DV SSL/TLS Certificate for roofprotection.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the roofprotection.nl DV SSL/TLS Certificate

This certificate with serial number 05:0a:5e:13:0b:c5:8c:64:07:ae:c1:05:0a:a8:03:6a:f8:d5 for roofprotection.nl was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for roofprotection.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:0a:5e:13:0b:c5:8c:64:07:ae:c1:05:0a:a8:03:6a:f8:d5
Serial Number (int): 439089299652012614607246749855618372925653
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: f7:44:8a:5f:ae:53:8c:8d:a6:04:43:85:a3:f0:39:bb:e5:c3:76:a1
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 0e:c2:2f:98:25:15:03:a6:09:50:f6:17:88:8a:70:f7:12:eb:b5:aa
Fingerprint (SHA-256): e8:81:34:a0:bd:2b:f5:1d:59:27:a8:a1:2f:07:d6:b2:7d:a8:c3:5e:57:d3:69:8b:d7:7a:1a:a7:2a:83:11:14

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/86.crl

Check the revocation status for certificate roofprotection.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for roofprotection.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for roofprotection.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISBQpeEwvFjGQHrsEFCqgDavjVMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjUwNTI0MjM1MzA5WhcNMjUwODIyMjM1MzA4WjAcMRowGAYDVQQD
ExFyb29mcHJvdGVjdGlvbi5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMaWHexVkuE8kCwODtDklUWc/7icb9MSbB0rGgI2TKZTZfdK8x9Csso6kT4E
u0kpS+d21sJyXPCk0Lj2zkRK1sAH7shcjZ0srOMHpdH+eNjzdvw3kwN+B4qPweZe
fSfFYBo0qzhHLyeIKOjoLRx9wWNNzGELJbiIxeKJgXuAvJGRVgkbR8kvaN47jcmm
gLtlKYMYRw+sa9+vVTPeIhC5lM689NYvzGhaXJQeb3ainbonnHmoQyqFVaPvykxI
9aoQ/QiC28Xi4PxCpTf4oC/6mluW3jSR8DK+xybpv8grFirPXgv57ra9mgdsSUDG
2Aq1HjVbbkqjzIJMHahN5goFI1kCAwEAAaOCAjYwggIyMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQU90SKX65TjI2mBEOFo/A5u+XDdqEwHwYDVR0jBBgwFoAUxc9GpOr0
w8B6bJXELbBeki8m47kwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRw
Oi8vcjExLmkubGVuY3Iub3JnLzAxBgNVHREEKjAoghMqLnJvb2Zwcm90ZWN0aW9u
Lm5sghFyb29mcHJvdGVjdGlvbi5ubDATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNV
HR8EJzAlMCOgIaAfhh1odHRwOi8vcjExLmMubGVuY3Iub3JnLzg2LmNybDCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB2AO08S9boBsKkogBX28sk4jgB31Ev7cSGxXAP
IN23Pj/gAAABlwTsiVQAAAQDAEcwRQIgCkX52ro7RRLL0LcSyEMn88GK2IYWdFp1
UrTU5f6i4iQCIQCdLRhYNITuBkkium5G7klVQziM5Yd4p5pIc4dS+n0spgB2AN3c
yjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2Ciysu8gqAAABlwTsiaEAAAQDAEcwRQIh
AKG60vfilvxP5qLfqNSMCh9FoYh/TXNI/H2PN9Cygxm/AiAhDQeZi1xS2gb6mnNk
5CCR4lvCDQ3MWsTgyvx81nQ/UDANBgkqhkiG9w0BAQsFAAOCAQEAls+LDwQfuoyE
HdXjzS62P0F4cKlon2zfr70WOL0t9lXD4NK9ozLJDtuEeuavXCgPsN1/URfLDgCy
lm0M601yr+uPVslHDvOxm2EF7TBcU3VCUTKXGfukqs0ddRuo/teznmUSQ9ys/nHL
7q1CG6asOFv+DrjjFZl7ozQLti5ywsxcPdPYAlWij8B7Q9fwn/NJoflW/tpEVMQW
nhH91eZ82KeFPYU2Hz2vOnHI/eRTMwHclYL8YyU7WWd9gz6tq5MBLK2nwvhVdHaI
fkpSHqpFLPxfg5OtOkE5SgMn8uRYPr1oDLSJcE2+VvWspJECHwk/R1TXyX0xyZkb
FyFZOb6cqw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpYd7FWS4TyQLA4O0OSV
RZz/uJxv0xJsHSsaAjZMplNl90rzH0KyyjqRPgS7SSlL53bWwnJc8KTQuPbORErW
wAfuyFyNnSys4wel0f542PN2/DeTA34Hio/B5l59J8VgGjSrOEcvJ4go6OgtHH3B
Y03MYQsluIjF4omBe4C8kZFWCRtHyS9o3juNyaaAu2UpgxhHD6xr369VM94iELmU
zrz01i/MaFpclB5vdqKduieceahDKoVVo+/KTEj1qhD9CILbxeLg/EKlN/igL/qa
W5beNJHwMr7HJum/yCsWKs9eC/nutr2aB2xJQMbYCrUeNVtuSqPMgkwdqE3mCgUj
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 439089299652012614607246749855618372925653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-24 23:53:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-22 23:53:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roofprotection.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25069209779433079348280452432547049997495407461810718364406816028116460325984105973766682639914322358772750709105217047839349555868525982148393394512557376448293917463138236078578649407917413447799612111298813444791174441435358395220960409725934402954690137568517314532132766128243553119275188402319469309295448346704598495252490761980554129522236026200551299662332118091310613262861114600918444198699744170535970053128602034107796520253962244524077536008290907252009283251198581903491755970576374369176061661656071887789288445058160881027126699087572015634028869690255520538536100288609034808568260403228902311666521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7448a5fae538c8da6044385a3f039bbe5c376a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roofprotection.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofprotection.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/86.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019704ec8954000004030047304502200a45f9daba3b4512cbd0b712c84327f3c18ad88616745a7552b4d4e5fea2e2240221009d2d18583484ee064922ba6e46ee495543388ce58778a79a48738752fa7d2ca6007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019704ec89a10000040300473045022100a1bad2f7e296fc4fe6a2dfa8d48c0a1f45a1887f4d7348fc7d8f37d0b28319bf0220210d07998b5c52da06fa9a7364e42091e25bc20d0dcc5ac4e0cafc7cd6743f50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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