leden.davilex.nl

- Visma IT & Communications AS -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ac:8e:3f:ed:9f:5f:b0:b2:00:00:00:00:50:f5:cd:3c was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Visma IT & Communications AS

Organization: Visma IT & Communications AS
Locality: Oslo
Country: NO

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ac:8e:3f:ed:9f:5f:b0:b2:00:00:00:00:50:f5:cd:3c
Serial Number (int): 229365818047120820533069549071769128252
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 61:4b:f0:4f:1e:d2:33:4d:06:46:0b:ef:df:5d:b4:25:4a:27:b6:0e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 88:40:79:4f:5d:8d:d3:4d:2b:f6:d4:e5:99:44:52:44:ab:4f:14:85
Fingerprint (sha256): 44:cb:69:f3:31:60:8b:cb:4e:ba:06:75:5b:04:39:39:8d:21:1c:4d:fb:10:dd:0d:84:5a:03:a7:7a:6d:30:86

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate leden.davilex.nl

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leden.davilex.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leden.davilex.nl
www.leden.davilex.nl
ledenapi.davilex.nl
ledenstaticcontent.davilex.nl
ledenwebservice.davilex.nl

Other certificates including the domain name davilex.nl

(limited to 100 certificates)
www.davilex.nl
www.davilex.nl
www.davilex.nl
www.davilex.nl
online.davilex.nl
online.davilex.nl
webservices.davilex.nl
online.davilex.nl
online.davilex.nl
www.davilex.nl
remote.davilex.nl
remote.davilex.nl
leden.davilex.nl
xbrlservices.davilex.nl
remote.davilex.nl
webservices.davilex.nl
online.davilex.nl
xbrlservices.davilex.nl
online.davilex.nl
staging.leden.davilex.nl
webservices.davilex.nl
online.davilex.nl
www.davilex.nl
online.davilex.nl
test.leden.davilex.nl
online.davilex.nl
leden.davilex.nl
www.davilex.nl
remote.davilex.nl
online.davilex.nl
remote.davilex.nl
www.davilex.nl
xbrlservices.davilex.nl
webservices.davilex.nl
www.davilex.nl
online.davilex.nl
online.davilex.nl
www.davilex.nl
webservices.davilex.nl
remote.davilex.nl
online.davilex.nl

Certificate

The complete raw certificate details for leden.davilex.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ihknmbZ+z2SF5idymqD
tTtNeFPr+NXH/AMCYcBmnVx6TSin7VGXIXZD8y9TXprzG3TsrTJwgMWpJPnOljlK
ldV0faXSaezQor2Fnsm41NJ4B7k7syjqBJ4AL7YIe2rROiZM43tGZZekWRtBrVCO
ZknpEVwmyiiCJwZ0Jy0O3bP+2HPcuqjQhKad6sr6pLCt5WQ/jmIaEZbagOxr16G2
Sya5T1rYrMKsvt+z2C5BYWh0vJjXKY+jhMnfdg7IoJml4YXTV9w30eVnQ1e9Wmc0
3hNKsAHoR2QPp8rmSxA8JjQfhgowSgmMg7lwIuf3YU3OqTas0XL2J+HUXoAgCZbY
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 229365818047120820533069549071769128252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 12:16:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 12:46:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Visma IT & Communications AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leden.davilex.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27539869033994974042596902803125292618997597018020411822824906216938781809249023450701744733552302940471341999035628829692833061964087586745985921865793851945960095082701888838368462630921312376188847908186345101721258428066772818140376031860079480350023168584256839077674831253715628170786242131049178952992282998089598229885031038856418311165625007867852073080351847645566405719733992028622365307243639798222045432944059806204525014143977283725919014504945237967453553454034294065462768855135571304710246684487868348323188640868398534821154892759523577300233690578400827313489706494110658089500801787890025167771801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leden.davilex.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leden.davilex.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledenapi.davilex.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledenstaticcontent.davilex.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledenwebservice.davilex.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							614bf04f1ed2334d06460befdf5db4254a27b60e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042d5e5329181ab7250b57478c06e2a7ee87521c19b51a0168be80b0f4fa84e92efd9a16021fb5881a8f04244893fea6dbe35befc3322b47b7026f7e7aee270d8cf9ae84e8767d495dfc83bdd7f2c6b886bd9ffe878dd0871b41a3bf9561c2ff83a10244fbc7cfd089033ecd05061045ce5763e5eb5fd1da49e6fb4d0ddcf7fbce896acc611160898dd04d5d38a5da95ade5e74b4016ae30b9cae66152cc55a09feac65cf1700766808be1b37d0d72b8e8bdc996799a41b356d563ba4dcb6f6e06174349ae8eba833ebfc63726b8445abe3032eac1ea70cb59e918ad2485e65f7226fdc02de0ddf7a62103ec74f3bfef8bce7eb03e19896faf172acd8a700f6d0