regionijmegenwerkt.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6b:38:3b:74:77:af:fd:74:c8:a8:16:cc:e9:44:60:80:7b was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=regionijmegenwerkt.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:38:3b:74:77:af:fd:74:c8:a8:16:cc:e9:44:60:80:7b
Serial Number (int): 297821816531341896023403774158348086182011
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:c9:38:40:45:d6:17:b8:5b:b2:72:0d:fd:c1:06:ce:15:e2:16:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:58:b5:b8:20:e8:fa:83:de:28:6e:65:c0:80:72:51:a9:66:c9:a5
Fingerprint (sha256): 7f:8c:43:df:d0:9f:48:cb:e4:16:f7:62:28:1e:1a:67:bc:65:c4:52:50:c9:08:7b:b1:f7:88:6e:bd:bf:be:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate regionijmegenwerkt.nl

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for regionijmegenwerkt.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

achterhoekwerkt.nl
arnhem-werkt.nl
regionijmegenwerkt.nl
twentewerkt.nl
www.achterhoekwerkt.nl
www.arnhem-werkt.nl
www.regionijmegenwerkt.nl
www.twentewerkt.nl

Other certificates including the domain name regionijmegenwerkt.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for regionijmegenwerkt.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJkaTtC/S6gFJF+XdtQ5
D346yI8r2SW4fFmPCBvf/1ytpJzx8MlPMXJbkHnkT9aqfEWe3DaR1T7bGOuipoVw
rNBlg428eAW/gNp12MkO+FD68j2o1MCpY63gy9xhyZYR7yQCogontF0g80BODMyf
FNqbDf3ilXatvuge/xP8TSCT4Q210awp+rsxTvxCb9iKZyblKvfHHxTKkq4JQJry
MwezcfiK8eN9U4Bt04lVJBewPRmjP/LhySo4HbLXkDLiwKDiO0lefwui4IVZcFnO
wSeFNJ9uNejC7PjX1515Fy678GkpmBZPXUDnoLDgKBJ3SJ9edjRa/Scwzoc9yQKM
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297821816531341896023403774158348086182011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 23:03:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 23:03:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'regionijmegenwerkt.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19768673362030757116164457215938244414261563570692813525052520447650662097071484541010104901163829672279031838409546060947363904852056557472521923154141990122582630664695570870887506355670732698701465314586807091309456959291042050476196328769041931648348962324402692224230467187836035956666912433284742265314701785732881844722269336715434294392571257674786365823347266123603247716335265404143406801931070906231488174005600515870124955079120398874374403758306224635362459242562738070705462076323779011064024753132504062327947350423814060039379186113631250566987722045559927313115345621445630432800935721711013644635379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72c9384045d617b85bb2720dfdc106ce15e21642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achterhoekwerkt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnhem-werkt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regionijmegenwerkt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twentewerkt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achterhoekwerkt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arnhem-werkt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regionijmegenwerkt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twentewerkt.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c4fa3404c00000403004630440220165445c9d9cead606e087f8415f9a65c4409a7f348cf9fdc1d6b0b2301d01c79022034d439d9c28b98703a28352a3363d40b6c935a0a4f39cc86ccd5e141a770491a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c4fa34265000004030047304502202f1f42fd2ac0f47769cf165b9cb1bbbc81b8cc2b23f2bf7903cfe26d7d37097f022100ff19d74c458909021df40ac2d75dcf9b914171e24e18235cd8210f97e96123e4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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