www.praktijkpieksma.nl

Issued by Intermediate Certificate DV SSL CA - G2

About this certificate


This digital certificate with serial number 1a:dc was issued on by Intermediate Certificate .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.praktijkpieksma.nl

Organization unit: GT86791040

Intermediate Certificate

Organization: Intermediate Certificate
Organization unit: Domain Validated SSL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:dc
Serial Number (int): 6876
Serial Number lenght: 13 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 63:1c:a8:a7:b1:93:35:8f:16:76:9e:e5:fa:5f:c8:e6:ad:bf:2f:b9

Fingerprint (sha1): 17:2e:60:b2:a5:1d:30:1d:4b:b4:b4:f5:01:39:27:c1:00:83:38:ec
Fingerprint (sha256): 65:e5:aa:96:e1:8f:4c:4b:20:13:e1:2c:7f:62:bb:a7:d1:52:7c:5c:42:0b:52:7b:6e:5c:9c:71:35:56:53:f6

Issuing Certificate URL: http://ica-aia.digitalcertvalidation.com/icag2.crt

Revocation information

OCSP Server: http://ica-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://ica-crl.digitalcertvalidation.com/crls/icag2.crl

Check the revocation status for the current certificate on www.praktijkpieksma.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.praktijkpieksma.nl
praktijkpieksma.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgICGtwwDQYJKoZIhvcNAQELBQAwgYExCzAJBgNVBAYTAk5M MSEwHwYDVQQKExhJbnRlcm1lZGlhdGUgQ2VydGlmaWNhdGUxHTAbBgNVBAsTFERv bWFpbiBWYWxpZGF0ZWQgU1NMMTAwLgYDVQQDEydJbnRlcm1lZGlhdGUgQ2VydGlm aWNhdGUgRFYgU1NMIENBIC0gRzIwHhcNMTUwNTA3MTM1MTM1WhcNMTYwNzA3MTAz NzAwWjA2MRMwEQYDVQQLEwpHVDg2NzkxMDQwMR8wHQYDVQQDExZ3d3cucHJha3Rp amtwaWVrc21hLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P2q OTqNuZqnJlx1erxbk0MYPfGzIYNsMOzjCp5QJAXCFFcgrI9TaNBrMCZuszw1DKXQ /4NRkzGJzx6cZMHokNpq/9hq2XUcHZ2gp3dUXHwzTWc/2dFuxBP/ztjPh14aCvgN pW7TsIwuKFECYLTfDd/M7zZO+hCKyzxK3uiJ44JKQO9AEJQCnOk/XNDDWwc3eKFF 9Oqfz5jBYwAGDwUNpEVcFSEMDvb87Ye+FUS9mwqbhow8AD5y1DnNQO7Ld/R0vLnY i7R9/tivsy0eohasq0Af3xMf++/jAjkaPx2opvnybUDg/l4fV4yFUb0ba/4MoK9i VFYPiC4pOp1L0ZH3NwIDAQABo4IBwzCCAb8wHwYDVR0jBBgwFoAUYxyop7GTNY8W dp7l+l/I5q2/L7kwgYUGCCsGAQUFBwEBBHkwdzA1BggrBgEFBQcwAYYpaHR0cDov L2ljYS1vY3NwLmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5jb20wPgYIKwYBBQUHMAKG Mmh0dHA6Ly9pY2EtYWlhLmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5jb20vaWNhZzIu Y3J0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwNQYDVR0RBC4wLIIWd3d3LnByYWt0aWprcGlla3NtYS5ubIIScHJha3Rpamtw aWVrc21hLm5sMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9pY2EtY3JsLmRpZ2l0 YWxjZXJ0dmFsaWRhdGlvbi5jb20vY3Jscy9pY2FnMi5jcmwwDAYDVR0TAQH/BAIw ADBWBgNVHSAETzBNMEsGBmeBDAECATBBMD8GCCsGAQUFBwIBFjNodHRwczovL3d3 dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwDQYJKoZI hvcNAQELBQADggEBALK65xYUHeoWHODp62IQBcLJY/KeU3wXFWVhy0iyD3y/z8sX SKM9g18vHNfff1PkHu21SrTsm+7lBQ7jhI11YvAWukTGgo8tDDLEyl1YtCmmgk0U NFGKQ7vmLz2hkDLPcJat0xrZN/3TBJStdbvQp6mCpY16PxVzaG1/XIEbNynbkiPC Wf3y3ToHklYtgMNRxAmeJpQHdW1fkdPjszSYUdq+4ot02QCCaei0x8Hjn2pRMRSl btN9S9WqSxWnYnEyFQCifnBSjp2hf4I1JUgpaNWDekUzuZZhV25g3zbfUaXH07++ YBPE3M7kzl2zmHHb8MVYyOPZ22Bz20BcJMCEXhE= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P2qOTqNuZqnJlx1erxb k0MYPfGzIYNsMOzjCp5QJAXCFFcgrI9TaNBrMCZuszw1DKXQ/4NRkzGJzx6cZMHo kNpq/9hq2XUcHZ2gp3dUXHwzTWc/2dFuxBP/ztjPh14aCvgNpW7TsIwuKFECYLTf Dd/M7zZO+hCKyzxK3uiJ44JKQO9AEJQCnOk/XNDDWwc3eKFF9Oqfz5jBYwAGDwUN pEVcFSEMDvb87Ye+FUS9mwqbhow8AD5y1DnNQO7Ld/R0vLnYi7R9/tivsy0eohas q0Af3xMf++/jAjkaPx2opvnybUDg/l4fV4yFUb0ba/4MoK9iVFYPiC4pOp1L0ZH3 NwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6876 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-07 13:51:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-07 10:37:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT86791040' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.praktijkpieksma.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26382654274804543282305037790931441531510466989684421742964106383751987174368352495798415673965751518150928809326205050830775035493519547145823148450722984740957495306868224746563193180545293892250102396889287537957726757662594300078799694349478589770725483004164163120697224700954507512024799616298585298271730770923731749970850288244411428887594086109588061830955698007840300482384900442720072136029710141075911302021875053901712324377816016181155370124931592732221259761815471204296184700632862411018111818843795315632944025540028103988999480863108831354841518817305619626835548157159402312960153337489912918832951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 631ca8a7b193358f16769ee5fa5fc8e6adbf2fb9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-aia.digitalcertvalidation.com/icag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.praktijkpieksma.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praktijkpieksma.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-crl.digitalcertvalidation.com/crls/icag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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