www.studioio.nl

- Studioio -

Issued by Trustwave Organization Validation SHA256 CA, Level 1

About this certificate

This digital certificate with serial number 06:6e:7b:39:06:a3:1e:ed:46:bc:ae:ae:ec:b4:b6:ff:bc:f9:b6 was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • found only metadata -- in subjectDN attribute 2.5.4.8 Subject name fields must not contain '.','-',' ' or any other indication that the field has been omitted (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Studioio

Organization: Studioio
State / Province: --
Locality: Tegelen
Country: NL

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:6e:7b:39:06:a3:1e:ed:46:bc:ae:ae:ec:b4:b6:ff:bc:f9:b6
Serial Number (int): 143428753175266665346496467424001295529081270
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 64:0b:e6:8c:41:7e:25:59:96:26:65:3d:e2:09:78:e6:da:5b:75:6c
AuthorityKeyId: ca:ce:1d:18:03:77:1e:1c:f3:7c:58:b2:9a:70:a8:08:80:16:f4:ae

Fingerprint (sha1): e9:51:85:ec:3c:ec:7b:07:95:c0:fd:ba:b4:46:70:81:c3:0f:fa:d9
Fingerprint (sha256): 58:54:9e:50:bd:f7:20:0a:f7:e9:f4:8a:4e:af:71:3b:41:8c:ff:55:b1:05:cd:8e:18:a2:ab:e1:ab:67:3a:32

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate www.studioio.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.studioio.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.studioio.nl
studioio.nl

Other certificates including the domain name studioio.nl

(limited to 100 certificates)
lms.studioio.nl
logopedieschatorje.nl.studioio.nl
cabane.studioio.nl
f2.studioio.nl
studioio.nl
studioio.io
nutheorie.studioio.nl
bs.studioio.nl
texis.studioio.nl
tc.studioio.nl
nieuw.studioio.nl
nutheorie.studioio.nl
tc.studioio.nl
studioio.io
studioio.io
printzegel.nl
printzegel.nl
respond.studioio.nl
cabane.studioio.nl
rt.studioio.nl
respond.studioio.nl
demanufactuur.studioio.nl
printzegel.nl
pdf.studioio.nl
studioio.io
logopedieschatorje.nl.studioio.nl
nunieuw.studioio.nl
f2.studioio.nl
ci.studioio.nl
bp.studioio.nl
studioio.io
nieuw.studioio.nl
nunieuw.studioio.nl
tc.studioio.nl
rt.studioio.nl
bs.studioio.nl
studioio.io
rt.studioio.nl
printzegel.nl
printzegel.nl
studioio.nl
texis.studioio.nl
md.studioio.nl
studioio.nl
logopedieschatorje.nl.studioio.nl
cabane.studioio.nl
studioio.io
bp.studioio.nl
texis.studioio.nl
rt.studioio.nl
lms.studioio.nl
respond.studioio.nl
cabane.studioio.nl
pdf.studioio.nl
rt.studioio.nl
pdf.studioio.nl
studioio.io
io.studioio.nl
studioio.nl
tc.studioio.nl
nutheorie.studioio.nl
lms.studioio.nl
studioio.nl
logopedieschatorje.nl.studioio.nl
nunieuw.studioio.nl
tijdelijk.studioio.nl
bs.studioio.nl
nieuw.studioio.nl
studioio.io
pdf.studioio.nl
floorpoint.studioio.nl
cabane.studioio.nl
respond.studioio.nl
www.studioio.nl
pdf.studioio.nl
demanufactuur.studioio.nl
nieuw.studioio.nl
studioio.io
printzegel.nl
goossens.studioio.nl
nunieuw.studioio.nl
tijdelijk.studioio.nl
bp.studioio.nl
gm.studioio.nl
studioio.nl
ci.studioio.nl
texis.studioio.nl
md.studioio.nl
demanufactuur.studioio.nl
lms.studioio.nl
nieuw.studioio.nl
respond.studioio.nl
logopedieschatorje.nl.studioio.nl
tc.studioio.nl
printzegel.nl
lms.studioio.nl
cabane.studioio.nl
lms.studioio.nl
bp.studioio.nl
gm.studioio.nl

Certificate

The complete raw certificate details for www.studioio.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8kdf21VD4aRNm+AnFmp
brMvHAOIFXegeDZmL5LHI8aVfKwVPcdd/vefh6N6SncLIYbik9G8j7Q4bAPpIRLi
1RFD8QRI2nwdTcUNx1nwCXI6APWRYHRrZe7AedJEPcMMmJZ15TMJcj9GVEnD5nqa
fEBFUgg3p+ff8Nl42KFKBehTj5R/QtemLgEe72acdQJn603HKB5Eh9THCoyuwe/D
5qyO+Kq3xvoE2tzEqlW8F//7OVwnwrCzINccXcziCyw9Gm9eVfiT5nbDFjPA4nfX
txveJMT+zmOKS8F9tRIzbjPRAtUgUc1yiaZp/BzcVOb5fSrsce+vYfLEqUMpSqgx
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143428753175266665346496467424001295529081270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation SHA256 CA, Level 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-14 07:12:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-13 13:12:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.studioio.nl'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Studioio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tegelen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '--'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23705736642663768967590836823961304627343521503254011037127411464465512298445640527814420391652811003131649878068290423582388597861304585104249972217018413139891981549710605672914088432044326205290887667856615883422671040559478171793252490891188749239908756177869440884710814463090628216066254811107450889287008718917678264500204974703771326667442862890749333394923279248295721507884017660215531053313770380539576794990857931070870080314632862995693312973848565726844108901589972695289422776120750052237009462655400998169951463023306352869278885422434356835841165564554670901938770118434971640886746529127738993291533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							640be68c417e25599626653de20978e6da5b756c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cace1d1803771e1cf37c58b29a70a8088016f4ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studioio.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioio.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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