mijn.psynip.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:35:6d:4d:98:91:bb:04:e7:d4:9b:0d:b2:7b:31:67:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mijn.psynip.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:35:6d:4d:98:91:bb:04:e7:d4:9b:0d:b2:7b:31:67:cf
Serial Number (int): 292373569803053642554579347977084570003407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:29:18:b5:71:cc:bb:bf:6c:da:3d:02:9c:b4:c1:63:53:12:85:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:9d:a6:e9:df:e2:04:e1:1f:ca:0e:b3:74:1f:94:bc:05:79:6d:08
Fingerprint (sha256): 64:16:ea:96:66:1a:ed:c2:7e:ab:49:7f:eb:97:fd:d3:2d:64:2a:12:1f:64:10:96:4a:2a:d1:26:6d:ca:e6:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mijn.psynip.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mijn.psynip.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mijn.psynip.nl

Other certificates including the domain name psynip.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for mijn.psynip.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISA1s1bU2YkbsE59SbDbJ7MWfPMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjkyMjEwNDdaFw0y
MDAyMjcyMjEwNDdaMBkxFzAVBgNVBAMTDm1pam4ucHN5bmlwLm5sMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw/COW9rsG5h02vMCZZOQGAELG7fNPgDU
u8TJ73HvVtqak5gx4X0Q7z5pX8Bzc5IeL8B54/757pIH9mbsnh7mOShTJ0BIXqMg
6Ossyyuej00mjClK9jM9OdJiSU16h+P4v6gSZjzxVza4QnBUVgfsNa6b4xXo4GWp
YW/pVJ6KKU7TYEZNvjHRwbr1LPgR0m0frN6ybwQN6edbKLQSB4QZmIYLbaGUK3Ee
P4UY0fTaTt4GJJ8h48YG9GurbvzxoexVIAPPW65oSzwXnwh9sLZuJttAXOy4sUea
aFiuMDpZShn8VMlZfZhAFdQ9XkG2lj3nH4ba38vfSNhLlA0ZD6Rd8Mfb/4B0/tg1
w1hhh1mwpFbbsJk4ZQTxBYLyYrlouV8r5KY1jvgPx33nlJ9ocQDEZbqYZKUkzqxg
WVDdQukzPwSe9jfRGpL2cWukpjrg7XuaqEotsRsw0WDJ7arBde8sVVI618i56Ig1
Lc2B0EibHChufsB1/g8Y3JdMhwTdcY3fX2gSOpM4UE77hcAj+JhSAOcGBTiqIC3P
JJpk54bRzP3KO/iGC/k78Z17dkXXxmlXlvLmlJXxNeTJw1hhIIlSXE8VEIktWsAR
0JEmLwQzX3sS4BcE7i1fVcn+mCbGg2JYjXNOED5nDzGUUptee1p6jCHzmER1TGpf
bp8dcyChwi0CAwEAAaOCAmQwggJgMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUkCkY
tXHMu79s2j0CnLTBY1MShRUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5taWpuLnBzeW5pcC5ubDBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbrluWcgA
AAQDAEgwRgIhAPTOGDfZSSIorvfNW0ymoj8CWmimfTn++vOR0S44LVhIAiEAx1Fz
TDsIN392gyOX8zqHKRBRZCALl4Eg9yEwWh1OyIcAdgCyHgXMi6LNiiBOh2b5K7mK
JSBna9r6cOeySVMt74uQXgAAAW65blnLAAAEAwBHMEUCIC7GFLTKT6qRL4u73I2s
8kklMaR8YVtgEFmZfGjZWaWYAiEAthTFbP2uw68Crd25LVUp/MlONHRVIFVaIzNe
nR0UkDEwDQYJKoZIhvcNAQELBQADggEBABOvUtCJQiuTIicgJgAZtKlDfnyzeYMF
Q/JE0uBt2IwMk8eZ/b4MllPV+D/PGObCDliFiKCBCPP+OfqPzs3cFf6fEAAnFXim
+bFHEuTS56+M3n/6X4ErFdh+xxW5Ru0Z+addmRPtF9Fbvd6m+TyjrGxJNzAlk808
G/GJsfVyTkkTE5HPG5mB+WBDsO9g2+rO1UnPq8rjPUObq6SCKYwHHVZC/W/cbAXU
BlYnDnGQ5VwnoV268AVS82E+UXbGJ/8OvKcwJSjqqi3bueMOc2AvFbSp94ss0ZNb
t+cioQdTXFB8/uh1LWvTLe1U0R2sDNurR4j1oPSzgdXo3e3Q2T9vSZU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292373569803053642554579347977084570003407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 22:10:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 22:10:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mijn.psynip.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799364121474538766315730946829132539661585111374819752322957120688796458148880209634311020492155914201671688399668221090583232698384150673206929788362318758942272898257505386563749758353559668444293522111247555461881334720056847420292796957188766317170405640549279963250257321020941965494876996358621231715250860475715488512922181225221897093340106537911703756830684857255292080222325269722111868401788541195017233998353348870958867237105429881507613433073696916417165975707707856120227736209916097772581195109308581344492544370183087846421727105076866137951408605181776580524811527587885291143779045834901207045989384853849149207338721108940912506716698784706867739713035901018474763053271633991484702651665927145036538289829388846291627280435391328504233683202072346703126741990545761680528366143047366346626380654702658039136597557801379750812659852640802831602448018161790603552472874133705207009583110859307783863289262315443745041067594611668002235703054905565213761076305778551077699599256331568427673589982562467730234939642616527008189747088053460432484653118873147626311480040099082912352282471014106053360469609508700133084418033972094977698324784314166413168959000855567697750769612638694654494442850507173269212479210029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							902918b571ccbbbf6cda3d029cb4c16353128515
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.psynip.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eb96e59c80000040300483046022100f4ce1837d9492228aef7cd5b4ca6a23f025a68a67d39fefaf391d12e382d5848022100c751734c3b08377f76832397f33a8729105164200b978120f721305a1d4ec887007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eb96e59cb000004030047304502202ec614b4ca4faa912f8bbbdc8dacf2492531a47c615b601059997c68d959a598022100b614c56cfdaec3af02adddb92d5529fcc94e34745520555a23335e9d1d149031
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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