*.demo.wis.nl

Issued by Trust Provider B.V. DV SSL CA - G2

About this certificate

This digital certificate with serial number 27:c4:2a:64:76:40:23:a4:15:dc:e8:67:ee:44:54:c4 was issued on by Trust Provider B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.demo.wis.nl

Trust Provider B.V.

Organization: Trust Provider B.V.
Organization unit: Domain Validated SSL
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 27:c4:2a:64:76:40:23:a4:15:dc:e8:67:ee:44:54:c4
Serial Number (int): 52858441840500920776074390175813489860
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d8:da:ef:d8:e0:ac:71:71:02:de:e6:62:fa:cf:fc:40:3b:fb:a0:52

Fingerprint (sha1): b9:48:e0:33:3a:50:46:fe:33:9d:cd:99:d3:39:7f:3f:d7:c0:2f:19
Fingerprint (sha256): 5a:92:21:9e:9d:0d:6a:38:ec:83:7d:06:02:b1:b7:60:a2:4b:7c:89:6b:7a:46:67:87:e4:26:6e:43:18:b8:64

Issuing Certificate URL: http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt

Revocation information

OCSP Server: http://trustprovider-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl

Check the revocation status for certificate *.demo.wis.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.demo.wis.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.demo.wis.nl

Other certificates including the domain name wis.nl

(limited to 100 certificates)
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
beheer.demo.wis.nl
3737.inextenso.fr
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
wis-studio6.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
*.support.wis.nl
wiscommunicator.wis.nl
support.anevia.com
wiscommunicator.wis.nl
*.wis.nl
3737.inextenso.fr
fdus-42.freshdesk.com
support.anevia.com
support.anevia.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
fdus-42.freshdesk.com
vpn.wis.nl
support.anevia.com
fdus-42.freshdesk.com
fdus-21a.freshdesk.com
fdus-42.freshdesk.com
wiscommunicator.wis.nl
fdus-42.freshdesk.com
3737.inextenso.fr
wiscommunicator.wis.nl
*.wis.nl
*.school-studios.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.lobi.wis.nl
*.support.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
*.mas.wis.nl
fdus-21a.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
*.demo.wis.nl
*.wis.nl
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.lobi.wis.nl
*.mas.wis.nl
wis-studio7.wis.nl
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-38.freshdesk.com
3737.inextenso.fr
3737.inextenso.fr
wiscommunicator.wis.nl
3737.inextenso.fr
wis-studio7.wis.nl
support.anevia.com
support.anevia.com
*.wiscollect-test.wis.nl
support.anevia.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
*.school-studios.wis.nl
*.mas.wis.nl
wiscommunicator.wis.nl
fdus-42.freshdesk.com
support.anevia.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
fdus-21a.freshdesk.com
wiscommunicator.wis.nl
wiscommunicator.wis.nl
*.mas.wis.nl
fdus-42.freshdesk.com
wiscommunicator.wis.nl
3737.inextenso.fr
fdus-38.freshdesk.com

Certificate

The complete raw certificate details for *.demo.wis.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ2Osfb77VJYNGS7kc37
nVe9ZspkHa3ScTc6j0jnrFVICBEUqWu4PCUvNPsy6dSo2JHEVb6YYhcDXrLnBEj3
Jr8V++Z3X0moMgxT/8CBEvZO1ZaMrIQM5hpSGTlqy4qDVhVysYR9xQmX3nZzJqlq
7ShiwjxSJoAla28e3tVbEhjXRM+YR+Rs1/zsk4IS0SRt3QZYSvUlkUnRuK85iFd1
5hlIzSQYxv5WTfL2tn1fzJ+NIoKEiOIfArf8gUkd6JMypf+L50bQYgG9tnOZwju4
zyXwCh0TvLF6WXF90gR6mVqCSzHLif5BmAtdfr0l2jhHEz3gTpT5QMjS8RVojV8C
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52858441840500920776074390175813489860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Provider B.V. DV SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.demo.wis.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21411967990408401649226973922919824237143116624982569123608802926722067035881906702353174100064176474823363886817271647983788430486956491803952045485989416633184241408524355159586490991671527033892636098287957029418596841218097498122848740228315092233084672609082961496438033582470987370823139526927227206493444277151781651597539493060172252402117955439614920044306578406792929047971401335303711789282943952165778580915407855826415657035149032762680488433660531053717101059656600980269358798265338089602001436752746622949228347316841786800627555065048399673810250354473379605942288623294264366564688764845307709030973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.wis.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-crl.digitalcertvalidation.com/trustproviderg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8daefd8e0ac717102dee662facffc403bfba052
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-ocsp.digitalcertvalidation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trustprovider-aia.digitalcertvalidation.com/trustproviderg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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