teddyranch.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:07:71:49:52:0c:ab:a0:09:a4:95:f7:42:1f:46:52:2c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=teddyranch.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:07:71:49:52:0c:ab:a0:09:a4:95:f7:42:1f:46:52:2c
Serial Number (int): 282103974990090026752701044642540266345004
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:3c:a1:f6:1b:4e:3d:3c:28:a7:44:46:61:b1:2a:13:42:b1:eb:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:57:bf:9c:59:c4:68:e1:23:11:c6:1a:e8:79:75:41:d9:19:12:12
Fingerprint (sha256): 66:69:b3:12:ae:7a:ae:9d:1a:f7:8d:5b:11:bc:85:72:34:b2:4e:2d:de:1d:bd:a9:a9:fe:10:3e:13:27:7a:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate teddyranch.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for teddyranch.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

teddyranch.nl
www.teddyranch.nl

Other certificates including the domain name teddyranch.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for teddyranch.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1uHJ5t1gX9J8R5AZBKyo
9PajO+l47ly+l73SPCh418ace2JlyDsOLDfziTyyn84/R6Mj5V9NXgmYbvVahfpD
rCYR4mNCY+3lMnaSK46uQuNxWiAVQxHRWZaXzA1otyY1VK2M06EfCIieGMdvT3R9
VK89g7/9aV4x9frNw1o6/8k0d+Zn2ZrTcqv7ejiwwkH/LBkuEArDPxgr9yoTrEEh
ZfXIqad3u0Ln/bxt1S+nUIojtlbxxXqmtBGAbKShYpbmcOmHne/WQ6PWQfDyXnDn
X2MLjA+OoV44zJnTJ01lKO6V4Ku8TSrwRhZMD0ZodV/O4YpvIxyppczmucCr3HnE
V/X5yN4eVwSQobJeNp51k8FUqP14GwNPIznBKukUj5NJQbOaEp8eP1eAN4jI3Igh
rgNFKwPdesKllBa7N4IOYOSnWKmsA9XhWjzQQBIa6l02HPvEIDAhxbNC0N7boFJv
picK7ppSWVLjWf/WDqN4SSKvdeO6dF60Ufnb6KK6A1cdaMiJrsyZL1tFkb/OnHZq
ONIhner9tYVfU9DB9aCRWVOLWaBp8KzNT1nCfeogqbOsQdzRhZ+vUewlhcnGqGlp
QqfED2P8jWXCdrHS+ggf+dzYBjMyFpsVH5wVxC5ccmjZAQ+YOBnKY+aru92X5E95
fTgYRLsR17aSstqeYKgtveMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282103974990090026752701044642540266345004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 19:42:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 19:42:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'teddyranch.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876642023699947742120444916586407613028232362031900221228007892055869665315906787649669219553110288697053781480540570124424529131569494706207776535649314596884518522710573920144764810991718734045650136058490877097577738548178871142607960373074474367437439316969284026541632034884557199094460254884959643320382667566267114453083450180284912294603105161120830637838716645427765609421526042528435979523920994365940206850679634427158071072264793190898065585844482141452250989931366382959706032150613946043999598709610025957386027134074164775469972385533043657038754120338857833913452213021789054493739927393917153030370881641807204511344488076587095040636848684009864166061812973266759821918227505991809612406908109842693366412706582314839962723690595296625375660747499073149446708785179628101511033717848617048512568106217548402716004576829006409037035581904454853113598379757187976086367698036696921413457309300520069738298753025200031110943301038864278697324139380795956229611501031379224500638264167165692544969906545087439003217029311062672928311266271381435214448225193205812133289589462956493124817930205524105868733811054489799778329499435534823296821365885244033899536832271127333931314943293897581680996354683629881243393179107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e3ca1f61b4e3d3c28a7444661b12a1342b1eb97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teddyranch.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teddyranch.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168ced922d1000004030046304402202114a74666168baebe20bc555686b57189c6cfa9971df18169299ef37b713f980220070f53d5dcef583e2971f28a3c8e51304072a1e488d19f4874dd31df07ff7791007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168ced923260000040300473045022020407019b1f20fa7a27d387399c1d6647e92a16d6474a2695b391173b8b1a6f1022100d0e0857abd6ba6ac6b6d791c4427f19f0ef5c4aa131c68ac49f742d1422fd751
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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