teddyranch.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:7c:b0:86:87:d8:53:08:e6:06:bd:cf:91:65:e5:ba:f3 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=teddyranch.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:7c:b0:86:87:d8:53:08:e6:06:bd:cf:91:65:e5:ba:f3
Serial Number (int): 265585987042662071173071016945202640567027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:65:ee:11:13:fa:f6:cb:77:2b:aa:19:f1:08:60:cd:73:cf:ec:94
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:81:9a:e2:ef:dc:f2:6b:1a:c4:53:a2:09:cf:74:7f:6a:4d:14:a0
Fingerprint (sha256): 7f:d9:01:1e:cf:b9:f1:cb:23:5a:c6:8d:27:e1:00:4d:a0:f5:68:64:af:11:f0:aa:54:e9:cc:e3:82:8d:63:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate teddyranch.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for teddyranch.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

teddyranch.nl
www.teddyranch.nl

Other certificates including the domain name teddyranch.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for teddyranch.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265585987042662071173071016945202640567027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 20:58:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 20:58:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'teddyranch.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874706957395467493809718687751923700568351148355988686288699450122867343530540125813587151949016479503966456238096674581796804917711753806333527407733040613941911383572700633586388608859024678654532280287790216941537274118646143725860131830211948065750449315689352025221870053034912344373212516022920038046650395073690785402461593837478227513010270311812486241396854196480050906852251151579019085355960441550615404057709862428504837538687289961212159652249560972095426744790928762106792636294521785571552143406950589961576692509170296630089982717309928319918865184777445614824588974712019726798473241134698590029649805723238401966445080589079196735671069281467095786845887667636893328233848806073833102503802948993180686075938803051533525107305028876897928893768405720910020780493195504685993245774270313393410837197927134326287777625301121419672967714210705411075748445714091978789194749619992551112963346506182439426984804023161180378903245270461267016895416147496055601579978365677892161838888651242411966075414546745725140096331386483890043286273955159888134849383291692944133643071713403175781944809404683366665710610643436224288159234779751789818979300101249875836440516820470387202481183230555174590491539079132953332949138281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a65ee1113faf6cb772baa19f10860cd73cfec94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teddyranch.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teddyranch.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eecabe2b700000403004630440220125fb0bcd043becfedb2fd6c59614859bd6fd90b05f67f185144f39055f57462022020e1a4e433e0835a43fad67adf70917fcad7d01d280016e9b41e0547bd4536e9007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eecabe2c2000004030046304402203d5f2c516727faf1bba7c62b242fba8657a23d1104b688a90884f502a331edbd022010fb5b1f4aa2546225685e75c56947bf07c3303fde59dd6efe1f095e32219def
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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