*.davincigroep.nl

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 2f:e3:c5:96:d7:7c:cd:5d:a8:dd:83:37:9b:eb:98:ea was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.davincigroep.nl

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:e3:c5:96:d7:7c:cd:5d:a8:dd:83:37:9b:eb:98:ea
Serial Number (int): 63656374774384902142945128108840949994
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 83:51:ba:a0:0c:64:70:e4:65:f0:73:11:45:3b:30:bb:03:ba:26:6f
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 71:59:35:e5:9e:b1:86:56:db:0b:d8:d2:e3:38:b4:1f:5c:d7:9e:15
Fingerprint (sha256): 73:e4:69:c1:e6:bd:06:10:4b:9f:c4:bb:27:bb:6d:13:11:4f:3a:6f:79:0a:82:f5:73:b8:c9:6f:89:9a:2e:11

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.davincigroep.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.davincigroep.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.davincigroep.nl
davincigroep.nl

Other certificates including the domain name davincigroep.nl

(limited to 100 certificates)
mail.davincigroep.nl
vpn.davincigroep.nl
*.davincigroep.nl
mail.davincigroep.nl
*.davincigroep.nl
mail.davincigroep.nl
davincigroep.nl
davincigroep.nl
*.davincigroep.nl
davincigroep.nl
davincigroep.nl
*.davincigroep.nl
vpn.davincigroep.nl
davincigroep.nl
vpn.davincigroep.nl
vpn.davincigroep.nl

Certificate

The complete raw certificate details for *.davincigroep.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 63656374774384902142945128108840949994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.davincigroep.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862097465483939211466916094685681059197223082284863906412592103719821752721726145879328432040548096903299393977659203750444380738428824358384142852511094181011627722954215554452904363076440938631440355735838796180157712594623467473116064299868682104997854431055575715383813260535617047703512520751298653066636584319136374441828350963264619485288128234346670045990872908609463041102363152464604499616306462549350074014289765749724910116524344238275225163038636725307495425513150908994633615037678334111799206096418060205985245992854652580384069238183955783394694629770118998817791563319190167729241669226270442274548509340794593554824103528859747018790946352897231716301975574416001487213821116239806978506368138394402710923977100127531569166468473274984584244303442946006047877601124963206423415674084205254717626323058851215587124935243546212921314744698413500750120722209250324120475073660471293154233095784117178339140524383381081285111216371778175109315470630530465459747231020777282392893091472069600975740515004945478807005826870482323967277726477143672611809207270017704752270396228380981210170930177971141520325989637673906500988263880356424198268675237160176094922423087885782089728517408751651912839088222068583125448880539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8351baa00c6470e465f07311453b30bb03ba266f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davincigroep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davincigroep.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f424e8ac000000403004730450220081b3e0b0e537bcd6f8cb5b2f58585c82c6ee2ece231dc4618740440d0aaf66d0221008777a7673a871ba155f9d4cb8aacc9b34eb35914269d09974b7705a1049e3b090075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f424e8a8e000004030046304402202bdf3399fa01f0cf23cb758f48b6246045035ae686216acbce3c66847c9629c0022072aaab5590274037478c01b348d7010d38e618ef7b56966569c30a39ce32530c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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