ubiweb.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8f:b3:b1:79:b8:34:7a:1a:e6:df:02:8c:fc:87:bb:89:8e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ubiweb.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:b3:b1:79:b8:34:7a:1a:e6:df:02:8c:fc:87:bb:89:8e
Serial Number (int): 310236089581530185601852110328144410151310
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:c8:fd:00:9d:e4:37:0a:57:c6:6c:27:84:d9:96:d2:33:ce:4c:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:61:5c:07:5f:a7:ef:30:60:00:e8:84:cb:01:2a:0f:5c:ad:ef:0c
Fingerprint (sha256): 6d:43:3e:a9:dd:34:d9:63:90:fb:2d:fb:af:7f:4d:b9:d6:d5:7b:b0:e1:4c:d9:7e:90:85:57:8e:8c:33:0f:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ubiweb.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ubiweb.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ubiweb.nl
www.ubiweb.nl

Other certificates including the domain name ubiweb.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for ubiweb.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310236089581530185601852110328144410151310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 21:11:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-03 21:11:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ubiweb.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767835115149150901848474158204546578562067664065223979535760071640640498170839879172647422302784651911249629203064806574131906433502549739823706943225190430177250448837025397307316259497655058420147920250186147764316576185334233379578538067942585595832010757189381925070952379306999460941823056797022718747423798796142920355900474018056803524888529896537955343888943225671348338044463541291334862596465227214904204341999416519610425554941667443051319778405405099744378663965727019410691567805804021708826322189470157741819387459811314383793169883678827592371783595293675770088166633212922267174125923151550357610179292140771456140597085094144361193099409961664817402702107305590853396523836826144011189938322030733403569199811668398916853885083939989982060190086907471299944294367246658429859051208566129365588544541834564899858780308932418955675910528159288928947713650593450898277647229654058117764492440795281827976760617826077062707769718381205606220546427931487515717133495510042737103647017672568367648113311779035226856473747043337323287820355901698453729878262889202414572003321079258056761024216202852082563297222418464145592020018746649485008044948234426947940035329223673473463520020801866286474635318952748378282438973041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdc8fd009de4370a57c66c2784d996d233ce4c10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubiweb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubiweb.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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