www.fendeg.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:2d:b5:51:d4:19:c3:31:31:91:0c:a8:e8:ef:f1:84:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fendeg.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:2d:b5:51:d4:19:c3:31:31:91:0c:a8:e8:ef:f1:84:e3
Serial Number (int): 312099687191721808460895952776223528158435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:46:bb:77:59:a1:07:48:60:08:eb:eb:49:75:b8:4a:f3:e3:bc:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:aa:2c:83:37:9f:a0:31:dc:92:a5:4e:a6:ef:d8:d0:b4:af:1b:9f
Fingerprint (sha256): 6e:86:48:5b:8b:51:e7:76:bb:ba:48:ff:7a:b1:de:6d:16:53:54:a1:63:8b:f1:6a:72:42:a6:eb:1b:52:4f:7d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.fendeg.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fendeg.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fendeg.nl

Other certificates including the domain name fendeg.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fendeg.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312099687191721808460895952776223528158435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-02 17:55:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-02 17:55:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fendeg.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891122093474957777607009975647628881904219037473233688693240268871280850888160107259961298383807653181924943208275710692501400668386384847877930511707902142652343469215560463680285046746964219015108100166434584080282331574463486774088914716133925374695116512167591907434256944430017805694970661907025610638854189667624860716885302537308047364902415952615828465584655930403825152198054763807216010722948424368613808254908124857698794950224176752609050858601942058643942122335266201812043495240883601835315136366838690176846579587529839092713564467319255719781195147162934238470935351638297140805443342492698811066023086157689421681915574364502791751141076139787814527853161524100918193747212099531988858820145285693431214163300975226163265923768038342769558705979829842991594639803749780187589780460367868672890286389409886014506749759002898965955084481281325491485150563025135055588138052550283372965255706738510062433545056299001452798591085064788539102731286300011572177584424312379657749989426723609777515518854319363707939440014971995934012566966456098251915364314543330420591131428690246594017699641762514820992640102055269468311145818968038819474019013385782630166075123452304036511329920982370886872571750313940927526005570541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d846bb7759a107486008ebeb4975b84af3e3bc26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fendeg.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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