www.thyrabv.nl

Issued by Intermediate Certificate DV SSL CA - G2

About this certificate


This digital certificate with serial number 10:4c was issued on by Intermediate Certificate .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

www.thyrabv.nl

Organization unit: GT21220956

Intermediate Certificate

Organization: Intermediate Certificate
Organization unit: Domain Validated SSL

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 10:4c
Serial Number (int): 4172
Serial Number lenght: 13 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 63:1c:a8:a7:b1:93:35:8f:16:76:9e:e5:fa:5f:c8:e6:ad:bf:2f:b9

Fingerprint (sha1): 0f:65:5e:38:29:cb:bd:05:3b:5f:82:f1:34:9d:c2:e9:3d:7f:5d:7e
Fingerprint (sha256): 3a:98:fc:ca:db:c8:f8:83:90:cf:6b:97:e7:15:f5:21:03:bc:34:20:01:20:db:f6:b0:bc:48:12:09:36:d1:b2

Issuing Certificate URL: http://ica-aia.digitalcertvalidation.com/icag2.crt

Revocation information

OCSP Server: http://ica-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://ica-crl.digitalcertvalidation.com/crls/icag2.crl

Check the revocation status for the current certificate on www.thyrabv.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.thyrabv.nl
thyrabv.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwgYExCzAJBgNVBAYTAk5M MSEwHwYDVQQKExhJbnRlcm1lZGlhdGUgQ2VydGlmaWNhdGUxHTAbBgNVBAsTFERv bWFpbiBWYWxpZGF0ZWQgU1NMMTAwLgYDVQQDEydJbnRlcm1lZGlhdGUgQ2VydGlm aWNhdGUgRFYgU1NMIENBIC0gRzIwHhcNMTUwMjEyMjM0MTQxWhcNMTkwMjE0MTQ1 ODA4WjAuMRMwEQYDVQQLEwpHVDIxMjIwOTU2MRcwFQYDVQQDEw53d3cudGh5cmFi di5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALLJ9/yvoLJfP7ws dGwWi7XI1DaVjdFfHKZfiMSsLwL+Yg0eZVuFvD/qpGLoX6WTrJdneUBjCTWhYHNB O0aHVQU407JphAy/l4fZ+khw7+I17lKz0Z+4Pj17E+7dFZcc0hI6eu07rJSkWSQx 6Dra0GeDaZOH+2p53qHGkmElPQn3ESHyq8gGKJp4XfMMxgwj8NMbKlMSCNGgrlTi tNe87GnNsDErKZRGRKhNjn3FfiOPG108yVlFh9/+dl9IucfOxPrw8LddX2V5Os56 qtNJkDuIK2Ha6LEJ6GFT0Q+0I4c1rwBdTapInhgjv3gUwEf3GXJbtCZGLWgTR9WG /H+yFOECAwEAAaOCAbcwggGzMB8GA1UdIwQYMBaAFGMcqKexkzWPFnae5fpfyOat vy+5MIGFBggrBgEFBQcBAQR5MHcwNQYIKwYBBQUHMAGGKWh0dHA6Ly9pY2Etb2Nz cC5kaWdpdGFsY2VydHZhbGlkYXRpb24uY29tMD4GCCsGAQUFBzAChjJodHRwOi8v aWNhLWFpYS5kaWdpdGFsY2VydHZhbGlkYXRpb24uY29tL2ljYWcyLmNydDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCUGA1Ud EQQeMByCDnd3dy50aHlyYWJ2Lm5sggp0aHlyYWJ2Lm5sMEgGA1UdHwRBMD8wPaA7 oDmGN2h0dHA6Ly9pY2EtY3JsLmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5jb20vY3Js cy9pY2FnMi5jcmwwDAYDVR0TAQH/BAIwADBaBgNVHSAEUzBRME8GCmCGSAGG+EUB BzYwQTA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291 cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMA0GCSqGSIb3DQEBCwUAA4IBAQBh7thIH3V/ weinE562uMvTGBQ7PQhYxOrmZNdapN8rUUy/9IDlwLJ5kANdkmjX26tDmEgG+mq3 +v+2vQuEIvl3GISe+k1Hmm2/by6ia9YgzkwjsAYch0eIV9GelGFgCd50KzHRvtEP QNs0ztkKLCnCBLrw4L4Qmgqpeoedc9l6nCwaOJooD5GSZ48/04hDaw/9r7CwbSuw CTObNWElS5fMxOV4oXxeHXgDGMbOFWcTFq9E2b1HsmyDr6DMYFmZpu8fo2cPODVx Qa5D/zhgy8sIFreMkgdycKF8yZec8oMuoqjCVi41siAOFcLbYiW6Vg/qrdi6amCr Mk52KmdtNMT/ -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssn3/K+gsl8/vCx0bBaL tcjUNpWN0V8cpl+IxKwvAv5iDR5lW4W8P+qkYuhfpZOsl2d5QGMJNaFgc0E7RodV BTjTsmmEDL+Xh9n6SHDv4jXuUrPRn7g+PXsT7t0VlxzSEjp67TuslKRZJDHoOtrQ Z4Npk4f7anneocaSYSU9CfcRIfKryAYomnhd8wzGDCPw0xsqUxII0aCuVOK017zs ac2wMSsplEZEqE2OfcV+I48bXTzJWUWH3/52X0i5x87E+vDwt11fZXk6znqq00mQ O4grYdrosQnoYVPRD7QjhzWvAF1NqkieGCO/eBTAR/cZclu0JkYtaBNH1Yb8f7IU 4QIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4172 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-12 23:41:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-14 14:58:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT21220956' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thyrabv.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22570012761585897023919571449111257185620176072286712020540475867645898375087849414465164188709178631619127425452517009855132271061941134091137455512137445602692670384368311931392436910937695146107437351929348191020439778708993958610973215541617344390069915758296204069842481118569379766416570068039391044664203374007085223471358432679350088873333161110076115913112214705705087382520668978131225637849848844431173755536435555190522009720526156187763533702387992874350801712689928317699585453915246407391096838938849476002109572007274737084894154546334064454293765876669570449857665586181502273862193773816341249266913 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 631ca8a7b193358f16769ee5fa5fc8e6adbf2fb9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-aia.digitalcertvalidation.com/icag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thyrabv.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thyrabv.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-crl.digitalcertvalidation.com/crls/icag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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