forum.dined.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d3:e0:30:93:09:bb:1c:cc:74:2d:4a:c9:d9:bb:d4:aa:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=forum.dined.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d3:e0:30:93:09:bb:1c:cc:74:2d:4a:c9:d9:bb:d4:aa:1a
Serial Number (int): 420546722430949206916213582980391512615450
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:af:d7:da:47:d7:30:69:00:25:f6:97:17:d2:0f:39:73:38:0f:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:2b:b5:1b:f4:1e:df:53:26:47:eb:7d:92:49:12:51:bb:8f:96:f9
Fingerprint (sha256): 87:8f:4a:9d:86:48:f3:c6:bc:64:7c:3e:3d:53:7b:3f:b2:59:b7:4d:0a:5f:b4:4d:87:c0:89:61:b3:20:d3:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate forum.dined.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forum.dined.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forum.dined.nl

Other certificates including the domain name dined.nl

(limited to 100 certificates)
www.dined.nl
dined.io.tudelft.nl
dined3d.io.tudelft.nl
dined.io.tudelft.nl
dined.io.tudelft.nl
dined.io.tudelft.nl
dined.io.tudelft.nl
forum.dined.nl
www.dined.io.tudelft.nl
dined.io.tudelft.nl
www.dined.io.tudelft.nl

Certificate

The complete raw certificate details for forum.dined.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420546722430949206916213582980391512615450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 22:46:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 22:46:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forum.dined.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 607986576342809587039212853871255824680865169168812265410564418832213674140159150360012736325787687679768255209471741472443066795635318219214825729401728888593341246009928506999184007311408233079208750350373286987099998289631524128231610068098334315703475522095125657907957395545054415500922321823121030988866600336873831110330131468952722327560417166915065371956439917684723267729520583341317904645330915687032222322924719844301499267269059756244594246886390611210140937215133006038154890449182317436820760300900261379744712287540720088231818246613213736825455325721263748783878711284201326202526597342733130927556194208920979955013861012247398524983005097805154331775040631230499317411402988524519702464734242393436174515228836576724214681355502576939331392026943264035959978905801503440719816519925371479190039166553749881078081456525942957713393149333338682835590474878384288227346257614257441304349709174703550197358083141000660783599908009494271045841620165121931050872895791441356948321687518025684607664708103377639015875719172081494870900765867072601027064158611879460342561515211612590567756158719773491391348830052214644309603344525187349782909877247091381515954009883161412269894128945341696938526143635034585267006683021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1dafd7da47d730690025f69717d20f3973380f98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.dined.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001712dd72b870000040300473045022053bfc8c1c5b69fbb2d1b2761b3d0a5988099dd9b798f5a5a8de8f7516b8a5175022100e634ba5e1a7af6b2e437b86da7741970734e11b7bd1251c1d4330cac480718e1007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712dd72b7700000403004630440220705663edb83757efbfa2d7d5e6027fcc6d8180c2f4a928037afbd32c8b73180702202725fc09ab403ba469e059318157e748b066191e202e42282fd4e0af29e697fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00678317b8885bda302efbbaf19144d2508a36f50ba218b0ef93caea95ef2558daae01491bd628aa44bd9227dbe18dc2c99dac334c8a1600fcb70d964784e6fc1f1a98bd85ba41bd2269252d6a8947704ff9c9aa01c7db139943cc134239e14367a5fc2a6dcfcffaee904e40cbc479de42ac0df7234d853920322631131175a94a366cced77a57e54e6fec3679f3ea4994d6ad169d622c2c19cd52bccbb2ffd549c178c9108ee3a1768f45fc5710d14ca2e7ff3762c5f6cebeee6b125f933e4a9721182758cccbd59038c58186061b9b233cf02884958eb6a3326c78d76bc8fcbe62064fef9da7ab6e239663931ebd8583c02e0e39528c017bf872ef4d0cd86d0f