dataintelligence.zuyd.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1d:f8:f4:89:aa:e1:8a:56:b0:3c:5a:d5:1d:01:56:39:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dataintelligence.zuyd.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:f8:f4:89:aa:e1:8a:56:b0:3c:5a:d5:1d:01:56:39:32
Serial Number (int): 358648250623365048357406155655143967045938
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a5:34:2c:05:69:00:b7:0e:d1:97:ff:e8:a2:1a:38:e1:e7:0b:54:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:0c:40:8b:94:b6:dd:d8:ee:dc:d2:8e:a9:4e:da:36:6b:39:31:cc
Fingerprint (sha256): 45:e5:9d:1d:92:79:e0:4e:fa:7b:e6:66:76:41:6f:d5:7e:1f:29:c0:59:cf:f5:27:60:70:8f:2e:c7:ac:42:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dataintelligence.zuyd.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dataintelligence.zuyd.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dataintelligence.zuyd.nl

Other certificates including the domain name zuyd.nl

(limited to 100 certificates)
desktop.zuyd.nl
print.zuyd.nl
gitlab.services.zuyd.nl
vpn.zuyd.nl
moodle.zuyd.nl
guest-networkaccess.zuyd.nl
osiris-basis.zuyd.nl
osirisdocent.zuyd.nl
account.zuyd.nl
icto.community.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
regularstudent.zuyd.nl
events-api.zuyd.nl
rbs.services.zuyd.nl
hybrid.zuyd.nl
idservice.zuyd.nl
osiris.zuyd.nl
*.test.zuyd.nl
qmp.zuyd.nl
account.zuyd.nl
tol.zuyd.nl
community.zuyd.nl
osirisacc-cursusinvoer.test.zuyd.nl
gateway.services.zuyd.nl
vpn.zuyd.nl
cardsonline.zuyd.nl
managementinfo.zuyd.nl
magic.zuyd.nl
exchangestudent.zuyd.nl
acceptatie.zuyd.nl
betalen.zuyd.nl
hybrid.zuyd.nl
direct-access.zuyd.nl
moodle.zuyd.nl
crmzuyd.nl
www.zuyd.nl
desktop.zuyd.nl
print.zuyd.nl
sorry.zuyd.nl
account.zuyd.nl
*.community.zuyd.nl
covoordummies.zuyd.nl
alumni.zuyd.nl
crmzuyd.nl
exchangestudent.zuyd.nl
desktop.zuyd.nl
centralerepro.zuyd.nl
dynamics.zuyd.nl
vpn.zuyd.nl
desktop.zuyd.nl
vpn.zuyd.nl
rooster.zuyd.nl
exchangestudent.zuyd.nl
webvpn.zuyd.nl
dataintelligence.zuyd.nl
tol.zuyd.nl
osirissup-basis.test.zuyd.nl
blackboard.zuyd.nl
sts.zuyd.nl
api.zuyd.nl
crmzuyd.nl
cardsonline.zuyd.nl
osirisprj-basis.test.zuyd.nl
help.zuyd.nl
gateway.services.zuyd.nl
sts.zuyd.nl
hotelschool.zuyd.nl
www.zuyd.nl
covoordummies.zuyd.nl
facilitynet.zuyd.nl
netlab.ict.zuyd.nl
*.test.zuyd.nl
covoordummies.zuyd.nl
digitaledidactiek.zuyd.nl
rbs.services.zuyd.nl
facilitynet.zuyd.nl
osiris-basis.zuyd.nl
magic.zuyd.nl
test.crm.server11m.eyehost.eu
rbs.services.zuyd.nl
dataintelligence.zuyd.nl
print.zuyd.nl
crmzuyd.nl
sorry.zuyd.nl
crmzuyd.nl
www.zuyd.nl
crmzuyd.nl
covoordummies.zuyd.nl
covoordummies.zuyd.nl
crmzuyd.nl
crmzuyd.nl
uaportal.hszuyd.nl
garfield.services.zuyd.nl
netdb.services.zuyd.nl
tol.zuyd.nl
netdb.services.zuyd.nl
print.zuyd.nl
osiris.zuyd.nl
vpn.zuyd.nl

Certificate

The complete raw certificate details for dataintelligence.zuyd.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzaHn/+7b1UCRF9NUYVOL
8lUddqO2WqeH0uH2liAOtSiOj40tHLGn1D1wIp/laTi5faSx9Zk/IQ3OHT/jeThM
hp/KTcmh1hHlA3umlYnsQG1/DuSfzTP9jQP34qdFp7gwARuLbJCZkFl3cWTMP8XI
9mvBELjG1IuwT/DMaMqyBofm/l5cvb7++1WQpPLl15aLegWwVeDftQzw4BG9832C
N9U28SaoNycBLUfqc1S/0LgnazwqIQ0YfsVcLyLB86Wx4nteDW3c7U89AFuLQ8Le
FzrIjfmteglzKu5YLezsSt7XRdcylvTH35P4tfXSjO4W9NgF7p2taZ7xeQfdE7nY
Gr+EoBuQzQPKFfRFBaxBGEVUI0YhnoEjfzDe+IZdh6pkNMBizYNlrf87SdT+i0KS
gXaVbD5ZIC14s82mPhYrCXVUeGlUBIY2SCDQ9lscnAeH3Lg5rIu2m64OuaIc67Lo
4mhfNk3XBCD0+7ZQfrqGaJPgS443KtzMRgkuRAIodgH2X3QOUzsyvvyVtzEv3rRx
Rml4h82OlVSOp9R3RvEBmsrHL04CM1Cqg/HT3/G6En2rn0NmwiVEb7fS0/rHKTFT
8JXd5bauKRVg+5vVF1bxNoXpa9/7t87EQ5A1V4hxWKpIgOpFFRDsf8NgP1HgK4Qt
AZFICV+8uf2Odht+ABwkB7kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358648250623365048357406155655143967045938
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 04:13:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 04:13:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dataintelligence.zuyd.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838907189679359282260729814321986466100823555135621045873593375248577221511092396850766795528107843930426061138160380451481005972030618448455536281470812629135380335693953099022489034864122536013310704786728382092903590723148036187802319387491427456042489978864999158775853657280390817472654644306911653808550514081096875917222837968612714532672631888033590204395797487895199519195145577303075338595325300153085641084863909781872090423238800129963459972130985301959255171317519171512897535845339948057638507709413798073808142209298754377255541739424189219088295170054859390748502635580142127989567661534570195172685950960383561949817198498881276876010071724544413143175161877837282675218430141233646122091207712630304014983250470245231633603296713957976388817322002823954408435807052725807036714061526027176147546698400409411027919981181711243379124030461725214573408049387821031054543815251277105407885791482705863881144615895134873485719584330565749956007174337480773535907025882208683638364516560430886015535455240347422097234589959584770527803107554155995258212395913554703002992878787407956944971542859815978528301235932308886596411003856412678737532509125076018476572588259371497363582959908408002545225879387846713536734824377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5342c056900b70ed197ffe8a21a38e1e70b5401
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataintelligence.zuyd.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d47f05441000004030046304402203123536d1950e66d403c99bb891ccfc4fb6eeff211c2f0920fd2745f1af7c40c02200fc8b2c2d2a139b317a8094934722c25327c62ee674fc638e0e23aa0adf0fb32007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d47f05632000004030046304402201ed732d5bef13907b81ab0dee4f8e29cf84acc53313c22e1df92bc1d277f01f802205e68408f2fc07acf5d936fc0ad31c9e19b5d0f6dd91645d19b7ea28a3108b330
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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