www.wateriq.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:a4:5f:2f:66:d6:0b:ed:eb:6d:15:f9:0e:44:e1:65:f3 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wateriq.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:a4:5f:2f:66:d6:0b:ed:eb:6d:15:f9:0e:44:e1:65:f3
Serial Number (int): 342542548743395149417848747557078377260531
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:d9:93:82:24:2b:96:92:1d:30:4c:0a:1e:8c:ba:53:a7:7f:f2:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:32:8b:3c:60:be:c0:f3:41:87:3e:45:a2:30:d4:d6:46:e9:a2:90
Fingerprint (sha256): 41:b3:0d:ad:5f:d2:b9:c6:dc:cd:94:ab:ad:46:b8:66:06:92:41:91:19:bd:8b:43:01:4c:df:f3:f3:50:d2:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.wateriq.nl

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wateriq.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cwdreactor.com
cwdreactor.nl
opticlear.nl
opticleardiamond.com
opticleardiamond.nl
optisteep.com
optisteep.nl
wateriq.nl
www.cwdreactor.com
www.cwdreactor.nl
www.opticlear.nl
www.opticleardiamond.com
www.opticleardiamond.nl
www.optisteep.com
www.optisteep.nl
www.wateriq.nl

Other certificates including the domain name wateriq.nl

(limited to 100 certificates)
www.wateriq.nl
www.wateriq.nl
www.wateriq.nl
www.wateriq.nl
www.wateriq.nl
wateriq.nl
wateriq.nl
www.wateriq.nl
www.wateriq.nl
www.wateriq.nl
www.wateriq.nl
wateriq.nl
wateriq.nl
www.wateriq.nl
wateriq.nl
www.wateriq.nl
www.wateriq.nl
www.wateriq.nl
www.wateriq.nl
wateriq.nl
www.wateriq.nl
www.wateriq.nl
wateriq.nl
wateriq.nl
wateriq.nl
www.wateriq.nl
www.wateriq.nl
wateriq.nl

Certificate

The complete raw certificate details for www.wateriq.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342542548743395149417848747557078377260531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-04 05:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 05:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wateriq.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749954655629044494061472576900476643325360203490149754315516618772049779908044642728896635928170151498095513806611068877369574010269155673734032490513322013510799164232186971655905108669900638737741671939399961860582902410537854137651456673465151531964814920756638383615376647873970199183445171003480596436763677055460150189255833430860142756171566863641509917981921712274940943911417500839826377506195834600973966997004460422951382515914339838024951355928571867377255670352267663376239244558058134641735978038107913957344143048912779126289018776233598662068393008441734175835113437502005229729610916534284720771587800506378144739669501331325032533819442336529998874413850016463174762733710239067286987775563475938737089764871655633826652212457648042424907991765283446604540468929980343927411317451455498978137638104258274011984320325000029886144256581355507962398897853921514901587627086761595943404531995546810448311540546884334892690536767773734749373546895974877039278069398588462211180298348957903002746581455977158725704610422653816932530440433092007592265118795754943490051019703875404204537736068749248604635041847772957673790977719355790620464302280272557959037421819460081886738454175344412703983385146420273297395633945113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70d99382242b96921d304c0a1e8cba53a77ff237
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (294 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwdreactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwdreactor.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticlear.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticleardiamond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticleardiamond.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optisteep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optisteep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wateriq.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwdreactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwdreactor.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticlear.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticleardiamond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opticleardiamond.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optisteep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optisteep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wateriq.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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