marijnhaverbeke.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:6d:e8:76:72:1b:b9:31:c1:19:5c:df:48:e9:d2:27:1e:71 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marijnhaverbeke.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:e8:76:72:1b:b9:31:c1:19:5c:df:48:e9:d2:27:1e:71
Serial Number (int): 298736631690105610129795647897193238961777
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:4d:6d:b7:2d:62:f6:5c:d9:75:e8:a1:6a:40:29:09:75:94:a5:38
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:16:a8:be:a1:c3:cf:21:3d:ea:2b:be:2e:8b:75:9e:9a:c8:d3:c8
Fingerprint (sha256): 67:37:34:6b:6b:99:c6:8b:63:be:ed:cd:ed:72:90:44:55:ae:3c:5c:26:cd:dd:4b:3d:20:ea:09:5d:94:5a:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marijnhaverbeke.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marijnhaverbeke.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marijnhaverbeke.nl

Other certificates including the domain name marijnhaverbeke.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for marijnhaverbeke.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxpvC4BV75pNa/jbjjjZ
HvoX4isTp4mw8xaV8shBZ2/diF4oV1ZKki6JtUruSwqfWUXfZW6eD7p6YJlxJNEH
GCRnGnmHnlu+mjX2JVtpH8ILyaYW+qDJzzJy2YhBRafFgJhEMG9nh6kWxEoDx06y
+5KGDbGoShbOydNzKtj/tEPS2V3mnXMRvnBXuIsn8vrS3NX7JCBkJqJeVt3XrdtP
tUSlK/ivLx+cjD4JEWfAETz6rvHf5E6HBWRk7KdRr4cIAI2CXSBO2gU9JL/sVqFe
W9ReqRDA8Fd9yXPiyJzrHJjmkaWE/m4U6tzCAxRvDbSnEDz/z2P8k6YY7en+pXJa
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298736631690105610129795647897193238961777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 00:48:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 00:48:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marijnhaverbeke.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19579972247174591977200157234270620163595089774362973740881296913030883748895665678063432591202416982454926363278949893790716899321526736132302473979165476684923192679079450922790690413638429137688130892597459024275782865222833932385401932734435861039806341490468742929056611232919713370094224450356411948808846076739588872984930734711623198350357346040002644613697901345372622241844226813246563947495333444534815101607199214931482363283539440279138959111684518358937894079312925053846001814291641105154512225198940365956736468696418752928361578716303809857078277764121369532434251251171565544694928093398004168546953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f4d6db72d62f65cd975e8a16a4029097594a538
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijnhaverbeke.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a2013f3370000040300473045022100b16bcb7faef21c852afa6a69ea074b58bfc1ec39e7a5cab02938bfd25b0ab30c022033773a8b202b841094936a7dab133b25797a2d080c3b6c3d404dbcf293b53015007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a2013f32c0000040300473045022100e31d5984f77382c238ce7f2131eca9a5bf1e11235c72a0665e0f20a3972b8882022054179cf8f1ee091740dc7fa829831ce99417481464c7c6740b29dc51da126145
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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