tracking.unive.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:30:fd:5d:48:1e:b2:91:a9:2e:a8:c7:e0:00:23:46:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tracking.unive.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:30:fd:5d:48:1e:b2:91:a9:2e:a8:c7:e0:00:23:46:fb
Serial Number (int): 297131624808860185144402348653724964177659
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:1e:6c:59:91:6a:90:4a:bc:5e:f8:e7:64:39:d1:38:fb:3a:7b:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:15:22:f2:d7:a5:e1:8e:a1:e6:83:9d:37:5b:cf:6a:00:fb:93:b6
Fingerprint (sha256): 6f:da:e4:89:b5:5a:ca:c7:ed:07:b1:00:67:d5:0f:f5:77:c7:cc:98:a9:bd:66:94:28:62:bf:85:34:bc:b9:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tracking.unive.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tracking.unive.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tracking.unive.nl

Other certificates including the domain name unive.nl

(limited to 100 certificates)
www.acc.unive.nl
web.unive.nl
mail.vgz.nl
tracking.unive.nl
acc.unive.nl
mijn.unive.nl
rechtshulpagrarisch.unive.nl
lync.unive.nl
api-opa.unive.nl
iw.unive.nl
tracking.unive.nl
iw.unive.nl
bb.unive.nl
vpn.unive.nl
remote.unive.nl
api-atp.unive.nl
webwerken.unive.nl
api.unive.nl
rechtshulpagrarisch.unive.nl
dispatchtest.unive.nl
mijn.unive.nl
vpn.unive.nl
mxb.unive.nl
services-pat.unive.nl
unive.nl
mxa.unive.nl
prod.unive.nl
vpn.unive.nl
tracking.unive.nl
email.unive.nl
tracking.unive.nl
rd.unive.nl
dsuniverabobank.unive.nl
privatelease.beta.unive.nl
stadenland.unive.nl
www.unive.nl
lync.unive.nl
www.unive.nl
privatelease.beta.unive.nl
zakelijk.unive.nl
tracking.unive.nl
api.unive.nl
tracking.unive.nl
rechtshulpmkb.unive.nl
www.unive.nl
mijn.unive.nl
mijn.unive.nl
vpn.unive.nl
rechtshulpagrarisch.unive.nl
acc.unive.nl
stadenland.unive.nl
opa.unive.nl
tracking.unive.nl
rechtshulpagrarisch.unive.nl
cdn-pat.unive.nl
rechtshulpmkb.unive.nl
iw-pat.unive.nl
*.prod.daas.unive.nl
mijn.unive.nl
www.unive.nl
api.unive.nl
videochat.unive.nl
email.unive.nl
mail.unive.nl
lync.unive.nl
cdn.unive.nl
login.pat.unive.nl
mxb.unive.nl
pns-digital.unive.nl
*.ot.daas.unive.nl
services.unive.nl
bb.unive.nl
www.unive.nl
beta.unive.nl
login.unive.nl
www.unive.nl
flexwerken.unive.nl
pns-digital.unive.nl
dispatchtest.unive.nl
pns-digital.unive.nl
pat.unive.nl
vpn.unive.nl
dispatch.unive.nl
tracking.unive.nl
365.unive.nl
tracking.unive.nl
cdn.unive.nl
accmijn.unive.nl
tracking.unive.nl
cdn-pat.unive.nl
cdn.unive.nl
email.unive.nl
webwerken.unive.nl
iw-pat.unive.nl
vpn.unive.nl
pat.unive.nl
email.unive.nl
vpn.unive.nl
webmail.unive.nl
www.unive.nl

Certificate

The complete raw certificate details for tracking.unive.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2FRPCdKuGrptTVWFiWxM
JJO/zM/Mwd89lKdesMvogVCcnhv9MEh2AWQK/J2oQHsdIhRwCAj1IXZXcugHI69v
92wW0hE/bbOhY3udfC/ip7CrgwE16UteoTrKQEcA9JM0QSJS+nnOzy0tAmcbPS3g
kQXotUvcen1Ovoqw7+z6+Rjk6qkcHDY5QVBvs8JRz7a3rLpm6mnsv17uMa0A2Vlq
vHcpemNv4TQ1aREJtAZulWxW0dMufSMgSRlPAfYBd2ta4R9bdry0YAMheN90dnFz
ZbsR9jnYwVkv0NBmmAMRYl4GH36Q8i/7GTd+MZY5t3H0/m7jsbXjJOSZD+z5PIUa
+rMt1kcMO/JKdXOkXM0xbJyAi6HKDoGIN8hPLdEC4MqNk6JoChG3tZxTo35PMUYW
erj6Wegu4USDMhmQrFOrIWy6LlmmrMtXOGzFtee9EwWDhnleulSC8JzdLZC/8/u0
syZbbakcqCFl6CE8fGYbLHrPpIaEBtMO7pF++CZrRcEInJB8kpt7aRJQOMWO4Yoc
QZomGTXkwWjESHQ3/qg/DAo0IM7cC3+uA6z2b1nydlC7FhsF7vvZjmaOkf6LUFht
dpk1AZRGo9GpFkTah3P1qLXRU+RIIGvafElZD9uMBECy23hIeTnhEFonbl9D17D/
APXQoYZFXn8znWIwiO3dwnUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297131624808860185144402348653724964177659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-18 07:13:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 07:13:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tracking.unive.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882546672074610478863655497584063436591295653472892888162978068579669657454345582252233098674637097410364954474768898471928484018398584825618221357440000056148638519185683378724308571561768914430092241452161416344695819164793412487223303549222590507253199154890843418315427086942432936682297564872072478800070616773779627637223580128008780226543693180471048995566501390392872825477557458972178819326021977766405444592632660552916436362577116229566412848684044448175537687103603416442978758909435671738416361012094075012667577464619760608498386630830681737833461809705271573051605117877618188202044024522145889217691886430019156362888704169363865593041356584712071607597597294347779036639617444701511417636258420584431448419029031953731701075687347499945340023612905180804727026785257729207599664005538001668652439172606848141709928685747717372339553226951908170093892502553994671398261699916219359964185438807339813311991436850395166474184511526967604356295342796000479218749997639097497564137517955879644427229618404176724313758845079769120299983191595654783868518682694858259936040601474591622984780093606930164464017802782548476184804807872577254925895975595542707899978218283325568319572227583253111551162110183223305570174747253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							791e6c59916a904abc5ef8e76439d138fb3a7b58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.unive.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016725e1b4a60000040300473045022073cad9ce930e522dc109da41cd34f8785e51f84d1b314e27bcf770e6ef8d31160221008a9feb04f5cd19ca77258b44e3c7e9f6c49d521449b3a7bcf8a13cc278e0855b00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016725e1b48100000403004830460221008ae7aca1719bc73a9ca4dba44a5fc5ce750abb22422dede2249d587d1526421c022100d77fe41a69c236493f7658a4cbbed3e368a1ff4655d8b0e8363a2fae3c9455e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001287b743b0633c2428ec7001ddcda4117f1d15b9971fe1d4eb21e1a4a8b6a21ffe56e75fdf0bd07c023b23bde174779db9d48d6f715c369744ec11102325dff06b9a91047f9e62630500940151d1eefd3a8694efd41d20b1bb883ab8c64d296e4923e7619f4874b6fa501a21942a3b7a1a0b04a5b92227c60c7d5441943909476cad7371c0deafd44076614ac105c08be84d9b66b4c60254afabb21aebeb74eb47a9e8ec268ff36bcc98776f6752750c6c095e862356dc97d14140465e5bb81c9b1f01fd17d79f6f68610791bec0e4d83046dad50ec34de78a579544bb33a82f72df779368fb0260589360ac5f54d077b4a7d26af85d7c6d594f43f64cc11df2