www.hjvv.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:23:e0:b6:94:d8:f2:a8:b7:99:57:07:cc:c2:22:60:8c was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hjvv.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:23:e0:b6:94:d8:f2:a8:b7:99:57:07:cc:c2:22:60:8c
Serial Number (int): 292009960575705443544145106248469785501836
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:06:6d:64:52:d6:f4:cb:a1:cf:e5:79:e1:ac:0c:a9:7d:94:4e:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:e5:d8:d1:6b:51:d1:3d:79:0e:14:9c:f2:de:fc:c9:7c:cc:d4:c2
Fingerprint (sha256): 45:b9:22:13:d6:e3:2f:a9:d1:53:62:3e:01:a8:60:e2:26:55:6b:89:d4:a5:85:4c:73:74:60:87:3b:0e:7a:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hjvv.nl

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hjvv.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hjvv.nl
kwaliteitszorg.hjvv.nl
main.hjvv.nl
main.tickitapi.nl
opendag.hjvv.nl
plantenactie.hjvv.nl
schoolplein.hjvv.nl
techniek-api.hjvv.nl
techniek.hjvv.nl
tickit.hjvv.nl
timer.hjvv.nl
www.hjvv.nl
www.kwaliteitszorg.hjvv.nl
www.main.hjvv.nl
www.opendag.hjvv.nl
www.plantenactie.hjvv.nl
www.schoolplein.hjvv.nl
www.techniek-api.hjvv.nl
www.techniek.hjvv.nl
www.tickit.hjvv.nl
www.timer.hjvv.nl

Other certificates including the domain name hjvv.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.hjvv.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292009960575705443544145106248469785501836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-24 16:20:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 16:20:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hjvv.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786945676792576399637378778589120340226831415349061732312351853268348320069054562983862464209141651974153759428055595784467219295681879468078314057450297345258536124853081647765249287464266233076574306358349516545508312630602554332668917298473690627072527878770593455472444062023156519931807876690849358748516552693126277376421192974184216983365482724704671810777998706519700202067588011363856785250726303804607937851976793582798858196807108157319990705216184263164992353538239464215543046988678710038458000313051015318395630085141695657030409307592485749789736286196975064943855595368353839971382574821190284929238721816370644444743256463086154155842973717013035721429023697483036782879971948661449785133992811144213044829501516585205211875348370803812855468350998611039876992105061088806604371905733429495009918068122319290067995679411095385852515278473906777911131280184497151150821323878933040997702658609551781825979597556028830280994945194214599393041577310762120789767534061216529898031824778643360861601103752216903372542411606954823715729079296628303437402604795873329668288529886196331093397736598544628884702951864553578495731810145037900124456456482258807006652877384868009813460820397687898044234820755161670219426654457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8066d6452d6f4cba1cfe579e1ac0ca97d944e0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwaliteitszorg.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.tickitapi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendag.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantenactie.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolplein.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techniek-api.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techniek.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickit.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timer.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwaliteitszorg.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.main.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendag.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantenactie.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolplein.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techniek-api.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techniek.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickit.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timer.hjvv.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016746bcf7eb0000040300463044022031361043cf5df399d18e0e55303e2aa877013b1705123ba50e6f5282c92561b80220194cd2f660e2ab3d33a231ab876dd8269e145b0fdd0c61edf71e7dceb41153e9007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016746bcf9df00000403004730450220454f0931f4033fe073294adc427c9dcb78be6b5a869a0a9c13a0d4c3f6acf474022100dcb33b4d8b596b4a213ac4c291394da848af3c4e2cc6383b99eea1d4d9c32800
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a6fd8c154f29a442eead90134d089a9313613e123c279bca10a4bc578c38dfb0f7d75a32e58e0862ae8f0e4787f78e480d17b4e3981d7985e5cece9e62f4f48c9b45c2893410d476e1da32886bc1bf21d1f5933378a3c77502bb1dca8b0eaab6088cfbaf7257ab2226c9fabbbeb98d1f755db061cabece3b4d5b1158c9f363608b16c4d2d57c2a9220a4386ca3f4ed4d5cf15f14922b2aa396ad936794a87bbeda4bc29fde05e58cd797243bbd92164ab4b55ebd067be4b4390fa0364b81d900e2175319ba2dcd405ad0a73f6bf58b62a1ac102d5504476c0d3b9fcbeb96c6bd037d70318a47264c7e6793f89a81955febc336c29a3711387c73c43f4103787