bouwsaam.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:47:5f:6c:30:6f:5d:21:10:7e:eb:a6:7f:ba:72:bc:93 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bouwsaam.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:47:5f:6c:30:6f:5d:21:10:7e:eb:a6:7f:ba:72:bc:93
Serial Number (int): 293418270936088899758428667184963795467411
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:df:66:50:34:1e:18:21:27:b6:30:a4:55:37:a7:68:94:be:6c:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:27:fd:a3:63:0b:f7:55:3b:b5:56:05:e8:1c:ed:d0:4e:97:bb:44
Fingerprint (sha256): 3f:f5:5a:2b:bd:af:57:6c:37:7b:6e:9d:37:43:1c:6c:f3:2b:6f:ec:23:72:cb:67:cc:83:75:dd:28:21:0c:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bouwsaam.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bouwsaam.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bouwsaam.nl
www.bouwsaam.nl

Other certificates including the domain name bouwsaam.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for bouwsaam.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgISA15HX2wwb10hEH7rpn+6cryTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjIyMjEwMzBaFw0x
OTA2MjAyMjEwMzBaMBYxFDASBgNVBAMTC2JvdXdzYWFtLm5sMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEA8FRjS9dkpoiNWDKQroM5TY6DtqelWJZF1W1X
uYt/nFiMXn6cqdCU+tXViGtttR/OsjNcGWcUlnh3AB4Ombctcw1k79NU9b5jE9Sw
4hCu2M0S6nDrDFNqHWXwGuoHX/YkcevNfO6O+cbsEmUoxFgQFo5l3oNGY/dJNeGV
oNAYQi0f7QkN55gUNaqInege+uQAGPFOP2A4VQ2VvuQjH8CkNNCzu42+D3JwBAdg
8hW6UfFbdR+Q7hZZPXuNmEU38Wt2iM5Sz1+++4rDsZZm37wv7T1cppLyoVWbeo47
L4rGNWV3Wa7vX97ZvTbj+ljcoj6sSut9rj4sOyQsfg57GFFe7XvT6sc7A4laHvfj
yVqGXIPJDId16h2G9cLNVeZ4zL+qBo1zcviFxxkQcy28GBJ40vAqUN7Ob2y4iUoK
jnG0nlZT3VYcXI7yf/CqFj2dn50UY6wgJyhNcOYu3QzCaX0HmztciOU5sW4rRgtS
79BkUJcrWcUZcFNbi7wgsiYfJ99fayM75RcqRK0+oHM0vZ7Wjf5EdzgpHMMaizRM
zzkBiA4gOcKPsRu1Qx9ynBv1UEbxzsZtGoO0WuYqP2MRff/aQjRxuMFXIS4H1NBw
XoKi+dE6vsZi/fgkkK5rvl7j0G6D/IHAAI64E+fdvrAVEhmdc5ub8nEbmpSeGfxu
KGpKSv0CAwEAAaOCAnAwggJsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUvN9mUDQe
GCEntjCkVTenaJS+bLgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtib3V3c2FhbS5ubIIPd3d3LmJv
dXdzYWFtLm5sMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB
BAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7
zFYAAAFpp6uKqwAABAMARjBEAiB9oVNPD3d8Fty0M6h5iFEWNnWTlQAwtovOpDXb
F4shdgIgfDWwCEBClewJBzQffCQ2jMNYTDyImUu1qwprrNnvr6kAdgBj8tvN6DvM
LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWmnq4i5AAAEAwBHMEUCIQCaMwfV
Dhyqi900OMe+0w8JAcO+07PnHQbBHuVM2K0eAAIgZXowfa3cRhIRLRooqDSxbwq+
WUme5XbOJKABbHz8F74wDQYJKoZIhvcNAQELBQADggEBAG5kTa2TdSOX/Qz3Rh5l
CkkRUhVPRX0iJwGfXL1tS/gWPfJkCLxBvy/3hHcWYuz1YZhCGJmomzg2m0Ha4X6A
bbO1misb2GjfRKkWEqL/zy1kP3qms29rwJQicEDGv7LJiQMISaZD0S0ZuqiIz0VS
k2CMi9yOo0XzGEgyQcJDgfZKnavzaLiNpuiOvUONmgUIfQj8f7i/WYT/6MNRkO5k
hzuQeNa5MosG4IdpCjB6INOBWbRefmHCpUNpdItMXF6PAGwQO8XJH062APPdnVwt
JkCkACNEo3TyGvPWOZ2LTNETjtwGJOK4TSR55e5kqfGwwGwYm5b2ZDrNJzngKKGp
neE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8FRjS9dkpoiNWDKQroM5
TY6DtqelWJZF1W1XuYt/nFiMXn6cqdCU+tXViGtttR/OsjNcGWcUlnh3AB4Ombct
cw1k79NU9b5jE9Sw4hCu2M0S6nDrDFNqHWXwGuoHX/YkcevNfO6O+cbsEmUoxFgQ
Fo5l3oNGY/dJNeGVoNAYQi0f7QkN55gUNaqInege+uQAGPFOP2A4VQ2VvuQjH8Ck
NNCzu42+D3JwBAdg8hW6UfFbdR+Q7hZZPXuNmEU38Wt2iM5Sz1+++4rDsZZm37wv
7T1cppLyoVWbeo47L4rGNWV3Wa7vX97ZvTbj+ljcoj6sSut9rj4sOyQsfg57GFFe
7XvT6sc7A4laHvfjyVqGXIPJDId16h2G9cLNVeZ4zL+qBo1zcviFxxkQcy28GBJ4
0vAqUN7Ob2y4iUoKjnG0nlZT3VYcXI7yf/CqFj2dn50UY6wgJyhNcOYu3QzCaX0H
mztciOU5sW4rRgtS79BkUJcrWcUZcFNbi7wgsiYfJ99fayM75RcqRK0+oHM0vZ7W
jf5EdzgpHMMaizRMzzkBiA4gOcKPsRu1Qx9ynBv1UEbxzsZtGoO0WuYqP2MRff/a
QjRxuMFXIS4H1NBwXoKi+dE6vsZi/fgkkK5rvl7j0G6D/IHAAI64E+fdvrAVEhmd
c5ub8nEbmpSeGfxuKGpKSv0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293418270936088899758428667184963795467411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 22:10:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 22:10:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bouwsaam.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 980459390769074534700022177173440926912905483655188929826460911932814891853987372986390704526481856856255252321357367453311812278404348472213784222460411706495635727929909559546383594760070072531765573333631514590217941173449397571105235847488674643632593703383515164169472302108276762534134809544177197077927916293175594962515732814869154802541748010367551238464887823376564971856316815822619553379275194003780386330410599913971902265235665904345508671475543403557595767283607102535837229075240273909617487199135945409777762368749924903429535748349582711702834130890141523099331474102125644884210545959068857530186370471730348636506426356907667553025004542877074419388943654400485044349527414529439738955255095872392880260198034763090108968561607030869164364822805070616457216794564667022949736539940421122416231094780888717024275307866140990024103369908224130831693176082097619529386627061880966405404282882442387356904029047966647916079701729673778582629225322420819378777268327550228062513133519542095798720022539814378357651802634250870921017909685984649942254146003668379164578540244612547768511559766459451556527876598071404764443493842468883555312012972295875016301888836754208223212426817846396166783742583317812453344692989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcdf6650341e182127b630a45537a76894be6cb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouwsaam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouwsaam.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a7ab8aab000004030046304402207da1534f0f777c16dcb433a879885116367593950030b68bcea435db178b217602207c35b008404295ec0907341f7c24368cc3584c3c88994bb5ab0a6bacd9efafa900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a7ab88b900000403004730450221009a3307d50e1caa8bdd3438c7bed30f0901c3bed3b3e71d06c11ee54cd8ad1e000220657a307daddc4612112d1a28a834b16f0abe59499ee576ce24a0016c7cfc17be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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