spin.spinnet.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:17:ae:d9:6d:6a:4e:68:c0:62:63:a1:55:58:b4:1b:56:83 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=spin.spinnet.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:17:ae:d9:6d:6a:4e:68:c0:62:63:a1:55:58:b4:1b:56:83Serial Number (int): 356508052785112547157738593102530178930307
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 62:e3:2b:64:f0:c4:78:32:23:5c:b4:4b:0c:4b:3b:97:22:81:7c:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 25:a1:7a:46:52:ba:22:a1:0b:38:85:56:e4:d2:a7:67:50:81:f5:bb
Fingerprint (sha256): 6f:5e:67:94:db:09:d9:77:01:ce:08:4a:9f:32:82:96:64:ab:a5:0c:27:dd:9e:09:93:78:3c:24:64:31:95:b4
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate spin.spinnet.eu
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spin.spinnet.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ernie.spinnet.eu
ernie.uva.nl
romanticnationalism.net
spin.spinnet.eu
ernie.uva.nl
romanticnationalism.net
spin.spinnet.eu
Other certificates including the domain name spinnet.eu
(limited to 100 certificates)
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
ernie.uva.nl
imagologica.eu
spin.spinnet.eu
imagologica.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
ernie.uva.nl
spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
ernie.uva.nl
imagologica.eu
spin.spinnet.eu
imagologica.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
ernie.uva.nl
spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
Certificate
The complete raw certificate details for spin.spinnet.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISBBeu2W1qTmjAYmOhVVi0G1aDMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDMwMDAxNDdaFw0y MDAyMDEwMDAxNDdaMBoxGDAWBgNVBAMTD3NwaW4uc3Bpbm5ldC5ldTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBANXiKRO150ic1VYdsZRg2uR3f7swJmrK +dRf2huZSUlfaOLKNYrZZvmLmmks3UZI0sp0wdHzVAsINrGNghC7oAqLOg0DcF8h s83hyrrXwItV+SATx7fEY66aAtAi8bXLz/89CrKuCPaSBVmBtJYU5q6GdwlU9O75 HDgMSZaq7xtJ5eUxxPUN8/IlEJjtvLPDeCgeqBj7x+kU+KfmUdCKyghQW3eORI6T cAd9fvDebwOepkN2mnEGwkyeDHawF+cQO9oDlz5esR5Kllm/1H70wBY+fkFVgYdD OCykjNRUT3JWIdPTdEdiqcHYSflARqPNsNSnGI8uxkkfaBulqnM82RUCAwEAAaOC Ap0wggKZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYuMrZPDEeDIjXLRLDEs7lyKB fBAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzBTBgNVHREETDBKghBlcm5pZS5zcGlubmV0LmV1ggxlcm5pZS51dmEubmyC F3JvbWFudGljbmF0aW9uYWxpc20ubmV0gg9zcGluLnNwaW5uZXQuZXUwTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW4uyEZYAAAEAwBG MEQCIBrMw82wIyE4iVh0UdTfVles6t9TXIOkoCk9MUA+lxfbAiBV3fyXCPnprFDZ 5tY6XL8Ca2xDUy6GDjk+HayW+x5XKgB3AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq 7rxhOhpp06IcAAABbi7IRn4AAAQDAEgwRgIhANU8iY/Flc1AWK79QqOrWnOFA+GE 1aN16dXJgHcujYLRAiEAsmAAlu3Xjtg3RzXHS6DSoHwqvnIQPQE8nNw4HubRtfQw DQYJKoZIhvcNAQELBQADggEBAHKB7r1xPx3D9ZXIZnc4481Q05osgqOs/Agb5nBQ fblCY2Ozt8ITKqcm5NhscHtmeAkfYZMe9ZBbT0rUwylv3jnf1cyeLCDV+anDg6Ny Leq1yJ4bAVmsJvAGel/xhwpr9OdL9OkPkYPr9jJg2ZDIlmhO/VDUPmGuprZ75pGr tsrD2QL/TgdqcKP0vCQHq+ld0tR7otuL8fR27uwjGFAD+tnd+BHBqETFGqE1xCCv NTnIREAEqydL3RSfmPx/9/QXtH1ZJCfgk3gn5qibgEE6tP3MGDrTy31ZqB0ERcf+ lCbx8lZa4bUJaxbGhbvypQ5PVvjSDbHP9/CcgMNbugNlDzA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eIpE7XnSJzVVh2xlGDa 5Hd/uzAmasr51F/aG5lJSV9o4so1itlm+YuaaSzdRkjSynTB0fNUCwg2sY2CELug Cos6DQNwXyGzzeHKutfAi1X5IBPHt8RjrpoC0CLxtcvP/z0Ksq4I9pIFWYG0lhTm roZ3CVT07vkcOAxJlqrvG0nl5THE9Q3z8iUQmO28s8N4KB6oGPvH6RT4p+ZR0IrK CFBbd45EjpNwB31+8N5vA56mQ3aacQbCTJ4MdrAX5xA72gOXPl6xHkqWWb/UfvTA Fj5+QVWBh0M4LKSM1FRPclYh09N0R2KpwdhJ+UBGo82w1KcYjy7GSR9oG6WqczzZ FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 356508052785112547157738593102530178930307 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 00:01:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 00:01:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spin.spinnet.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27000282835673615581723386052771611387833432099306805491347313458210575875483490915253473083169282608128404667674609347485515852586745268416969404179502100167851720473754058841945409486978880976036724531670324375986506379564943131870042921059944272983431733157826628442756827605395458661366267048372809999779360906673493943133867285432628699112879023222270273575881285533876911069369223811840694689962614478950481365917966614148596577007783827615960928992158077896948085951529379359854460924105055351853147126715886646520340824522030695931637270549318818234388103392390678477359636744189859769719748093334865221310741 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62e32b64f0c47832235cb44b0c4b3b9722817c10 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernie.spinnet.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernie.uva.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanticnationalism.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spin.spinnet.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e2ec84658000004030046304402201accc3cdb023213889587451d4df5657aceadf535c83a4a0293d31403e9717db022055ddfc9708f9e9ac50d9e6d63a5cbf026b6c43532e860e393e1dac96fb1e572a00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e2ec8467e0000040300483046022100d53c898fc595cd4058aefd42a3ab5a738503e184d5a375e9d5c980772e8d82d1022100b2600096edd78ed8374735c74ba0d2a07c2abe72103d013c9cdc381ee6d1b5f4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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