www.tandartsmaenen.nl

Issued by Intermediate Certificate DV SSL CA - G2

About this certificate


This digital certificate with serial number 0e:db was issued on by Intermediate Certificate .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.tandartsmaenen.nl

Organization unit: GT51974344

Intermediate Certificate

Organization: Intermediate Certificate
Organization unit: Domain Validated SSL

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:db
Serial Number (int): 3803
Serial Number lenght: 12 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: 63:1c:a8:a7:b1:93:35:8f:16:76:9e:e5:fa:5f:c8:e6:ad:bf:2f:b9

Fingerprint (sha1): 89:3f:5e:d4:75:66:9e:0c:04:54:1a:b1:6a:32:0d:3a:98:31:58:ef
Fingerprint (sha256): 7d:61:87:fa:23:80:60:e5:03:ae:f3:16:6c:c9:80:c1:6c:3b:26:c8:81:a3:38:08:4b:a0:ff:a3:e1:45:d3:f7

Issuing Certificate URL: http://ica-aia.digitalcertvalidation.com/icag2.crt

Revocation information

OCSP Server: http://ica-ocsp.digitalcertvalidation.com
CRL Distribution Point: http://ica-crl.digitalcertvalidation.com/crls/icag2.crl

Check the revocation status for the current certificate on www.tandartsmaenen.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tandartsmaenen.nl
tandartsmaenen.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgICDtswDQYJKoZIhvcNAQELBQAwgYExCzAJBgNVBAYTAk5M MSEwHwYDVQQKExhJbnRlcm1lZGlhdGUgQ2VydGlmaWNhdGUxHTAbBgNVBAsTFERv bWFpbiBWYWxpZGF0ZWQgU1NMMTAwLgYDVQQDEydJbnRlcm1lZGlhdGUgQ2VydGlm aWNhdGUgRFYgU1NMIENBIC0gRzIwHhcNMTUwMjAyMjAwMTAyWhcNMTYwNDA1MTAx MjQ1WjA1MRMwEQYDVQQLEwpHVDUxOTc0MzQ0MR4wHAYDVQQDExV3d3cudGFuZGFy dHNtYWVuZW4ubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBm5ny SDIwv30zbcAzo4R9NRglWmdlK50oknxK1UjwZUDjk9ulqPrsCNNuGR4s7M9gMDVw cvZF+v88XP9fTCBxRRYEQJsXiNYJ7rG670LMDRdIk23HJYOKr2B3DhTrtPAld9ak Jvm28fL9pQq7w9zY5e5RLRZ0dNtW83AtHy2awPBpY5JzrJluaTE33g5m0G8PSAd4 PfnGh9kH2+/9hjKllCel9yXVnurSl9L/VKwb0uZOJrofU+0bl5CDY/koGqy9rv8m RPT1St9rCvKoqdNrXWgoqA9f4gNeL3Vngjby4EgJZoGG/TJOFh92MXIWxjePVtF6 +e4YWLZ3nWE+GLfzAgMBAAGjggHFMIIBwTAfBgNVHSMEGDAWgBRjHKinsZM1jxZ2 nuX6X8jmrb8vuTCBhQYIKwYBBQUHAQEEeTB3MDUGCCsGAQUFBzABhilodHRwOi8v aWNhLW9jc3AuZGlnaXRhbGNlcnR2YWxpZGF0aW9uLmNvbTA+BggrBgEFBQcwAoYy aHR0cDovL2ljYS1haWEuZGlnaXRhbGNlcnR2YWxpZGF0aW9uLmNvbS9pY2FnMi5j cnQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAzBgNVHREELDAqghV3d3cudGFuZGFydHNtYWVuZW4ubmyCEXRhbmRhcnRzbWFl bmVuLm5sMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9pY2EtY3JsLmRpZ2l0YWxj ZXJ0dmFsaWRhdGlvbi5jb20vY3Jscy9pY2FnMi5jcmwwDAYDVR0TAQH/BAIwADBa BgNVHSAEUzBRME8GCmCGSAGG+EUBBzYwQTA/BggrBgEFBQcCARYzaHR0cHM6Ly93 d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMA0GCSqG SIb3DQEBCwUAA4IBAQA2Y5fvn+ZY/TmoXkQ7F/eFdfb3RDNZD8TTJgkKp9wpOhYU CjlAOWinpXVUDck1BIesn9HkrqDI4JozFGZlZ2kMznO2afgNm/dNEwKpS3v+jBdQ tPVHPkVwFBo0gdC8fDwIiZgJLxpkoQuaiWp9jPkBR36MhwLyX0xNqYjt1bcC6Bbc xZt0xOyEcVJGoh9EbLVK5nmizZ/ly2WuzQ5eqcHSaaHxdioIDrSmwESOW9DeMuZ8 96c8cnY3ynk0AMyvID+bYWZTCFbxE3KpjhZAjzuOLz4cpHAdtfxUWGOIP+aaFtxi GDt2IiVgD0LyJmCy/N7W2ioXO08DoyH5rYZEb9dm -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZuZ8kgyML99M23AM6OE fTUYJVpnZSudKJJ8StVI8GVA45Pbpaj67AjTbhkeLOzPYDA1cHL2Rfr/PFz/X0wg cUUWBECbF4jWCe6xuu9CzA0XSJNtxyWDiq9gdw4U67TwJXfWpCb5tvHy/aUKu8Pc 2OXuUS0WdHTbVvNwLR8tmsDwaWOSc6yZbmkxN94OZtBvD0gHeD35xofZB9vv/YYy pZQnpfcl1Z7q0pfS/1SsG9LmTia6H1PtG5eQg2P5KBqsva7/JkT09UrfawryqKnT a11oKKgPX+IDXi91Z4I28uBICWaBhv0yThYfdjFyFsY3j1bRevnuGFi2d51hPhi3 8wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3803 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Intermediate Certificate DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-02 20:01:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-05 10:12:45 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT51974344' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tandartsmaenen.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24440722745464509908242749534585373776258468747375448677140798300946631896884928615982483381998350816991782418836812957225148287590253719788423369759107667875481384085660817972402548289394773309703369775519844295225826363874248830177273126924259013142088557068467803569736915235201465978462861799984721666014286977053852961388654326836885116734670146228397943822099354176529814009179875636291457645947502163255649753391929363526475173916476919426155444447243450461797809065609292960290347381788851746919523245691650093985268063733922497779669907983912132720365878654407337842772046286244366260861602735107840503494643 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 631ca8a7b193358f16769ee5fa5fc8e6adbf2fb9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-aia.digitalcertvalidation.com/icag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandartsmaenen.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandartsmaenen.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ica-crl.digitalcertvalidation.com/crls/icag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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