go.pepperflow.nl

- Pepperflow B.V. -

Issued by Digidentity Services CA - G2

About this certificate

This digital certificate with serial number b7:98:b4:25:cc:49:31:f3:29:8b:57:1a:45:aa:0e:c0 was issued on by Digidentity B.V..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Pepperflow B.V.

Organization: Pepperflow B.V.
Organization unit: Pepperflow
State / Province: Zuid-Holland
Locality: Katwijk
Country: NL

Digidentity B.V.

Organization: Digidentity B.V.
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b7:98:b4:25:cc:49:31:f3:29:8b:57:1a:45:aa:0e:c0
Serial Number (int): 244041606179530998339286443561014922944
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 34:59:e8:b9:6f:a5:2b:d0:e6:bb:1b:b0:f7:2c:99:82:26:9f:34:62
AuthorityKeyId: 9b:63:85:4f:b1:09:55:11:6a:1a:e7:3e:1e:1d:00:49:db:96:f3:cd

Fingerprint (sha1): bf:dc:4b:5e:85:98:73:a0:fb:bc:7c:c4:0c:e5:f8:2b:b0:28:3b:07
Fingerprint (sha256): 5d:de:b3:92:b3:82:b5:70:5e:f6:77:52:45:58:64:01:9a:b1:74:61:4b:c7:04:68:aa:f2:fc:e3:fc:b9:10:6a


Revocation information

OCSP Server: http://ocsp.digidentity.eu/L4/services/ocsp
CRL Distribution Point: http://pki.digidentity.eu/L4/services/latestCRL.crl

Check the revocation status for certificate go.pepperflow.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.pepperflow.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.pepperflow.nl

Other certificates including the domain name pepperflow.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for go.pepperflow.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkKfmjaK+kZRPJJ+SAk4
kAIErUeobtzJvEB7CYgb+ytpqCx7A3oGff+OQw0DpPYmZ3EIiKb73b/OMmvgLewO
2HngBQ0HTGyVLJwcmOXuMek4QWxlUrHfVfR5c0D6brXJLSjbXpRi1gu/A29Iz8QE
tX9AN08u+BXjWJnL53+3l2BlzWUiKyMYZENetzbfcRoqIBUtlaU4HrFdwv9F14tO
fDl8vsZiVpwnyf5Axn1LI0B8Gp6vtVI887Dy+/ZBhUB3XI8Z7KvZmWnS6Eu/TQ0f
H0hBqazMiG2JDrCKduNuagjHDV7pny3WDh0LdH8iNElcGIoS2UHuN65dxaUM8WEt
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 244041606179530998339286443561014922944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digidentity B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digidentity Services CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-22 08:12:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 08:12:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Katwijk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pepperflow B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pepperflow'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'go.pepperflow.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26037944069109292935441344519287878420461215209217332050256192843486612789029135107292065123693151888902920838461581227883939482569989387426512152092980590741076022670866703580603848235757937427644010588941522475020322471578771345221161219708947757744421967234927241309684533797310424162688474276165254045656994361506750124374867634497219202839517463786652145769235987772551168231402556171120493627374850225924868074191794085197234289948253697183753057187293396280081321420619095652405212979148363175020022301035106237006314215858975383883838176602752097597071595995683559462911770099193522698558529151557037124038119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9b63854fb10955116a1ae73e1e1d0049db96f3cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digidentity.eu/L4/services/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1003.1.2.5.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki.digidentity.eu/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Het toepassingsgebied van dit certificaat is conform de algemene voorwaarden en certificate practice statement niveau L4 van Digidentity.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3459e8b96fa52bd0e6bb1bb0f72c9982269f3462
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.digidentity.eu/L4/services/latestCRL.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.pepperflow.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0020ffec6bbff38696051dc5a6c92b8db2e751dc6a3f11a9b00be151d3c97fd7fc5797b85c96a2514c9c64103b158abebfb4b8d2f1e047f62e671e5988ec6a0f48b4cbe192383987ac846f7044795d6d189b152ef6aff8370620f3e5c416f1d5db9ee5bf4db628cb38c735f14c50a39ba9840c14b0b61699adec6d94375ba43ebfb2250bd97c4b85006d2bf61855426e522df97f076f2b025dacf5b75d794c003c597afc0fb60c2216d5539f6fdb9ef381959fa1e660ec8c0c26055746b1daf9328360fc7a383e818c35a3cd0b56bf5e1cb6869deeaaab6ea925da1186720a8fce22343621cc532364ec8a4015ec785f09336ae249e1245b11ab9aacf7ed690baac3abc0b4c34e5e8cdd1bea1941fcfcb46a50db74559a7c947205219509754c6349d4987c0459027c48eb52d1f77e4850f1bba86e6a719150d66b228c5e900a225a0da4495c440298345b82c8653f3c43bde19d2e2686f944ae39a32032a85181ca9bc6243839cf66581221ac60e29332e7d4170a76b70602ae64d62f05f46e1a1ffae4e43205ff27bc14ed47568704ea9db2c4c9b619d8defceb3f1b797baf4dba89ba9027ae501eef8c909029c3c79c519f64951cb7461e184e05dbc62012748c93da95f63d111fea75e777817aa0427c1e25545ee1a5a056f4f5b7dff1238b86bca991a0ad0c29c0051ad920d7f36c25f411e2346caca2d43d7696bc7a271c