actic.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5a:ed:c1:bb:a6:7f:2c:db:17:5f:4c:b4:d6:15:00:e6:d0 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=actic.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5a:ed:c1:bb:a6:7f:2c:db:17:5f:4c:b4:d6:15:00:e6:d0Serial Number (int): 292278303772461753619028946946122150110928
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 60:a7:02:5b:00:45:65:41:82:77:e6:b2:ed:ea:8f:37:8e:8d:73:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 78:99:a3:ec:80:f5:68:0d:df:7b:05:6c:9d:40:ce:5b:39:20:2a:f5
Fingerprint (sha256): 3d:15:e9:c0:eb:73:63:69:70:31:00:dc:30:30:c6:d5:86:9a:91:5c:8b:ba:6f:45:eb:bb:da:39:95:95:28:4b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate actic.nl
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for actic.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
actic.nl
mail.actic.nl
smtp.actic.nl
www.actic.nl
mail.actic.nl
smtp.actic.nl
www.actic.nl
Other certificates including the domain name actic.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for actic.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgISA1rtwbumfyzbF19MtNYVAObQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDcwMDA3MzZaFw0x OTA1MDgwMDA3MzZaMBMxETAPBgNVBAMTCGFjdGljLm5sMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAtrCDQIKKJQ6XxMB/styUwAVudG24OPOmTK8r+FD3 R4z9tkFpBAWBHv7C5kyz0koyKUtwJ7EiFxWE79UlwpdYBJe1euAcHWvzkxrM6joJ yZfd7XXE9s3VOjEDh+ifp31sUq4iEOvFqpttG8uBg/nllyLAmhrvLOftLecebruv HQNPPSGRsWKqtmNXk0LacggBgeYJScXektiWIy4kJGjHEnPQ8cljzIZIr5nKAmWx SBD3BfrIltsnlUrvfzoGg85tjWCy3X33XLUAvpx4qyjpx56m9/8+HwW6T9EF/Iik U3RaGVGIVl5+BCMGOw5dXbtz0Q0ZFE+Q5J8UYFoQztr+6zfK734FV0bdBdqlVTKQ gdokYvsvLmQZiBI4IWaF6ntMvg0rlgeZZY0Y5uWF4YoU14rF+GMZxLZSYi71JN+c D5hnS9aWwSxjspzZXPnDqZESqEUeSYrAhZ4A6yOEcpBgMkwqoya3SKJzgFloBrXH tbp8Od13jbnTsZXBLVxUxKRun2hnyS30Mk8JDufb+BQJABQeX8hUQQoL1qYEY5x9 EjU3EexUPKAXUcYte86T5JWgg26mqeA76/cB8rI6bTly0EMxPfigWVwLvHAEAaoi 9/8QozkhTezEqsjxu9oM+wUMUgy2HLjLbOU0PsAGv0L5dB00F99bAOg6YVgvRa/n IZUCAwEAAaOCAokwggKFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYKcCWwBFZUGC d+ay7eqPN46Nc8swHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzA/BgNVHREEODA2gghhY3RpYy5ubIINbWFpbC5hY3RpYy5u bIINc210cC5hY3RpYy5ubIIMd3d3LmFjdGljLm5sMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAY/Lbzeg7zCzP C3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFoxX7vBgAABAMARzBFAiBWIoA6hhIQ c860E9aOleL3s5GBMzQMAWDgHPfoJGhc7QIhAJ3vFo84UxoD4hXG4GDmbuYuazXB kbHCLhFIuRhuwVTwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A AAFoxX7wrwAABAMARzBFAiEAiaqJSdrFFbn+NyKCd9pMovYUEujqMu7NGs19+2mS 2fgCIEH39piNt05NC3WN/7pgTwLrNFSFplzLoG5Z4kYNcZTzMA0GCSqGSIb3DQEB CwUAA4IBAQBopAztiO/CP3Rkqau9/MP/SV6uqoe8Y0MFnuA2Boa2vuLDJR/Bn7QL B4yvhm3aW9J71E5tEqG23zfqkkgD/omrUIAr5Sj+nfM0/XL8DYPtS//PUtGNwlwe OE3Pf9H17nkfKLi0oLMFgHObsnltPNNbonUyC/BdJ011G9OH3mjrMOZOsYYC3W5G sRnoUNGm47EoVm2yXlr8wTo9/gRd2f8V35xO/ht4dLhsbIK8q+/lZi4tzQi12rLw fVJJ6n83noI31nSEhdEZZNG0utdmRw2YUwNJzURsnyuZWr+GNhS/XuO6p2kjrZa+ xGQnZ2YmBuBTbzwGCApSalha+LN4zxw3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtrCDQIKKJQ6XxMB/styU wAVudG24OPOmTK8r+FD3R4z9tkFpBAWBHv7C5kyz0koyKUtwJ7EiFxWE79UlwpdY BJe1euAcHWvzkxrM6joJyZfd7XXE9s3VOjEDh+ifp31sUq4iEOvFqpttG8uBg/nl lyLAmhrvLOftLecebruvHQNPPSGRsWKqtmNXk0LacggBgeYJScXektiWIy4kJGjH EnPQ8cljzIZIr5nKAmWxSBD3BfrIltsnlUrvfzoGg85tjWCy3X33XLUAvpx4qyjp x56m9/8+HwW6T9EF/IikU3RaGVGIVl5+BCMGOw5dXbtz0Q0ZFE+Q5J8UYFoQztr+ 6zfK734FV0bdBdqlVTKQgdokYvsvLmQZiBI4IWaF6ntMvg0rlgeZZY0Y5uWF4YoU 14rF+GMZxLZSYi71JN+cD5hnS9aWwSxjspzZXPnDqZESqEUeSYrAhZ4A6yOEcpBg Mkwqoya3SKJzgFloBrXHtbp8Od13jbnTsZXBLVxUxKRun2hnyS30Mk8JDufb+BQJ ABQeX8hUQQoL1qYEY5x9EjU3EexUPKAXUcYte86T5JWgg26mqeA76/cB8rI6bTly 0EMxPfigWVwLvHAEAaoi9/8QozkhTezEqsjxu9oM+wUMUgy2HLjLbOU0PsAGv0L5 dB00F99bAOg6YVgvRa/nIZUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292278303772461753619028946946122150110928 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 00:07:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 00:07:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'actic.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745308146169134396701595857051060984379830605826911763169143482957417996838944960927764435951574468974360585411047971625225038655190384185112149120078614958188767669068611886850572073091067873730448891436254053038560860614208896438724466857750586866912766479142390110985556952979470155801029191034906613067385334745478577262781589448132764922236777081917355393901608053178841238656422701499330164129582119040776327634103506995099037664434524428118067731839123464880288418039866135116462688614490159693267689380807423018498740266339427685902907165932070572678762092433839604325016112483650252723591384840489001607696202770954139646199634400929484712497847978220513337251585130139657089527514889050442222202695244183295561589330663338955657902070892030673966087127297338719476106647219209547657731354869540190375587903101302649544896204651580800027102847306478947100725321169659956990645097239174799246490327387642411364181410798455080903008214964322525573496940978730486773832429849149883483987637995445393501569972924835437012796534384041505973882746951225058950826128283847312545761146625981393042116259952375302783913357398776267856949808399440380420977271594891810834593049855574235111138292166203663109065818518150354097152663957 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60a7025b004565418277e6b2edea8f378e8d73cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actic.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.actic.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.actic.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actic.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168c57eef06000004030047304502205622803a86121073ceb413d68e95e2f7b3918133340c0160e01cf7e824685ced0221009def168f38531a03e215c6e060e66ee62e6b35c191b1c22e1148b9186ec154f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168c57ef0af000004030047304502210089aa8949dac515b9fe37228277da4ca2f61412e8ea32eecd1acd7dfb6992d9f8022041f7f6988db74e4d0b758dffba604f02eb345485a65ccba06e59e2460d7194f3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0068a40ced88efc23f7464a9abbdfcc3ff495eaeaa87bc6343059ee0360686b6bee2c3251fc19fb40b078caf866dda5bd27bd44e6d12a1b6df37ea924803fe89ab50802be528fe9df334fd72fc0d83ed4bffcf52d18dc25c1e384dcf7fd1f5ee791f28b8b4a0b30580739bb2796d3cd35ba275320bf05d274d751bd387de68eb30e64eb18602dd6e46b119e850d1a6e3b128566db25e5afcc13a3dfe045dd9ff15df9c4efe1b7874b86c6c82bcabefe5662e2dcd08b5dab2f07d5249ea7f379e8237d6748485d11964d1b4bad766470d98530349cd446c9f2b995abf863614bf5ee3baa76923ad96bec4642767662606e0536f3c06080a526a585af8b378cf1c37