issuetracker.deltares.nl

Issued by Trust Provider B.V. DV SSL CA - G2

About this certificate

This digital certificate with serial number 62:cb:83:ac:57:0c:ee:af:68:c6:1b:9d:e6:8f:7f:22 was issued on by Trust Provider B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=issuetracker.deltares.nl

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 62:cb:83:ac:57:0c:ee:af:68:c6:1b:9d:e6:8f:7f:22
Serial Number (int): 131321050499047186498701670435993386786
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d8:da:ef:d8:e0:ac:71:71:02:de:e6:62:fa:cf:fc:40:3b:fb:a0:52

Fingerprint (sha1): f6:73:d5:71:c7:73:70:99:f7:e6:0b:c9:15:36:b8:b1:99:a5:e3:1c
Fingerprint (sha256): 3d:77:d6:c9:4e:7b:81:ac:20:91:18:e6:dd:cb:c3:72:74:b2:97:0f:02:77:59:e9:53:9e:80:d2:c2:11:f7:16

Issuing Certificate URL: http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt

Revocation information

OCSP Server: http://trustprovider-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl

Check the revocation status for certificate issuetracker.deltares.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for issuetracker.deltares.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

issuetracker.deltares.nl

Other certificates including the domain name deltares.nl

(limited to 100 certificates)
repos.deltares.nl
al-ng027.xtr.deltares.nl
va-mac099.domain.deltares.nl
glowasis.deltares.nl
sip.deltares.nl
issuetracker.deltares.nl
al-ng018.xtr.deltares.nl
svn.oss.deltares.nl
facilities.xtr.deltares.nl
shop.deltares.nl
circle.deltares.nl
issuetracker.deltares.nl
vcenter5.xtr.deltares.nl
iraqwatercrisis-iom.deltares.nl
tl-ng010.xtr.deltares.nl
oss.deltares.nl
*.deltares.nl
waterloupe.deltares.nl
tl-ng023.xtr.deltares.nl
testbuild.deltares.nl
oss.deltares.nl
webmail.deltares.nl
agenda.deltares.nl
svn.oss.deltares.nl
mail.domain.deltares.nl
waterloupe.deltares.nl
onlinesoftware.deltares.nl
tl-tc028.xtr.deltares.nl
crucible.deltares.nl
careers.deltares.nl
workspace.deltares.nl
al-ng007.xtr.deltares.nl
workspace.deltares.nl
issuetracker.avi.deltares.nl
meren.webservices.deltares.nl
ftp.deltares.nl
gds.avi.deltares.nl
v-web002.avi.deltares.nl
tl-ng012.xtr.deltares.nl
tl-ng045.xtr.deltares.nl
tl-ng018.xtr.deltares.nl
softwaredagen.deltares.nl
v-web002.deltares.nl
ast-backend.avi.deltares.nl
aw-tc005.xtr.deltares.nl
publicwiki-tst.deltares.nl
mail.deltares.nl
v-web002.deltares.nl
build.deltares.nl
al-ng043.xtr.deltares.nl
circle.deltares.nl
opendap-matroos.deltares.nl
al-ng018.xtr.deltares.nl
modeldata-nhi-data.deltares.nl
shop.deltares.nl
www.riverlab.deltares.nl
globalmodelviewer.deltares.nl
dw-oc002.xtr.deltares.nl
oss.deltares.nl
tl-ng044.xtr.deltares.nl
covadem.deltares.nl
repos.deltares.nl
tl-ws005.xtr.deltares.nl
intranet.deltares.nl
tl-tc030.xtr.deltares.nl
intranet.deltares.nl
tl-ng029.xtr.deltares.nl
pl-036.xtr.deltares.nl
content.oss.deltares.nl
fewsfoentest.deltares.nl
al-ng009.xtr.deltares.nl
tl-tc029.xtr.deltares.nl
publicwiki.deltares.nl
sip.deltares.nl
build.deltares.nl
tl-ng017.xtr.deltares.nl
vt-mac099.domain.deltares.nl
al-ng009.xtr.deltares.nl
www.deltares.nl
zabbix.xtr.deltares.nl
spacewalk.xtr.deltares.nl
intranet.deltares.nl
touch.deltares.nl
www.deltares.nl
dl-ng009.xtr.deltares.nl
www.deltares.nl
glossis.webservices.deltares.nl
acceptatie-intranet.deltares.nl
tl-ng042.xtr.deltares.nl
publicwiki.deltares.nl
modeldata-nhi-data.deltares.nl
opendap.deltares.nl
uaewqps.deltares.nl
tl-ng032.xtr.deltares.nl
al-ng025.xtr.deltares.nl
repos.deltares.nl
al-ng005.xtr.deltares.nl
aw-tc003.xtr.deltares.nl
uaewqps.deltares.nl
accounts.deltares.nl

Certificate

The complete raw certificate details for issuetracker.deltares.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RbDQqQJHHKWwqq2Kkwg
iYveQSZDZzENqNy/AQchLA3wWxO5kYNAnrAhrh7fke87I6163YxQ7AnXqGhD0lB7
YV8k+qSwWGXKNJzaOfZosynBaJ3V3xHLt3n7LFxSWXkV8XfsJLilnOcRl2l2Py2G
YdLh+9MUya/aWPREBfEbN4D6drmkni8/KdL8JZmQDur2Qjh1jowkP7R5UH+5N0tr
OB+mWT4Bx/RV9U3XDMRanfizxBHCCRkGXxf27ZqXvir5x78jm78OERJOooLIrHqL
2RtxxEIIO0U4c+iIIRmyAalhofcVMRCVozrQ+a0lV48QYDL5xVmnJKk0gKmbVWWF
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131321050499047186498701670435993386786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'issuetracker.deltares.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28919796560506580073444262921228106023161256867253404539895979727673921395307215408774773304462347544514925779405135547857186434375420458202058305011986892238408549560611422526008593442294579816154282388168666378628715562825663293419979211215051350492636284524429645432460365834825100799928463743784550650922435319927452511629128558553568703162002271521168824370184815916279564008051556055437061197662581490108158848132613610294383708709825762695202149992902030836014921172224846613231165440331294163222999695142774585406177861420891538602581914111145672562472183643809431991865597864153699522558045688239662674838871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issuetracker.deltares.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8daefd8e0ac717102dee662facffc403bfba052
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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