www.europarcs.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:7c:6b:62:69:6b:3e:55:22:80:c9:97:b2:5d:50:b1:d8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.europarcs.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:7c:6b:62:69:6b:3e:55:22:80:c9:97:b2:5d:50:b1:d8
Serial Number (int): 301995841302141898360160379111800984089048
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:78:f8:5f:41:ff:a0:8b:a7:20:a2:bd:0e:76:81:a1:0e:59:32:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:6c:ac:fd:67:52:85:2a:de:86:33:50:09:92:ea:80:0b:01:37:8c
Fingerprint (sha256): 75:76:72:c0:d2:99:e5:88:39:16:d1:57:71:87:e6:d6:45:7d:42:e8:93:e4:b3:29:a2:6a:c5:ad:37:70:b9:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.europarcs.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.europarcs.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

europarcs.nl
www.europarcs.nl

Other certificates including the domain name europarcs.nl

(limited to 100 certificates)
boeken.europarcs.nl
www.europarcs.nl
de.europarcs.nl
mail.europarcs.nl
www.europarcs.nl
europarcs.nl
www.europarcs.nl
de.europarcs.nl
www.europarcs.nl
mijn.europarcs.nl
mijn.europarcs.nl
en.europarcs.nl
www.europarcs.nl
sni.cloudflaressl.com
boeken.europarcs.nl
webmail-brunssum.europarcs.nl
sni.cloudflaressl.com
*.europarcs.nl
en.europarcs.nl
de.europarcs.nl
europarcs.nl
*.europarcs.nl
de.europarcs.nl
mail.europarcs.nl
de.europarcs.nl
en.europarcs.nl
en.europarcs.nl
mail.europarcs.nl
mijn.europarcs.nl
mail.europarcs.nl
europarcs.nl

Certificate

The complete raw certificate details for www.europarcs.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301995841302141898360160379111800984089048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 01:39:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 01:39:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.europarcs.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735982192144917650644754271823077716573790994222929530052758828050541840213845789081710441701422409275402358418630912281155572680899498637930606441912154380522733838417172771485250805874966341399544354545767754208328217597352574426690443539257840323416578644753720416905227678026232292606379472540122326850117367448785208469237611746349356482020358255044617492142277425729126778323738307197393056243425419292435017331744895322966628625691486497515445141017958602938304825463779623567978969861465867117373540903147489204870876286370074165406808325459465818010074108099580756168129654699702812390307920829976484851128765269228623654751080857982681360119547390028790208914075970839750968813723059401316752181157783508818388153006446898995507063418879413093018276178901525359816913830452116583331402537793710645373611119656977617553508730204795412331753975946955789376901562525148853520215483207511444876882570600805710609858175208614882167149276373147257746707511500541477946746766266190750709890443304318831850551378931264018423221900200443719068716324973813301062036966845532023793724613867231678374354725946905614429047630489668402231887732533121513440628297696931296660936178963107501756893439755225205530163987248898965375379685023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e78f85f41ffa08ba720a2bd0e7681a10e593287
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europarcs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europarcs.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001673422e45c000004030046304402203a7e1d87b750cd09fbbfcd3aa658d5e5952db3cc4cbf9f694678c5e7a975b71f0220180c2f6a959245b840a73026a2427e55d9c63a40d5145464a44d44faccae0d69007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001673422e6a900000403004830460221008da8ed4e56ad698d772737d9be2c4573f774362577878997d15a84efa5964ace022100e4d6828309013fb8076511bea317d403652af7fcec6ba13d39b778be62dfdad9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c2d99ebddfd71f6fad9d6399f5149ad8af0a1e99c405d7290e50143917a9203c323695fda67117fe8b56b43d7a54a58d8d40caf361e629bb760e318faa2293ad50281d67b2fc0d98d69c65c7378a9e045ba80fdb9daec4c135de22d20f5d1962eb1182542f811cb72b1b694053196f905878a7da3e97e93df61758e0f5bcea8711e8f21eb2e3fbe18f24010db721e1b0f8ae7b3129ebb96aa700ab55be2d3b477d353dc31781f58837a536f6a5f4a40c78dbe4ba248d4661b02fab082993f6f44080946c25b92c7c2b89d19e9d6a36f6eecd3411ab12a9ed537c24d04d5b39f3807db35dcde4368f0ef93e3180085295fe7bb76801ef8b9de2de5e14fc10b6b