actic.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:ed:c1:bb:a6:7f:2c:db:17:5f:4c:b4:d6:15:00:e6:d0 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=actic.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:ed:c1:bb:a6:7f:2c:db:17:5f:4c:b4:d6:15:00:e6:d0
Serial Number (int): 292278303772461753619028946946122150110928
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:a7:02:5b:00:45:65:41:82:77:e6:b2:ed:ea:8f:37:8e:8d:73:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:99:a3:ec:80:f5:68:0d:df:7b:05:6c:9d:40:ce:5b:39:20:2a:f5
Fingerprint (sha256): 3d:15:e9:c0:eb:73:63:69:70:31:00:dc:30:30:c6:d5:86:9a:91:5c:8b:ba:6f:45:eb:bb:da:39:95:95:28:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate actic.nl

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for actic.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actic.nl
mail.actic.nl
smtp.actic.nl
www.actic.nl

Other certificates including the domain name actic.nl

(limited to 100 certificates)
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl
actic.nl

Certificate

The complete raw certificate details for actic.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtrCDQIKKJQ6XxMB/styU
wAVudG24OPOmTK8r+FD3R4z9tkFpBAWBHv7C5kyz0koyKUtwJ7EiFxWE79UlwpdY
BJe1euAcHWvzkxrM6joJyZfd7XXE9s3VOjEDh+ifp31sUq4iEOvFqpttG8uBg/nl
lyLAmhrvLOftLecebruvHQNPPSGRsWKqtmNXk0LacggBgeYJScXektiWIy4kJGjH
EnPQ8cljzIZIr5nKAmWxSBD3BfrIltsnlUrvfzoGg85tjWCy3X33XLUAvpx4qyjp
x56m9/8+HwW6T9EF/IikU3RaGVGIVl5+BCMGOw5dXbtz0Q0ZFE+Q5J8UYFoQztr+
6zfK734FV0bdBdqlVTKQgdokYvsvLmQZiBI4IWaF6ntMvg0rlgeZZY0Y5uWF4YoU
14rF+GMZxLZSYi71JN+cD5hnS9aWwSxjspzZXPnDqZESqEUeSYrAhZ4A6yOEcpBg
Mkwqoya3SKJzgFloBrXHtbp8Od13jbnTsZXBLVxUxKRun2hnyS30Mk8JDufb+BQJ
ABQeX8hUQQoL1qYEY5x9EjU3EexUPKAXUcYte86T5JWgg26mqeA76/cB8rI6bTly
0EMxPfigWVwLvHAEAaoi9/8QozkhTezEqsjxu9oM+wUMUgy2HLjLbOU0PsAGv0L5
dB00F99bAOg6YVgvRa/nIZUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292278303772461753619028946946122150110928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 00:07:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 00:07:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'actic.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745308146169134396701595857051060984379830605826911763169143482957417996838944960927764435951574468974360585411047971625225038655190384185112149120078614958188767669068611886850572073091067873730448891436254053038560860614208896438724466857750586866912766479142390110985556952979470155801029191034906613067385334745478577262781589448132764922236777081917355393901608053178841238656422701499330164129582119040776327634103506995099037664434524428118067731839123464880288418039866135116462688614490159693267689380807423018498740266339427685902907165932070572678762092433839604325016112483650252723591384840489001607696202770954139646199634400929484712497847978220513337251585130139657089527514889050442222202695244183295561589330663338955657902070892030673966087127297338719476106647219209547657731354869540190375587903101302649544896204651580800027102847306478947100725321169659956990645097239174799246490327387642411364181410798455080903008214964322525573496940978730486773832429849149883483987637995445393501569972924835437012796534384041505973882746951225058950826128283847312545761146625981393042116259952375302783913357398776267856949808399440380420977271594891810834593049855574235111138292166203663109065818518150354097152663957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60a7025b004565418277e6b2edea8f378e8d73cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.actic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.actic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actic.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168c57eef06000004030047304502205622803a86121073ceb413d68e95e2f7b3918133340c0160e01cf7e824685ced0221009def168f38531a03e215c6e060e66ee62e6b35c191b1c22e1148b9186ec154f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168c57ef0af000004030047304502210089aa8949dac515b9fe37228277da4ca2f61412e8ea32eecd1acd7dfb6992d9f8022041f7f6988db74e4d0b758dffba604f02eb345485a65ccba06e59e2460d7194f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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