*.funda.nl

- Funda Real Estate B.V. -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 06:56:3f:f5:a9:8c:79:e0:e6:99:05:7b:15:4b:63:17 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Funda Real Estate B.V.

Organization: Funda Real Estate B.V.
Organization unit: Service & Applicatiebeheer
Locality: Amsterdam
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:56:3f:f5:a9:8c:79:e0:e6:99:05:7b:15:4b:63:17
Serial Number (int): 8423202759721128293060666904407663383
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fe:24:29:e5:9d:70:30:ac:41:84:a5:41:a5:7e:87:15:54:3b:29:b8
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): db:2c:2e:f7:ac:b7:7a:ef:ab:e5:86:b4:a4:5a:ca:8d:a7:34:22:6a
Fingerprint (sha256): 71:37:c7:35:6c:fc:b5:5a:d2:0c:0d:c7:dc:11:9c:59:d3:53:06:b5:ad:32:a6:47:28:f8:7c:42:b9:64:18:3b

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.funda.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.funda.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.funda.nl
funda.nl

Other certificates including the domain name funda.nl

(limited to 100 certificates)
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
help.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
jobs.funda.nl
blog.funda.nl
pers.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
e.funda.nl
alerts.funda.nl
e.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
help.funda.nl
*.funda.nl
alerts.funda.nl
*.funda.nl
alerts.funda.nl
e.funda.nl
alerts.funda.nl
*.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
blog.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
help.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
*.projectd.dev.funda.nl
alerts.funda.nl
alerts.funda.nl
help.funda.nl
*.projectf.dev.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
e.funda.nl
alerts.funda.nl
help.funda.nl
Funda (Funda Real Estate B.V.)
*.funda.nl
go.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
jobs.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
alerts.funda.nl
alerts.funda.nl
*.funda.nl
alerts.funda.nl
alerts.funda.nl
e.funda.nl
alerts.funda.nl
alerts.funda.nl
help.funda.nl
alerts.funda.nl
alerts.funda.nl
alerts.funda.nl

Certificate

The complete raw certificate details for *.funda.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunYtRMNmMABOrLbs62Sw
hVENRtomTOeMfWme82KDGSy+ybhiZa57tPAYVNHiECnaxqS/dFBlZsJg/QKhZ1Er
nJgP1CkifMa4BhqJT+88KTn3tTKQZj81hYx1vZ44/xFASizOhyiN7gh8H4/6pJ1k
wUAV0ZnJH81FOKYb8zgDmjXonzCwwLjxZHwydDPmJq/wmm9iElDYmqGyVMv4ptON
JeiF2fJCGVpXnvGSnifAcB/2V3XepNBy/hvqpuITFHak3oVGSsbv88InjW+zAHJC
68SfVem8h2AKA3k7WGTvgHprMmawFWiFaPhKqnmEs0fVM7OGe/7dovgj9NisNtFm
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8423202759721128293060666904407663383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Funda Real Estate B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Service & Applicatiebeheer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.funda.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23538599890748890157936681994530548158796905939899429352614871191691272547173562054179570888416891972752517859869360489206815105356958959929841261968405879327760377112980549555679727353370069472462162411667693344982961087871645828040519024318321954528943082454767715652842439310238367090219995567081659077775632473125333760840943621226242819739144221112820048993879142996887013915837634999505734214934784376763299255544357710137978625409688475709036207674020560878921964888868609581119036623188089862080780520925411803367275415590998319148027645320318719222583772701253499270322777488728827159464243014882312296949383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe2429e59d7030ac4184a541a57e8715543b29b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funda.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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