer.nl
sni.cloudflaressl.com
behacc.creator.kluwer.nl
topdesk5.kluwer.nl
hulpopafstand.kluwer.nl
verhaal.kluwer.nl
*.shop.kluwer.nl
accpumaapp.kluwer.nl
login-qa.kluwer.nl
iam-qa.kluwer.nl
prod.shop.kluwer.nl
navigator.kluwer.nl
velvet.stg.kluwer.nl
*.kluwer.nl
oplauteurs.kluwer.nl
checkmate.kluwer.nl
sni.cloudflaressl.com
hybrid.kluwer.nl
iam.acc001.communities.kluwer.nl
smartdox.kluwer.nl
login.kluwer.nl

Certificate

The complete raw certificate details for acc.creator.kluwer.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV4CB2Gq/eUpBKu77E4Q
uvlBFw91cgGeQmyAs9aGqkHBHT58frSOX+rn5JcOfblbkphN7TH6TE6PwREDCS94
RR9iio4KPgS4x1NMcnvxgvLNGkeARwFtF4XKRjjSUUTfoMPZ8+pXlceov/4B1+b6
JwkObBq9w/RBDGNIfAZmcxXs7JWVfbcD9kdNLPBhv9aeLcCG0sePDNT3ewqV5QRv
pbnI4nXZrFkKELC7t8AR4wEXuMtn09NuA75sZBq54hvUzF8JrWi5fJNBq4luZZ1H
vMet4acNZAgNX+J/v7dvdRqTUqtN6nInlAq/4c1Q4P0Y5bHwvs0O5saLfvUtyqt3
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103454136262038342481042302759103044465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Overijssel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Deventer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Kluwer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'acc.creator.kluwer.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25420256333811237400827348790940235480963901929990722993489307585425264197527607670693132794010749257474689535482969861633968122652220263534107037009132048963389917465574035793081160222990909218534610987784081628202390447043210680440007004923783563975348444414787251170643526831477154502994092777253998598669214659497254691675767010157242294348891901370636057311199250343808335542627914403376286315560639600104483560942839253257071604000956367178413375444300021572077765521098581189667334353937839628341442880574868686417999562582164853367795915819302251139450963676319613726795728789941135244579146032370407290140533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc.creator.kluwer.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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