bosincasso.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:4e:ef:58:f6:ee:48:d2:01:ce:b3:a3:bc:7f:97:c8:bc was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bosincasso.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:4e:ef:58:f6:ee:48:d2:01:ce:b3:a3:bc:7f:97:c8:bc
Serial Number (int): 379519761663882718590135222335894946564284
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:59:97:3d:57:75:bf:e0:18:06:c4:f0:d1:dc:ae:4d:c9:63:d4:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:d8:0b:4e:2c:80:04:51:99:32:fc:6e:b9:dd:59:c1:25:ed:de:5f
Fingerprint (sha256): 66:c5:bd:16:b1:2a:33:10:56:c1:8f:fa:da:da:0d:be:8f:80:44:54:5a:f9:ab:13:fc:76:1c:d9:28:61:09:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bosincasso.nl

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bosincasso.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

area.bosincasso.nl
biblionet.bosincasso.nl
bibliotheekwaterland.bosincasso.nl
bosincasso.nl
buurtkadoos.bosincasso.nl
cwz.bosincasso.nl
denieuwebibliotheek.bosincasso.nl
engie.bosincasso.nl
erasmus.bosincasso.nl
gelreziekenhuizen.bosincasso.nl
independer.bosincasso.nl
mijnns.bosincasso.nl
mzh.bosincasso.nl
nedasco.bosincasso.nl
ns-spitsreizen.bosincasso.nl
ns-uitchecken.bosincasso.nl
ns-uvb.bosincasso.nl
ns.bosincasso.nl
nsfietskluis.bosincasso.nl
profyte.bosincasso.nl
tele2.bosincasso.nl
www.bosincasso.nl
youvia.bosincasso.nl
ziggo.bosincasso.nl

Other certificates including the domain name bosincasso.nl

(limited to 100 certificates)
redirect.bosincasso.nl
webmail.bosincasso.nl
payportaal.nl
redirect.bosincasso.nl
ns.bosincasso.nl
portal.bosincasso.nl
ns.bosincasso.nl
webmail.bosincasso.nl
transactions.bosincasso.nl
payportaal.nl
bosincasso.nl
bosincasso.nl
bosincasso.nl
payportaal.nl
*.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
mijn.lavg.nl
*.bosincasso.nl
portal.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
bosincasso.nl
*.bosincasso.nl
payportaal.nl
support.bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
portal.bosincasso.nl
bosincasso.nl
redirect.bosincasso.nl
portal.bosincasso.nl
mijn.lavg.nl
redirect.bosincasso.nl
payportaal.nl
bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
bosincasso.nl
webmail.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl

Certificate

The complete raw certificate details for bosincasso.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379519761663882718590135222335894946564284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 12:35:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 12:35:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bosincasso.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709366414969250716519469000967751385833499433824266999367043930756026585014066236454429829624168128645536449535696579549692570276417978735233123483533586150492583420384924760536047088230806267258142280971968573511592327690899481018420816564131751353010323198662739004623804917193403372786282899291942672868071991089158507076232002497108814960134531089309089439239128427771716708998527022526047396994839900442566743621320746998304374026490133575082341620761174260382397569647195993452973365905614396692778468602310312056975971632366663018584666877686478291976968914460507798077810652569635772706553117776905296554368369123437010381964021210685368010557611486575171581336212884995932242161506240896985180637795477697408949394768353092833291134228210475773727218205922398394237469195277570630563969420602184244231693970612516564444928424450115346224109964728860745361637584453258063158448533136087283832898027070420270593071891451081617090150519815138075528924426565172743361315771540184419515847621084497511925788075596182739764781229247177735735839822134027930007868955728094961570508418978973636939027155262505881593669584180218198705466758450948742436081820094668129377901345175250984036648365539120487634019834998135821571498181369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9159973d5775bfe01806c4f0d1dcae4dc963d4a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (581 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblionet.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheekwaterland.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buurtkadoos.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwz.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denieuwebibliotheek.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engie.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmus.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelreziekenhuizen.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independer.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnns.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzh.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedasco.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-spitsreizen.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uitchecken.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uvb.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsfietskluis.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profyte.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tele2.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youvia.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziggo.bosincasso.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b42ff36e60000040300473045022100aeb9963da311deab9026c92bd2df6104c10e0aa23187f874ec5e678b1392a9e002203541353a62037ca2643dd68b4791318412141868520395c043899caef7dc6bd80076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b42ff36e8000004030047304502210096e8c9a53801a7de6d0613e09b0dc5a270c7439c15ba7df12afed79b29e8fb47022039687f356b19d85dc673d137dc24027fc8291fd09c50a29166cee10a1d03461d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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