www.praktischestudie.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:79:99:f3:39:8e:f7:73:33:4e:54:7a:84:b6:4a:2a:7c was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.praktischestudie.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:79:99:f3:39:8e:f7:73:33:4e:54:7a:84:b6:4a:2a:7c
Serial Number (int): 397271158138830302481766322516996735511164
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:58:bd:f7:ec:f2:c0:db:dc:3e:2e:f2:c9:80:ee:c1:fc:2c:fd:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:92:d7:f7:ca:36:f8:ca:bd:ed:c6:61:ee:bf:53:c4:a7:5b:fc:e9
Fingerprint (sha256): 49:06:f4:29:80:08:2a:d1:0c:ef:19:7f:6b:9d:62:13:43:15:11:62:b3:24:31:f0:47:33:5f:ce:41:f9:13:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.praktischestudie.nl

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.praktischestudie.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

civielebedrijvendagen.nl
ge-cdn.civielebedrijvendagen.nl
ge-cdn.practischestudie.nl
ge-cdn.praktischestudie.nl
oud.practischestudie.nl
practischestudie.nl
praktischestudie.nl
ps.tudelft.nl
www.civielebedrijvendagen.nl
www.practischestudie.nl
www.praktischestudie.nl

Other certificates including the domain name praktischestudie.nl

(limited to 100 certificates)
www.civielebedrijvendagen.nl
www.practischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
civielebedrijvendagen.nl
ge-cdn.praktischestudie.nl
www.practischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.civielebedrijvendagen.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.civielebedrijvendagen.nl
www.praktischestudie.nl
www.practischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl
www.practischestudie.nl
www.praktischestudie.nl
www.praktischestudie.nl

Certificate

The complete raw certificate details for www.praktischestudie.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ivxWcEsu+9jWtiO0Rgi
OIVgJvBSuapkvc8s1/Jv6OU73ToTySbG6isBWLQv0Qtkpe9gXPVcFJakkOTVqtNI
iBPRuP/k4kf+VOfFOFMaJqrPUPJ9K1XSe+ngWLv94e7WETRTrf58Eua7rhB0sLSe
kgl3tt+g+t1havDBy3V7woH8MH2csKDttAsKt0nBFdpagpdFSwYkVNgcpMYlGWAg
adwR3dfer2O0YsSZV3G33W1oxYLEUMbFV/+eUtw+D+mlhm3J/9QOaNhkand4N62B
Q1mGOKTQzDL26Vlmy9GQlcXv4NQoGZ1Tk6OAc6foz60QcfBie6EuW0uZ5jiLurNX
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397271158138830302481766322516996735511164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-08 13:28:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-07 13:28:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.praktischestudie.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31076292012009926220120203115368760025082568316862566676676904585612697963939603468032743352277008990399355221329058313439391916791110306033893148382538890196169558504084929101957253699703122031758775650927700548762001825435264011622994422209523809908505385223770902812891973126158313730639874496195399902226299993667819733726091711422720610084937052282788940164101164120588259481897085842902955790891615047008898811121344535086313818253244977102230409522556761516303353260141482626474593663593709246958862690003860002646644931384610298588800056320222070063317811196137263681149097593456613292101949720966955072182247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d958bdf7ecf2c0dbdc3e2ef2c980eec1fc2cfd01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'civielebedrijvendagen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-cdn.civielebedrijvendagen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-cdn.practischestudie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-cdn.praktischestudie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oud.practischestudie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practischestudie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praktischestudie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps.tudelft.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.civielebedrijvendagen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practischestudie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praktischestudie.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000178b1e282a70000040300463044022010b4ba2a5b1fff66959d14a151f96750a97ad3eca5d35c5a7dc2d749a96fca9202202cf2c113825df071b26200b02a667baf3f8ddf089f0d4cbecf240aeab7e8ebbd007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000178b1e2828c000004030046304402200918749ecf83354b0b5d38a98853df1a41d20ec8507ec31577dc4198b0baa0b50220216b024e7d4f1ac902f2dc822fdef7338d6e78da228c657fb7e0c7369c664f15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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