bouwsaam.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5e:47:5f:6c:30:6f:5d:21:10:7e:eb:a6:7f:ba:72:bc:93 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bouwsaam.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5e:47:5f:6c:30:6f:5d:21:10:7e:eb:a6:7f:ba:72:bc:93Serial Number (int): 293418270936088899758428667184963795467411
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bc:df:66:50:34:1e:18:21:27:b6:30:a4:55:37:a7:68:94:be:6c:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b3:27:fd:a3:63:0b:f7:55:3b:b5:56:05:e8:1c:ed:d0:4e:97:bb:44
Fingerprint (sha256): 3f:f5:5a:2b:bd:af:57:6c:37:7b:6e:9d:37:43:1c:6c:f3:2b:6f:ec:23:72:cb:67:cc:83:75:dd:28:21:0c:95
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bouwsaam.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bouwsaam.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bouwsaam.nl
www.bouwsaam.nl
www.bouwsaam.nl
Other certificates including the domain name bouwsaam.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for bouwsaam.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgISA15HX2wwb10hEH7rpn+6cryTMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjIyMjEwMzBaFw0x OTA2MjAyMjEwMzBaMBYxFDASBgNVBAMTC2JvdXdzYWFtLm5sMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEA8FRjS9dkpoiNWDKQroM5TY6DtqelWJZF1W1X uYt/nFiMXn6cqdCU+tXViGtttR/OsjNcGWcUlnh3AB4Ombctcw1k79NU9b5jE9Sw 4hCu2M0S6nDrDFNqHWXwGuoHX/YkcevNfO6O+cbsEmUoxFgQFo5l3oNGY/dJNeGV oNAYQi0f7QkN55gUNaqInege+uQAGPFOP2A4VQ2VvuQjH8CkNNCzu42+D3JwBAdg 8hW6UfFbdR+Q7hZZPXuNmEU38Wt2iM5Sz1+++4rDsZZm37wv7T1cppLyoVWbeo47 L4rGNWV3Wa7vX97ZvTbj+ljcoj6sSut9rj4sOyQsfg57GFFe7XvT6sc7A4laHvfj yVqGXIPJDId16h2G9cLNVeZ4zL+qBo1zcviFxxkQcy28GBJ40vAqUN7Ob2y4iUoK jnG0nlZT3VYcXI7yf/CqFj2dn50UY6wgJyhNcOYu3QzCaX0HmztciOU5sW4rRgtS 79BkUJcrWcUZcFNbi7wgsiYfJ99fayM75RcqRK0+oHM0vZ7Wjf5EdzgpHMMaizRM zzkBiA4gOcKPsRu1Qx9ynBv1UEbxzsZtGoO0WuYqP2MRff/aQjRxuMFXIS4H1NBw XoKi+dE6vsZi/fgkkK5rvl7j0G6D/IHAAI64E+fdvrAVEhmdc5ub8nEbmpSeGfxu KGpKSv0CAwEAAaOCAnAwggJsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUvN9mUDQe GCEntjCkVTenaJS+bLgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtib3V3c2FhbS5ubIIPd3d3LmJv dXdzYWFtLm5sMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7 zFYAAAFpp6uKqwAABAMARjBEAiB9oVNPD3d8Fty0M6h5iFEWNnWTlQAwtovOpDXb F4shdgIgfDWwCEBClewJBzQffCQ2jMNYTDyImUu1qwprrNnvr6kAdgBj8tvN6DvM LM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWmnq4i5AAAEAwBHMEUCIQCaMwfV Dhyqi900OMe+0w8JAcO+07PnHQbBHuVM2K0eAAIgZXowfa3cRhIRLRooqDSxbwq+ WUme5XbOJKABbHz8F74wDQYJKoZIhvcNAQELBQADggEBAG5kTa2TdSOX/Qz3Rh5l CkkRUhVPRX0iJwGfXL1tS/gWPfJkCLxBvy/3hHcWYuz1YZhCGJmomzg2m0Ha4X6A bbO1misb2GjfRKkWEqL/zy1kP3qms29rwJQicEDGv7LJiQMISaZD0S0ZuqiIz0VS k2CMi9yOo0XzGEgyQcJDgfZKnavzaLiNpuiOvUONmgUIfQj8f7i/WYT/6MNRkO5k hzuQeNa5MosG4IdpCjB6INOBWbRefmHCpUNpdItMXF6PAGwQO8XJH062APPdnVwt JkCkACNEo3TyGvPWOZ2LTNETjtwGJOK4TSR55e5kqfGwwGwYm5b2ZDrNJzngKKGp neE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8FRjS9dkpoiNWDKQroM5 TY6DtqelWJZF1W1XuYt/nFiMXn6cqdCU+tXViGtttR/OsjNcGWcUlnh3AB4Ombct cw1k79NU9b5jE9Sw4hCu2M0S6nDrDFNqHWXwGuoHX/YkcevNfO6O+cbsEmUoxFgQ Fo5l3oNGY/dJNeGVoNAYQi0f7QkN55gUNaqInege+uQAGPFOP2A4VQ2VvuQjH8Ck NNCzu42+D3JwBAdg8hW6UfFbdR+Q7hZZPXuNmEU38Wt2iM5Sz1+++4rDsZZm37wv 7T1cppLyoVWbeo47L4rGNWV3Wa7vX97ZvTbj+ljcoj6sSut9rj4sOyQsfg57GFFe 7XvT6sc7A4laHvfjyVqGXIPJDId16h2G9cLNVeZ4zL+qBo1zcviFxxkQcy28GBJ4 0vAqUN7Ob2y4iUoKjnG0nlZT3VYcXI7yf/CqFj2dn50UY6wgJyhNcOYu3QzCaX0H mztciOU5sW4rRgtS79BkUJcrWcUZcFNbi7wgsiYfJ99fayM75RcqRK0+oHM0vZ7W jf5EdzgpHMMaizRMzzkBiA4gOcKPsRu1Qx9ynBv1UEbxzsZtGoO0WuYqP2MRff/a QjRxuMFXIS4H1NBwXoKi+dE6vsZi/fgkkK5rvl7j0G6D/IHAAI64E+fdvrAVEhmd c5ub8nEbmpSeGfxuKGpKSv0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293418270936088899758428667184963795467411 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 22:10:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 22:10:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bouwsaam.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 980459390769074534700022177173440926912905483655188929826460911932814891853987372986390704526481856856255252321357367453311812278404348472213784222460411706495635727929909559546383594760070072531765573333631514590217941173449397571105235847488674643632593703383515164169472302108276762534134809544177197077927916293175594962515732814869154802541748010367551238464887823376564971856316815822619553379275194003780386330410599913971902265235665904345508671475543403557595767283607102535837229075240273909617487199135945409777762368749924903429535748349582711702834130890141523099331474102125644884210545959068857530186370471730348636506426356907667553025004542877074419388943654400485044349527414529439738955255095872392880260198034763090108968561607030869164364822805070616457216794564667022949736539940421122416231094780888717024275307866140990024103369908224130831693176082097619529386627061880966405404282882442387356904029047966647916079701729673778582629225322420819378777268327550228062513133519542095798720022539814378357651802634250870921017909685984649942254146003668379164578540244612547768511559766459451556527876598071404764443493842468883555312012972295875016301888836754208223212426817846396166783742583317812453344692989 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bcdf6650341e182127b630a45537a76894be6cb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouwsaam.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bouwsaam.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169a7ab8aab000004030046304402207da1534f0f777c16dcb433a879885116367593950030b68bcea435db178b217602207c35b008404295ec0907341f7c24368cc3584c3c88994bb5ab0a6bacd9efafa900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a7ab88b900000403004730450221009a3307d50e1caa8bdd3438c7bed30f0901c3bed3b3e71d06c11ee54cd8ad1e000220657a307daddc4612112d1a28a834b16f0abe59499ee576ce24a0016c7cfc17be . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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