www.vanleemelkprodukten.nl

- Van Lee Melkprodukten Barneveld B.V. -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number c8:ec:84:72:8d:39:51:76:2a:f0:17:99:cb:cf:c2:10 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Van Lee Melkprodukten Barneveld B.V.

Company registration number: 09084646
Organization: Van Lee Melkprodukten Barneveld B.V.
State / Province: Gelderland
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): c8:ec:84:72:8d:39:51:76:2a:f0:17:99:cb:cf:c2:10
Serial Number (int): 267073667569382282395747656476407087632
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 46:3c:6c:dd:55:82:f4:4f:02:70:1c:ab:74:34:67:ee:97:a1:c0:65
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): c1:ca:22:d9:a8:5a:37:68:e6:8b:06:e7:e5:6c:e7:45:18:cf:f5:16
Fingerprint (sha256): 6c:56:5e:25:48:5a:fe:c8:96:66:45:0d:34:9d:fb:71:6d:0f:70:d1:d0:df:c4:c7:16:62:a3:84:a1:35:3f:4f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate www.vanleemelkprodukten.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vanleemelkprodukten.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vanleemelkprodukten.nl
vanleemelkprodukten.nl

Other certificates including the domain name vanleemelkprodukten.nl

(limited to 100 certificates)
www.vanleemelkprodukten.nl
www.vanleemelkprodukten.nl
www.vanleemelkprodukten.nl
www.vanleemelkprodukten.nl
vanleemelkprodukten.nl
www.vanleemelkprodukten.nl
www.vanleemelkprodukten.nl
www.vanleemelkprodukten.nl
www.vanleemelkprodukten.nl

Certificate

The complete raw certificate details for www.vanleemelkprodukten.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267073667569382282395747656476407087632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '09084646'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Van Lee Melkprodukten Barneveld B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vanleemelkprodukten.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938242805403107880983361241054946622174191936279086317184701316570767138425823267081254683894272173798537620583877985896456790723017677345992157623891378345807685513131732180379305138896526909331407346831923893401947348876573168078413667792094187682144108160501242331638194224150223026200697619433363932843609809274205263972201518024620422151388517970891642330253146823239396982169721696610277371335477407405947831144172872045385703814581216959722826393387814734449528413285512860937350961063334367357243386651147113105741608240668167180261618882553574434984794303397708778824234114346829181163514534243572410163172179342987744948128496305875152096198815416082536242625167114696123427089876195766115842136550461741884751759145645096291892627968495981846312612339803843485235034273635091092923470682312558800916734466269138192086996998490458122804916279069125828867451797591861025127429464566297198758418280402815252039956015789793512071821104026965937747705309450049534327547859305466938002968440825835916240083465655706050019069940898297892675229256648324106845774863528534732505788587244440109588733863819810193006952898137369668127475351169514288079296739239498645337300584125534469134479792088259430605627569713705564309512569799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							463c6cdd5582f44f02701cab743467ee97a1c065
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanleemelkprodukten.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanleemelkprodukten.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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