technificent.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:33:e9:46:a0:0a:a2:6c:a3:09:f5:2e:9b:0d:3c:cd:dd:d7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=technificent.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:33:e9:46:a0:0a:a2:6c:a3:09:f5:2e:9b:0d:3c:cd:dd:d7Serial Number (int): 279001335338074670527743299788271392775639
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 0c:2f:85:4a:be:bb:12:e9:b2:25:bb:ca:25:15:d1:86:8a:43:54:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a7:fb:d7:9d:7b:3f:7f:80:25:25:72:dc:9d:4c:da:98:2c:d5:a2:99
Fingerprint (sha256): 5c:36:15:2a:3a:c1:2d:f9:ed:8b:ef:3d:98:5c:62:a7:a2:a9:d6:e8:69:d7:fc:0c:67:43:a3:8c:93:31:50:c5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate technificent.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for technificent.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
technificent.nl
www.technificent.nl
www.technificent.nl
Other certificates including the domain name technificent.nl
(limited to 100 certificates)
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
euflex.technificent.nl
technificent.nl
technificent.nl
technificent.nl
tue.technificent.nl
technificent.nl
tue.technificent.nl
technificent.nl
technificent.nl
tue.technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
euflex.technificent.nl
technificent.nl
technificent.nl
technificent.nl
tue.technificent.nl
technificent.nl
tue.technificent.nl
technificent.nl
technificent.nl
tue.technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
technificent.nl
Certificate
The complete raw certificate details for technificent.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISAzPpRqAKomyjCfUumw08zd3XMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzExMDIwMjM3MjFaFw0x ODAxMzEwMjM3MjFaMBoxGDAWBgNVBAMTD3RlY2huaWZpY2VudC5ubDCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALhCxfBXuSAktQLlt30aOWdYAJ62Th65 dahvqzpfjU0cvqIx8F6rkNUq79NsM609id9/tv3c/iwSWtmCRZNpmXA1jkV9q3HK d8xRDYmqGCIR6GLmvzama/njMkrRB1T47VPvAXt6zokZuKy/4gW7yECFV4boONDq kqzLBOziZc87iFcGpyXfv11bkdoYHe71Vl73wLqSYaIecQKYIQiMo0j42uQ+Dn1D k4ySB5MNwpcpJw4WRk1jvNb5hZyQYChI8lemcdByrqR/bdFvdH6Isrs8f649JRwe Zf1wecldYRncXQzsar4n4YbAG3vAnJpsHwtuGJd5QPh8yAx+pFNV6MWIGdl9jxCw GQn8e4n1t9zikdmoN9Ca6yU4WKD/2zWDFUQ8+5Q76RjMnv31ELJtnnI8HwQH+ggL ajYkCLDlCXl6TSfbYNhxVfYN8/0eNVTkoHYL2wyTrFg7YVZDKMgSl8NFny8i3ZYN zwexKwOzZwX6gNd/FEEPOCv3rJaAEA70yEt1hcVyl9D4tNStLQsn1XG0jfn0aP0b oJfPyF7NamT/U8WftOjD8+MgzzSRAlQ1iQfb8KK1vkoxjeW3ZvgFWYiqsDLCJvPc kjYrvNLl4yqr06i8pvnp+39ayAJCsdFFgdFKXjsANqF8JxRT8Q3sS9oQy7H6Y7gl OhK7dDW1azeLAgMBAAGjggIkMIICIDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAwv hUq+uxLpsiW7yiUV0YaKQ1QOMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYDVR0RBCgwJoIPdGVjaG5pZmljZW50Lm5s ghN3d3cudGVjaG5pZmljZW50Lm5sMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHm BgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkg b25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkg aW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQg YXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcN AQELBQADggEBAEScnCc5LYLUm9FeSV1KIad/6ZkNS092Gz4ACHzMfiioM/x0HPhE cYZgk8SnsiWKruUefLKmhPo7Ksk/7FDkepdd6zaEpezoHeaNn0tihecG8XrzGfiH Qt58Kyr5qUWzMBRP2OB95Gv2EmJHJEtxVXwa6INwEvfrptl5dMHLUyp95ZjfqEDa kxljeRs2XVjgt6PgKfzDi/UEf2h38H/4WX3Ad9cnjTUglDLY8y3LL9eFE4Pbz8my oBouB8W+dtwC+5m5G4YNndk3bNNKVW3Ed9lCR106uwc3mXuMqAaNvgyAV6OtYycX BhOmDXuryjuYTpNInb0HOp/0qjoeIvRfsKw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuELF8Fe5ICS1AuW3fRo5 Z1gAnrZOHrl1qG+rOl+NTRy+ojHwXquQ1Srv02wzrT2J33+2/dz+LBJa2YJFk2mZ cDWORX2rccp3zFENiaoYIhHoYua/NqZr+eMyStEHVPjtU+8Be3rOiRm4rL/iBbvI QIVXhug40OqSrMsE7OJlzzuIVwanJd+/XVuR2hgd7vVWXvfAupJhoh5xApghCIyj SPja5D4OfUOTjJIHkw3ClyknDhZGTWO81vmFnJBgKEjyV6Zx0HKupH9t0W90foiy uzx/rj0lHB5l/XB5yV1hGdxdDOxqvifhhsAbe8CcmmwfC24Yl3lA+HzIDH6kU1Xo xYgZ2X2PELAZCfx7ifW33OKR2ag30JrrJThYoP/bNYMVRDz7lDvpGMye/fUQsm2e cjwfBAf6CAtqNiQIsOUJeXpNJ9tg2HFV9g3z/R41VOSgdgvbDJOsWDthVkMoyBKX w0WfLyLdlg3PB7ErA7NnBfqA138UQQ84K/esloAQDvTIS3WFxXKX0Pi01K0tCyfV cbSN+fRo/Rugl8/IXs1qZP9TxZ+06MPz4yDPNJECVDWJB9vworW+SjGN5bdm+AVZ iKqwMsIm89ySNiu80uXjKqvTqLym+en7f1rIAkKx0UWB0UpeOwA2oXwnFFPxDexL 2hDLsfpjuCU6Ert0NbVrN4sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 279001335338074670527743299788271392775639 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 02:37:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 02:37:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'technificent.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751718613529463515140103450201241397184083128592048952068863031290430809481095832398828428979837717419104948750763236192671198205312349637041278369923992223450657819350933636463450139287383147818731226752345587369672873590863902109284455539384632792546660154706796987319844336000021686963235165834655433675866648996393751781113522288828673438564285579603312490818779771145446907995405982161660397013484308968327308108478227794441002589009528454627843870038763562340759986763520948935706643975408923225305974364091369216165417440103364030574043847742781341686312723984024989899135367585496906666092918304755527307009407510223913575460741380190919068771396467104020583051595848152022219830802857802012451408454966163502281691012905268121595148384414345470408124889916400177586045259135640631538550620964255191784218173301343837784132499176131670213727624420339493565704667431494644292445084088844296285953697273015148821561061563106105047432061983426770720300920830294481691899329855557410509429173416273835853965898734600182434038719139825114260834410371438458531577430270282851545301986331085561446419828784020417220805866340846273856763479245751293907288161923329244123085587853562450345609313591449164346824403872218582410347624331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c2f854abebb12e9b225bbca2515d1868a43540e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technificent.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technificent.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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