opendag.hjvv.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:22:ec:88:fa:a7:cd:02:08:db:e8:e6:d7:ae:b6:2f:a4 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opendag.hjvv.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:22:ec:88:fa:a7:cd:02:08:db:e8:e6:d7:ae:b6:2f:a4
Serial Number (int): 305960269774105658573807435486444758904740
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:db:62:21:9d:2a:f8:4f:d5:fd:60:37:ab:34:33:24:27:45:e2:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:67:59:a2:05:3a:04:bc:47:c2:81:79:ba:3d:23:18:22:fa:c5:81
Fingerprint (sha256): 40:fa:b2:74:cd:c4:75:3c:8b:dc:f3:25:1c:7d:04:20:b1:25:ad:d2:83:2a:ce:e8:d8:a6:90:e6:9f:d3:9a:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate opendag.hjvv.nl

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opendag.hjvv.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opendag.hjvv.nl
plantenactie.hjvv.nl
schoolplein.hjvv.nl
techniek-api.hjvv.nl
techniek.hjvv.nl
tickit.hjvv.nl
timer.hjvv.nl
www.plantenactie.hjvv.nl
www.schoolplein.hjvv.nl
www.techniek-api.hjvv.nl
www.techniek.hjvv.nl
www.tickit.hjvv.nl
www.timer.hjvv.nl

Other certificates including the domain name hjvv.nl

(limited to 100 certificates)
www.hjvv.nl
travelgame.lob.com
www.taptechie.com
www.hjvv.nl
www.hjvv.nl
www.hjvv.nl
www.hjvv.nl
www.hjvv.nl
dev.widget.shop.klappert.nl
acc.dots-and-boxes.hjvv.nl
vodras.com
www.hjvv.nl
www.meu.org.in
www.hjvv.nl
we-qa.bop-tech.com
opendag.hjvv.nl
www.hjvv.nl
digiprodigy.tech
www.hjvv.nl
sketchbook.timeblur.io
cdn.tttm.us
xn--sknad-vua.fagbrev.io
www.tracking.sb-group.dk
travelgame.lob.com
www.hjvv.nl
www.taptechie.com
brain-store.elrego.com
www.hjvv.nl
www.tracking.sb-group.dk
l.xn--fz4a.my.id
www.onlinecvs.xyz
acc.dots-and-boxes.hjvv.nl
chat.xujan.com
xn--sknad-vua.fagbrev.io
www.hjvv.nl
brain-store.elrego.com
www.hjvv.nl
aircloudproapps.hitachiaircon.com
xn--2e0bj6q8to.xn--9t4b29cmcb21sgvs.com
training.asiapacificforum.net
www.mototaxigo.com
www.hjvv.nl
www.hjvv.nl
xn--brstappen-17a.se
www.hjvv.nl
www.hjvv.nl
school.ulife.cm
xn--2e0bj6q8to.xn--9t4b29cmcb21sgvs.com
www.hjvv.nl
dev-video.tfimedia.in
www.hjvv.nl
www.hjvv.nl
r42.ch
www.bitfried.com
www.hjvv.nl
www.hjvv.nl
r42.ch
www.hjvv.nl
deep.sugarlive.co.id
yantrik.in
www.hjvv.nl
www.hjvv.nl
xn--frskring-2za1p.granat.app
dashboard.proiily.com
xn--voldinrerelasjoner-tub.com
www.hjvv.nl
open.mybiz.stg.3o3.co.kr
srv.ms
www.canererdogan.tech
www.hjvv.nl
we-qa.bop-tech.com
redirect.xrex.io
www.hjvv.nl
andhaadhirehab.in
www.onlinecvs.xyz

Certificate

The complete raw certificate details for opendag.hjvv.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvJ2D8cDcZOU3DePuFRPR
enLQvafaeIngP9nTocKqpp+PHssR9UqvEk6QF5kGD/RDO6sG9I20+QEH6FNcARQl
8/0K5XWMh7TL03kOAJR9EMwH/OrN+N65TPuJeprwHE20ACeZNb1aTUhnLzQQEjY1
bpb2zhxYKQtdopX1DILKuvAfUTOEDmeEamXAYQ78ucC5sBwRizxDCeqPIATn2GcA
GRorTbGNPVgW+mjIxPvYMlneIvsvUItAjNT8LRRQu1NpqrYzjHq7J6RwGOC2hUoa
no0OEN6BBuFTIv2ydmtNp9t/xIShUXf3UhZhK+fSVY1ba2oq+KGZUssD9Yt7d91T
c30yfF6lx1aDaZaj6aDgxPImq9c8e9a806P5TPmdAqUgx5pNnD4DAEV31ybgaAZb
TtOcqOaRsMeBba8lg4S+NgIvkzmqIkopZAaFU1XGiak0XbsUbfCnxnClEwlxNrBf
mJGzWSKLiwkXjxpamZiHO+v8m0nAvn9tgMZodWnpH/U/96xU67K3RK2mTu5U22j/
mEsZl2Qh6CXVpNkS7I77++14KEeyRHFBB456MpWUU47IewZuXlHS0zXJD6yDZv4k
ghcwelL5w8NOgPk4IEqcmLjUJmTaowQJ7msygWtqoSiHyPA/JmmfakoG1SZJDVsv
nOrpCHObxm0OYsiybYNxK/8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305960269774105658573807435486444758904740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-09 16:43:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-09 16:43:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opendag.hjvv.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769483267593613851337445557462046871679481443304493508463933500762239531087568584315113233667699687348952068129892927310695348148982043418440642591540343769175998042661606330922840416596950375895305487945006499927160683007308910281086758488957259845857750889102812542191939192659211683142424833744179459254340560409097493289368255378146382541816749344597284240523047135612650098416821261006862608787064899621093860202034769512420730961926287521134865099770549417065815272060518272853035763868576602172941453042811897286735900644118997706534009087617454318222410781251589345837368122912495586232747732975079070224454782045937882281293278111263601742969991378822179797540852640110303734169691379199340666111065697258890543096057866145907065696106930224642345643995706199572347126597658277584627529090212426724768552390154950179029102612277871127504918300843547825463429788284038361043947311321957412196329573169463307526689564965399802390440624228579501710925468835828349097002115176402897551011925779420614442202523173361396593922453667333150021467754961829248001175429995362290382049588638311934966640630930604432865959160586449281224656059350969637326449677026428575515575295500678477260548031496027233447511688713670894345492966399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fdb62219d2af84fd5fd6037ab3433242745e2e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (273 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendag.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantenactie.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolplein.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techniek-api.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techniek.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickit.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timer.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantenactie.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolplein.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techniek-api.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techniek.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickit.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timer.hjvv.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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