bureaustof.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:57:46:63:e7:9e:58:75:b1:f8:0f:16:ab:35:82:4b:e0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bureaustof.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:57:46:63:e7:9e:58:75:b1:f8:0f:16:ab:35:82:4b:e0
Serial Number (int): 313175785889986033380315426476492339694560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:9c:92:08:f1:b9:bd:73:fc:32:e0:21:73:df:dc:a9:03:91:d2:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:12:d2:85:9c:e9:15:7b:17:12:c6:4f:3f:39:26:46:eb:d8:0d:07
Fingerprint (sha256): 6d:e6:0d:e9:7a:7a:3e:c9:96:4f:ca:63:be:b1:a9:35:7c:61:6e:c3:62:95:0f:15:63:13:f9:1b:44:0b:f2:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bureaustof.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bureaustof.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bureaustof.nl
www.bureaustof.nl

Other certificates including the domain name bureaustof.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for bureaustof.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvATWSTFAbduGwx2H4aUu
Unw+tfNjCPmNtdrcieXDi7T/BLGrwERBmVYcRQAVudcRwHn0uKTAFg4FOsoah68V
59QCloSS9xBAi89bTw5FgXv0QtCemw8GSYPBobGzrfcVp/dfoeRVKVhmmrQgfepY
9C9FmtyXwg/WYkbGQRhXuFh/jcUQKOc4xmAxXiv4XSGJKqaCTij2sJIMnPykFcCj
UvLzDagSRKMxSPFs2flQ5eKq7MdJCqeefQU9Ng9yJB0dujbCxPYMyUoWfG/TrCL0
kW2cC0rZSG4sk+FngF9h7s/OAxF/EyoN4al2/fDFp92MUIHKxNwLuj3tQU/zmvk9
p2/dgsa3079fbJcOoM7zg4Q/IQieGWlTTXItjUT4UAFphh8McCKWyo5/S++BVzSx
i+In8iJhXd/q6ATKqqk1grpp6DZ07HcSrxcZw7a8XeNtFepFbylP5WiYuG9ghsfB
Ji+0hhcs5hPccet/f6HBKcxCqnM7RAhQzOomJa+8ao0scsyWKwNV4C7w662rhHmu
BXK5Ek9QsilpXeSlJ2Hz7bSv8O5krcjxCQDS3uT0pX2Xi7cp+kIX5ww+DlcBbJqq
6QIcUwOYskYx6oMoE5K6/gBgmT1VYWu8K/MjeFnhPSbor8oBpS1CoS8tF8xvxpOJ
oaZdxxBbAH7ag3DbZ0SuNV0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313175785889986033380315426476492339694560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 22:18:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 22:18:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bureaustof.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767050168615880652977861104995584181843441041536333447085152115447671936510392598842444432746761444824620872904021827504852037123531015275070432883967477900747553236008606668446583236237083767740594477832144026701748828947108276636550292668998756483772606079407090512823251201550876154970438114723813321001854255774566160979239258029343577884780139532433206723342457950161064740857179380405243804929559002101957792467745095625851679228197912573341421432455506964160926065453549918696372755083548117350182588654777713735775437973291594568925317680691164191350846849404086927657348422770926392107284984050773662203868840177083926660707254814435597398254472807182018843190821031735984870472829611000993105971002445843961945020382760689210806097273361634857986319446654251488632783659224132709050549524404341944049323283602266086945744189033228012445206789112912407054021865562758269617691873156744629628640410304265800679502724952720171955523203950237489152160634229541278766648517391205314421407320464181961392038339545740940731403316700338763409726015476723437076834135993795639108577141751928709961499276979648185481330828053452291431184856048777855722622658775317192658600088521140501211443324018654022258667740070329131101372429661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d9c9208f1b9bd73fc32e02173dfdca90391d2ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureaustof.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bureaustof.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f0bdb1e860000040300483046022100a192640a4711b5cda4ebb89ee99d167218d8d6995dcbede93599b2296315fe96022100d7d98eed8e181c229027298516481637edd388a4601c4113769c474338a3923600750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0bdb1e89000004030046304402201c6561fbf77dbfaec964589e152f2b212f00c250495d1b160ef6f72ad0fbb9f802201b6c8a7968a08738ced875a4e5140960f8ab47cf9305714606a6b9ec3cccc81d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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