menzis.lavg.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:03:f4:24:74:28:b6:c2:4e:9e:e9:92:e5:de:f9:c3:8f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=menzis.lavg.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:03:f4:24:74:28:b6:c2:4e:9e:e9:92:e5:de:f9:c3:8f
Serial Number (int): 325655480487128759705605788822202350158735
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:9c:fe:18:98:d7:98:e2:38:53:aa:6c:bc:92:4c:82:af:46:d6:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:9c:46:2e:dd:c3:d4:ce:b6:69:9f:89:fa:4a:bb:2e:da:a0:35:fc
Fingerprint (sha256): 52:c2:8b:df:46:9c:01:f0:63:34:f4:13:bd:1e:08:ae:03:61:13:e3:8a:9b:6b:98:60:51:4b:57:62:34:a0:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate menzis.lavg.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for menzis.lavg.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

menzis.lavg.nl

Other certificates including the domain name lavg.nl

(limited to 100 certificates)
webmail.lavg.nl
lavg.nl
payportaal.nl
acg-incasso.nl
veilig.lavg.nl
login.nieuwegein.lavg.nl
portal.bosincasso.nl
alles.lavg.nl
lavg.nl
achmea.lavg.nl
lavg.nl
lavg.nl
betalen.lavg.nl
achmea.lavg.nl
payportaal.nl
acg-incasso.nl
achmea.lavg.nl
lavg.nl
alles.lavg.nl
menzis.lavg.nl
alles.lavg.nl
lavg.nl
veilig.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
betaal.lavg.nl
payportaal.nl
menzis.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
login.roosendaal.lavg.nl
acg-incasso.nl
achmea.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
cotg.lavg.nl
mijn.lavg.nl
lavg.nl
portal.bosincasso.nl
achmea.lavg.nl
menzis.lavg.nl
lavg.nl
cotg.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
alles.lavg.nl
lavg.nl
lavg.nl
lavg.nl
lavg.nl
alles.lavg.nl
betalen.lavg.nl
payportaal.nl
webmail.lavg.nl
alles.lavg.nl
alles.lavg.nl
support.bosincasso.nl
webmail.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
veilig.lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
mijn.lavg.nl
achmea.lavg.nl
betalen.lavg.nl
payportaal.nl
menzis.lavg.nl
betalen.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
achmea.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
betalen.lavg.nl

Certificate

The complete raw certificate details for menzis.lavg.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325655480487128759705605788822202350158735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 22:00:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 22:00:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'menzis.lavg.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847258201522536871761980370243408684742450690874155913145807415541111172907761564921162427162369597105940462498713842599941745515119130938085039650541768804417801854818089808861878409827752342898650254822363144637458087641490843160228480911645117602681123472617043474083771015870496768848778182120396941747089274734619034009092386990197903179550004950866075238283271502589910446100984298064001698149910386899336633401734593612854566377192000795773798331950390581711234277437843492174731325473913403583335186326638583039045939398340985838322240081363769590484623800965715701362384750817129996816346584024255180331907531956722281990636520803969694182735700331400134372286870920847287216648390946386455914216754888079111541419361958588523746873586461406662435630207121644484491126101146441302074568019929793186640505092446982721795011889473434617318390124105082418332639392730542836930834510632787939296854196289304428909616912428301337848887180859390979230000723402630654720796460418921791616233098073311069920969615434406011219751885167058816552952701624186969371290268761178027224833858595995277454811691738121593604111083045109223491504592544503183337026366120697156371563772503961517391646313535949599642180065468591298765430838099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e09cfe1898d798e23853aa6cbc924c82af46d6d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menzis.lavg.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016902d698b60000040300473045022100a031c6c0e3e61e1bec056e505ee239045472a79474d753dc8c9d9e78a34593e9022014014e73f5e472d96093a8e29136d3d6057413b1cf9235305bb9d10334b63e9c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016902d6991e0000040300473045022100c5f4cb320d5932428b937a1b766522d94c875d220865d061c67acac6d6ed2729022074fcb9e683fd071986d40c0aada2e7b60ee38afcd5c9cff439d2827bdcfe246e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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