alles-rezeptfrei.nl
Issued by R3
About this certificate
This digital certificate with serial number 04:53:a1:5c:51:97:94:3f:32:d1:ba:69:52:22:86:16:0e:b9 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=alles-rezeptfrei.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:53:a1:5c:51:97:94:3f:32:d1:ba:69:52:22:86:16:0e:b9Serial Number (int): 376907065234995746332841568290055996706489
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a8:44:4b:e0:34:6b:f0:9b:b7:29:81:5c:59:5c:85:48:77:fc:b8:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f8:4e:6a:2a:dd:97:ee:08:45:d2:c3:be:41:ef:c1:93:62:00:65:0e
Fingerprint (sha256): 55:da:49:81:b2:47:38:02:07:21:ec:6c:59:d4:8d:6d:d0:30:82:62:a7:92:60:d0:93:d5:9d:f1:02:2f:36:f7
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate alles-rezeptfrei.nl
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for alles-rezeptfrei.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alles-rezeptfrei.nl
bestuboutique.com.centerforquantummedicine.com
commercialistavenezia.com
confluent.net
crowdfundx.com
emfpain.com
leather.bdsmsecurity.com
mo.cosfacts.org.webchannelpress.com
thelibertytree.com
thenamescreator.com
tkoplaza.com.petsmeo.net
bestuboutique.com.centerforquantummedicine.com
commercialistavenezia.com
confluent.net
crowdfundx.com
emfpain.com
leather.bdsmsecurity.com
mo.cosfacts.org.webchannelpress.com
thelibertytree.com
thenamescreator.com
tkoplaza.com.petsmeo.net
Other certificates including the domain name alles-rezeptfrei.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for alles-rezeptfrei.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgISBFOhXFGXlD8y0bppUiKGFg65MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTkwMTA2NDNaFw0yNDAyMTcwMTA2NDJaMB4xHDAaBgNVBAMT E2FsbGVzLXJlemVwdGZyZWkubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDdtzfIcR0DOylsBaOr5G3pLP7f4RSNLlxFj5oAOydtsd9ABFiIvxF0O6mP VXwPzUr6+9DWw2K4CpuYmFBg++fD4nYVA8D8OFyLuNYDBcAabyKDwnxD3uQ1VEGJ MRrqWh8hITEuVavI6pYJOtnUhotsrYDW2dne4oQzkF+mmvQ3LaeJxa7kHSLnsJCp ru/TBOyU6j4C2N+A9NihCt63CEDYVkkVeLeig9g8t3bUQbpnz5gf7cELjgdmYuTS iH2HN3ClC9SkC3IOC6kSXT20aUaz4f0oxWo3cgVrEjo9A2fbvWCi7mfxhfIqvSab 0lXoJGDKqJDpnqr3s88aqjGSMmENAgMBAAGjggMUMIIDEDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFKhES+A0a/CbtymBXFlchUh3/LixMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIBGwYDVR0RBIIBEjCCAQ6CE2FsbGVzLXJlemVwdGZyZWkubmyCLmJl c3R1Ym91dGlxdWUuY29tLmNlbnRlcmZvcnF1YW50dW1tZWRpY2luZS5jb22CGWNv bW1lcmNpYWxpc3RhdmVuZXppYS5jb22CDWNvbmZsdWVudC5uZXSCDmNyb3dkZnVu ZHguY29tggtlbWZwYWluLmNvbYIYbGVhdGhlci5iZHNtc2VjdXJpdHkuY29tgiNt by5jb3NmYWN0cy5vcmcud2ViY2hhbm5lbHByZXNzLmNvbYISdGhlbGliZXJ0eXRy ZWUuY29tghN0aGVuYW1lc2NyZWF0b3IuY29tghh0a29wbGF6YS5jb20ucGV0c21l by5uZXQwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYvlVIagAAAE AwBGMEQCIB7xzC3rqo2ssWNosrEpS7a8MYUUdaD6Bf3uouwBPG8uAiA6oXhWhRRi aLEGV3MWmsfzj6nLt+rZRPR9Jf6pc3vxsgB3AHb/iD8KtvuVUcJhzPWHujS0pM27 KdxoQgqf5mdMWjp0AAABi+VUhw8AAAQDAEgwRgIhAL/6GP8JTZIrbmpWuugBM7Bq f/5AIuskNvjd5Xja0zJ6AiEAtqgve7JchqaLhqbu1ebfzM2d5cSU5mEXfQRacHkv VWQwDQYJKoZIhvcNAQELBQADggEBAJ29Z52rpnm8y8SWVjHDCL7f4xy7THDroRVm SqVhXPEiFT8Lx++MGXwAT6TOaUnY4egNBYxG2EEYjhgvfR4lL6BLto6VqKDufyRy uoDUzJZsrWDuJpR1A+sfFeAd6+joIOhyIY7dnjOpah2qmrzZSkW4KLhkH/0zNjFl 6K6eDjkm+rPn+YgFmhQ5dUBCeAgPaqT+cVOQDTkhP/Uu+zoOSdIxoP5nXDQmUNT8 MTKQw64wXls+QthpZSZ9wXeBl2+RMjigVrGriljplIFaZBkRTKD4916Xv6Ci31j1 c2xuu5Kn2M1rrae6P/YJoxlSrxIRx6RpVnZ8sYgk6LVqp+rIv2Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bc3yHEdAzspbAWjq+Rt 6Sz+3+EUjS5cRY+aADsnbbHfQARYiL8RdDupj1V8D81K+vvQ1sNiuAqbmJhQYPvn w+J2FQPA/Dhci7jWAwXAGm8ig8J8Q97kNVRBiTEa6lofISExLlWryOqWCTrZ1IaL bK2A1tnZ3uKEM5Bfppr0Ny2nicWu5B0i57CQqa7v0wTslOo+AtjfgPTYoQretwhA 2FZJFXi3ooPYPLd21EG6Z8+YH+3BC44HZmLk0oh9hzdwpQvUpAtyDgupEl09tGlG s+H9KMVqN3IFaxI6PQNn271gou5n8YXyKr0mm9JV6CRgyqiQ6Z6q97PPGqoxkjJh DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 376907065234995746332841568290055996706489 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 01:06:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 01:06:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alles-rezeptfrei.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27989013512418734557781380119201380628107713493454537956117046086113620786327869159012095050358634473753194588632439472593698562895456163427943964603502497597901891880868987610770612227747511117820185183599676569582670138038760195149534618621901030511072953223155801907498430597475817222710610502910185474138437490284737621488564303855359196272793367671285090148040981303141072322231769389998899657221882030291592590576281130426348760126350471165965893403154292215196055704738895834377335340440890836701330527805449287761411347477160750677688374285671142257873235446434115343494404659962161973612166393935145496371469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a8444be0346bf09bb729815c595c854877fcb8b1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alles-rezeptfrei.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestuboutique.com.centerforquantummedicine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialistavenezia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdfundx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emfpain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leather.bdsmsecurity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.cosfacts.org.webchannelpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelibertytree.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenamescreator.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkoplaza.com.petsmeo.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be55486a0000004030046304402201ef1cc2debaa8dacb16368b2b1294bb6bc31851475a0fa05fdeea2ec013c6f2e02203aa1785685146268b1065773169ac7f38fa9cbb7ead944f47d25fea9737bf1b200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be554870f0000040300483046022100bffa18ff094d922b6e6a56bae80133b06a7ffe4022eb2436f8dde578dad3327a022100b6a82f7bb25c86a68b86a6eed5e6dfcccd9de5c494e661177d045a70792f5564 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009dbd679daba679bccbc4965631c308bedfe31cbb4c70eba115664aa5615cf122153f0bc7ef8c197c004fa4ce6949d8e1e80d058c46d841188e182f7d1e252fa04bb68e95a8a0ee7f2472ba80d4cc966cad60ee26947503eb1f15e01debe8e820e872218edd9e33a96a1daa9abcd94a45b828b8641ffd33363165e8ae9e0e3926fab3e7f988059a143975404278080f6aa4fe7153900d39213ff52efb3a0e49d231a0fe675c342650d4fc313290c3ae305e5b3e42d86965267dc17781976f913238a056b1ab8a58e994815a6419114ca0f8f75e97bfa0a2df58f5736c6ebb92a7d8cd6bada7ba3ff609a31952af1211c7a46956767cb18824e8b56aa7eac8bf64