kennisnet.org

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:59:81:16:a3:c7:72:c4:db:8c:9c:c1:52:4d:c3:e2:44 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kennisnet.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:59:81:16:a3:c7:72:c4:db:8c:9c:c1:52:4d:c3:e2:44
Serial Number (int): 334616538240391046124243278239222678676036
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:26:2e:bd:83:55:5a:2e:d5:7b:c0:18:15:e9:3f:6b:d7:35:07:c3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:2d:4d:89:58:b9:8c:61:51:ea:b4:fc:52:ca:d0:b5:e8:1c:64:1a
Fingerprint (sha256): 57:a3:9d:88:3e:e4:63:8d:13:0c:7b:64:91:a7:61:a0:60:61:b0:cd:a6:c0:f1:fc:58:e2:80:d2:3d:b4:68:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kennisnet.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kennisnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kennisnet.org
kennisnet.org

Other certificates including the domain name kennisnet.org

(limited to 100 certificates)
webmail.kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
mysite.kennisnet.org
*.kennisnet.org
kennisnet.org
titaan.kennisnet.org
samenwerken.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
*.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
*.kennisnet.org
kennisnet.org
hotspot.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
fs.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
kennisnet.org
webmail.kennisnet.org
*.kennisnet.org
vpn.ka.kennisnet.org
support.kennisnet.org
kennisnet.org
kiwi.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
support.kennisnet.org
kennisnet.org
webmail.kennisnet.org
webmail.kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
kennisnet.org
support.kennisnet.org
support.kennisnet.org
support.kennisnet.org
kennisnet.org
donald.kennisnet.org
kennisnet.org
*.kennisnet.org
support.kennisnet.org

Certificate

The complete raw certificate details for kennisnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VLpFuJiz+I8uQfcrOTo
u2GnMd9kM1dyebQbXMhpNLEtF0iGhU7e1rAffGNrcuRlN4eEecFMYmTFnghGi7P3
9//S1WMNKa0t8c4Lyl+fg6EqLriWTTujROd3kqUFCVHYSpEZnVQFiIqVQE+oNvlZ
pcowBTuxaMHeYnbXj/Qb78TmURSi4niK1X4I0bDw6n7aSkTiRcA1Ad82yKQtkdZz
R3tyLrLCyk2f53TljbBUHgvSZaKd6IVqLKJAPbtHEBaTnLp+jqIgBe4R1gleumKu
Prl8c2g9q65Tmv8DwBlg5EFwpABWaepK1cWvmFlv1wbGFFhmuHqeERfI23fmw/P3
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334616538240391046124243278239222678676036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 21:52:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-26 21:52:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kennisnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27434596871659127409541682594557375038179838349310965153354096684319485772851373278827789869784183783223792203589114182046350908350830099966971701440091038857940484328605330601590873690544450824181663095274078137182948887472420264552662429646071496131508108267940073726476852785828707083447438883564279174252239673595112179183257350706166912250211168556219429198400748524002144570472089991890558775483577269532504389516857580657911597589820299026936185482401031324855017754203536870023432979246590652349774660860309443930455925206245335932824610666360331322424173942411491949645049179729534388270403334918471337375499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3262ebd83555a2ed57bc01815e93f6bd73507c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kennisnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennisnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001806d3a25c5000004030046304402202fc4711232d49af61048ebb863ce523ed91d3f6372b4689036a4df6cb31de166022040d2d95456d2c6005b72fa6dd7242a2e8d87f667b2ec9dc9acd8e9de8998fa960076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001806d3a25e1000004030047304502210081a7fb2cc004fa27ea3ffaf92c2f1f846989fd8d3e8070cd7077dc5c2a41025c02207c709bd41425768823d2144b90c7f4d61eb209af519e4c8f63db578b8b14bb0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ac31638ab6edb20e8fc8c8e8b1ee5222910b5c68ccccbe8acdf3b6368c8d77d39ae90b94699f894adb61fc6c955142f270d0579e96076966eb9eea90664d1dd2378319edd4b58624ced9e359e9de5570763ecb7add4652d14feabac910c538e35dad5d6379c3932e4231bde6f758fdac9ba0b4bb7af2d5e9522a0ad94f81512ceb226c6630bded1b0419c93875cba2dcaf3772836694a50d82e33e9e265ab0fb103ba4d65ca092e3b6517a701cdd8e33e37b20c31c03bc2c59e58001d8191e05db317658bfdffb2bfc65aaab072abbecdded06f2a0c2d5013794d71cba2bdc9a2845bc942b8e5948c496ec1d457be27d5ca01e78aa5c62031fbeaacba013e3e