mymicare.asterisque.nl

- Stichting Aratame Health -

Issued by Digidentity BV PKIoverheid Organisatie Server CA - G3

About this certificate

This digital certificate with serial number 01:64:89:fa:fa:3d:b9:53:e1:33:90:58:5f:81:59:73 was issued on by Digidentity B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Stichting Aratame Health

Company registration number: 00000003507645000000
Organization: Stichting Aratame Health
State / Province: Limburg
Locality: Heerlen
Country: NL

Digidentity B.V.

Organization: Digidentity B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 01:64:89:fa:fa:3d:b9:53:e1:33:90:58:5f:81:59:73
Serial Number (int): 1851256256240599596128657007305644403
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a8:f7:16:b1:a2:ea:85:09:3c:84:e9:4e:0e:4d:98:6a:76:87:62:ee
AuthorityKeyId: 14:da:48:49:70:51:b4:34:12:78:e6:8a:c0:15:7b:d8:1a:f7:1f:ea

Fingerprint (sha1): fb:f5:dd:4e:6e:c9:fe:5c:0b:b0:30:df:18:b8:12:df:da:9b:94:f2
Fingerprint (sha256): 55:83:91:27:4b:48:67:13:26:4a:ee:5f:b8:e5:e4:3e:b3:5f:55:91:8b:a5:68:e7:17:7e:6e:19:c7:a5:06:05

Issuing Certificate URL: http://certificates.ca.digidentity.com/Digidentity-BV-PKIoverheid-Organisatie-Server-CA-G3.pem

Revocation information

OCSP Server: http://ocsp.ca.digidentity.com
CRL Distribution Point: http://crl.ca.digidentity.com/Digidentity-BV-PKIoverheid-Organisatie-Server-CA-G3.der

Check the revocation status for certificate mymicare.asterisque.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mymicare.asterisque.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mymicare.asterisque.nl

Other certificates including the domain name asterisque.nl

(limited to 100 certificates)
asterisque.nl
books.cs.zohohost.eu
connect.guildhall.ro
connect.network-consulting.eu
support.akzenta.ch
support.vpurple.com
books.cs.zohohost.eu
books.cs.zohohost.eu

books.cs.zohohost.eu
support.akzenta.ch
connect.profitroom.com
connect.sudolio.com
books.cs.zohohost.eu
support.akzenta.ch
books.cs.zohohost.eu
*.asterisque.nl
books.cs.zohohost.eu
books.cs.zohohost.eu
connect.feelserv.net
books.cs.zohohost.eu
support.akzenta.ch
support.akzenta.ch
faq.liverpoolfc.com
acc-boerhaave.asterisque.nl
connect.network-consulting.eu
support.reflektis.nl
connect.network-consulting.eu
intranet.aorai-conseils.com
connect.rgjb.nl

connect.network-consulting.eu
help.riaki.com
connect.wearemhabitat.com
*.asterisque.nl
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
connect.hardingsurveyors.co.uk
panel.terrapost.site
connect.ischebeck-group.com
support.akzenta.ch
connect.network-consulting.eu
support.akzenta.ch
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
*.asterisque.nl
connect.millson.co.uk
support.smartservices.farm
myandros.asterisque.nl
books.cs.zohohost.eu
connect.pyroteam-duesseldorf.de
connect.network-consulting.eu
zohoconnect.sedna.de
mymicare.asterisque.nl
connect.network-consulting.eu

faq.lfcstage.com
connect.hanspunt.be
support.akzenta.ch
support.akzenta.ch
support.akzenta.ch
books.cs.zohohost.eu
connect.fdit.co.uk
support.akzenta.ch
books.cs.zohohost.eu
connect.network-consulting.eu
*.asterisque.nl
asterisque.nl
books.cs.zohohost.eu
help.pingproxies.com
asterisque.nl
boerhaave.asterisque.nl
asterisque.nl
support.akzenta.ch
connect.a2zcloud.com
connect.etb-ag.com
books.cs.zohohost.eu
support.akzenta.ch
acc-myandros.asterisque.nl
*.asterisque.nl
connect.medify.com
connect.van-hout.com
books.cs.zohohost.eu
acc-myboerhaave.asterisque.nl
connect.ktkvirtualsolutions.net
books.cs.zohohost.eu
connect.network-consulting.eu
asterisque.nl
books.cs.zohohost.eu

connect.zep18.com
supportocobo.digi.it

connect.network-consulting.eu
connect.network-consulting.eu
internal.42nerds.com

Certificate

The complete raw certificate details for mymicare.asterisque.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGFamrN0HW4Kev79lAtC
ORJyv5bVMP4zvjs5Aa4ri96Hv0dHbViUOB78bm0+awTSmGQOP/8NAmJ9hDzz3Mn9
UuPUcmFy+lRDqceCBss4n+8l83lPtK1plIO1FwkIIMdPe7KSlqTNFFvV4G2G7vKg
Vd5Hb6Ix9KhueFyLMD7NCi/Y9+SSTGUd2tHX7/Ks3HATgMr2LWjMhxC5jKjPQXq9
tbHCEViAlTKATGvPyUk44gAqfpx3SIx/EMIZNDPKrkX4nkSjFlvRiQ4Q1/PV5h87
J90Wlu3oZmC+r1UHfPfYPVLcLv7AiqFUvQe0gdm+MDKLEGKk3EIemPalV/mshxbr
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1851256256240599596128657007305644403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Digidentity B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRNL-27322631'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Digidentity BV PKIoverheid Organisatie Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 10:17:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-19 10:17:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mymicare.asterisque.nl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00000003507645000000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stichting Aratame Health'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Heerlen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Limburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24285761562184820336146768255166919466193515431537479827071580381090626185819039182286400765799802508224571359816233120092526525703775769908431199788995009792078693649412761516312035953908397113355540069211938889086108701874603406729793068838487322153249698395870250876010386339109420790406885709204704975173594194163144710217983786169940465249426069626259580196341345653336950116503008829135930766865222891757323795723769297554846361198766177134413404608410505733159269352835321111198925452699228997483863821459286415748646381369474260071262855227321647146906136592362308014572749895167959170797936326056044265925481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14da48497051b4341278e68ac0157bd81af71fea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.ca.digidentity.com/Digidentity-BV-PKIoverheid-Organisatie-Server-CA-G3.pem'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ca.digidentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymicare.asterisque.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'For the use of this certificate the associated CPS applies.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.ca.digidentity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ca.digidentity.com/Digidentity-BV-PKIoverheid-Organisatie-Server-CA-G3.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8f716b1a2ea85093c84e94e0e4d986a768762ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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