www.plaatseensteen.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:34:cb:87:69:8a:47:9d:8b:cb:d8:b2:b4:89:06:56:e9:16 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.plaatseensteen.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:cb:87:69:8a:47:9d:8b:cb:d8:b2:b4:89:06:56:e9:16
Serial Number (int): 366414363190758685518134515053056669182230
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:4a:20:c6:03:de:9e:d8:73:bf:c5:b9:59:b5:e7:2b:d3:5a:f2:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:4e:30:5c:cd:e4:18:61:f2:2f:e4:e9:22:3b:a9:f1:fe:fa:c0:f4
Fingerprint (sha256): 3f:bb:05:4c:83:a8:52:9f:2b:bf:83:c5:55:4b:ad:73:90:1d:35:ee:ff:f6:91:9d:a0:11:a0:6e:32:cd:fd:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.plaatseensteen.nl

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.plaatseensteen.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plaatseensteen.nl
placeastone.nl
www.plaatseensteen.nl
www.placeastone.nl

Other certificates including the domain name plaatseensteen.nl

(limited to 100 certificates)
www.placeastone.nl
plaatseensteen.studiomoniker.com
www.placeastone.nl
www.placeastone.nl
www.placeastone.nl
www.placeastone.nl
www.placeastone.nl
www.placeastone.nl
www.plaatseensteen.nl
www.plaatseensteen.nl
www.placeastone.nl
www.plaatseensteen.nl
www.placeastone.nl
www.placeastone.nl
www.placeastone.nl
placeastone.nl
www.placeastone.nl
placeastone.studiomoniker.com
www.plaatseensteen.nl
www.plaatseensteen.nl
www.placeastone.nl
www.plaatseensteen.nl
www.plaatseensteen.nl
www.plaatseensteen.nl
www.plaatseensteen.nl
www.placeastone.nl
www.plaatseensteen.nl
www.plaatseensteen.nl
www.plaatseensteen.nl
placeastone.studiomoniker.com
plaatseensteen.nl
www.placeastone.nl
www.placeastone.nl
www.plaatseensteen.nl
www.placeastone.nl
www.placeastone.nl
www.plaatseensteen.nl
www.placeastone.nl
www.plaatseensteen.nl
placeastone.nl
www.placeastone.nl
www.plaatseensteen.nl

Certificate

The complete raw certificate details for www.plaatseensteen.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcCNymJyU4B7z3xqtH6k
KK+fdJFW1rAqQxAceIgULox8s2Ym6HgNvNPlIQsCT6KtmiZjiLllcC6J/JfRx6Jh
urN/nJ9oZAlUvPNM7DTCy4Mxa+zURYqrcgpQf7yMSFPCzkCRSUMtljZHCxyKT0Vg
Cx7uaV3H4TbyMRlkwct9XY7XzkTn3+cuVKqn1h9jI259giGo+BE+rS+VWjY+bHqr
qrwdn6VDVkHRvi20crAqCwBYlAO/9PMKQ8TlxLXY3ESkTPv28MlbjyqUEangMaJL
EWqCdzbZZh+/ziWW6i/03QoxR35Xp17Z+MI30P+Zpi+KHqAA+tdID3RWQImzDuCv
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366414363190758685518134515053056669182230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 23:50:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:50:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.plaatseensteen.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21429225391165710050403317252971295444107557612757867899554313207778292781915079487258442226948539450042062517130515530680234517581377581320435571250198876866369876138002148076369915410379556872092012624669860781530245870899408627799129684790069819979294559891020563741509991893806556725472560435049946433212590239565335735471401546337006416028646010963702305774859708326754828991670422428103000830219663759102382760202918737676600494784303182490019626913540324567285156758058037844425918765185541440931226421272686812288639680888115453846885459827884060636047967331365337097429597111001292475675359419486323540537311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e4a20c603de9ed873bfc5b959b5e72bd35af287
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plaatseensteen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeastone.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plaatseensteen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placeastone.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b11ea72290000040300483046022100da882271efcc2383c703abea0610d94bfa12f0a2af398cd14f54cbcd8bbc4630022100c8cdf274580748e88624db173713effa2e20be0310ac5f5508a35e756d1ffcad007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b11ea7242000004030047304502207c9e45117b691163ca593d1b39d648e4c4840c58dd60c7147c66493e61487583022100c9cc52f9d4d5724c49e967751a5b2d5224345ef9e3dc39f54600e6b95023d37b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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