actic.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a2:bb:5b:5b:32:e0:13:08:1b:b8:81:a8:be:fb:41:54:b6 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=actic.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a2:bb:5b:5b:32:e0:13:08:1b:b8:81:a8:be:fb:41:54:b6Serial Number (int): 316711641220428706666581661585269061670070
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b3:a8:60:87:c3:8b:0c:6d:63:aa:91:63:cd:54:b9:c8:83:6a:42:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6e:80:ba:3b:c7:d9:a6:32:57:3d:a9:d2:2c:e7:84:d1:db:9c:07:b4
Fingerprint (sha256): 91:22:93:d7:92:2c:22:8d:94:4a:4b:67:3a:9c:34:76:e4:36:32:44:40:9a:4a:8e:45:9e:35:cc:3b:1e:76:14
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate actic.nl
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for actic.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
actic.nl
mail.actic.nl
smtp.actic.nl
www.actic.nl
mail.actic.nl
smtp.actic.nl
www.actic.nl
Other certificates including the domain name actic.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for actic.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgISA6K7W1sy4BMIG7iBqL77QVS2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDkwMDA0NTRaFw0x OTAzMDkwMDA0NTRaMBMxETAPBgNVBAMTCGFjdGljLm5sMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAqEGdPVTiZ+PWYf3L6qkukb2BKo58Cn44h71qgKUD Vyg8F28QlMUxOfnB7+juzg2GdTD5y4p8xVhJign3d58sxtJkodNKVCn1S1R4XiVd PXrUFAkFbL6Uv5hkU1BIpqV+NYLoTHRBYmUdbpPInI8XBmTDCk/9U85nUTS7hwjj gY0c9xTA65vEWM3P7NZDQARafK4RzgVmrjcAMx8jagtwsslnRdv09cMUfcEalwlk s75ACXFhBd5fL6GUh+ifVsWgf/IMbfirS4L5hmCyr+coBR+D0N2EjF8DvjQVnQMy E7Sl8M6gali1iAhWftST/yQJGJV088XziMSxiLhOOQlP/25L1CRvfOmiVmDvxSN0 M7jyFsLSOkA2mKEdNy4n5U9ksGc17oGV1pNDTxsLkvUow7KLc34zZCHzF0uG28eS qNElDQPDu+TI8S8jm65KxE6Vd8YuKjzp579g/QlM4EIZOFPVF66jqvSgGjo3rz1j kAvGo1FGDae0o8xIoLgd53mqbMv5njlyfa57szWPCpbUWMAEbdy64bAy9XU/VuNG XCb3k0Zsh3rnZ4gGwgTQjLitD5tL2VTjLvR6QKYo4+VQop9tCC01qzGFqTZE8vz5 WjbRY7TXezDm2mmGVwP2ZC/BQPRlqtIbNF0wZJQjEWE2tW7thtCMQ1/7LA/MhIdx +tMCAwEAAaOCAokwggKFMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUs6hgh8OLDG1j qpFjzVS5yINqQrgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzA/BgNVHREEODA2gghhY3RpYy5ubIINbWFpbC5hY3RpYy5u bIINc210cC5hY3RpYy5ubIIMd3d3LmFjdGljLm5sMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAdH7agzGtMxCR IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFnkH7lsAAABAMASDBGAiEAgQKKJ7zO DRhfq2oEHzr0xdnFi+16jN9+6U3/OlDjOBMCIQDKL7m3pBfd4gFI6qQ8L7vG6OcR uiP3JaqmzuU971pX2wB1AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iN AAABZ5B+5BIAAAQDAEYwRAIgGPSkjwnNEIjc2FC94jYAIQ7CnPaZUemARrMiQ5Bt eGMCIGzXCe+pY1OIy2OtobVYZPAXTUX0SMZdCeZ6sKGTY9NcMA0GCSqGSIb3DQEB CwUAA4IBAQBR1pUp0Zm6rWJjkPMhWZ07zD//Y+yYVoNzTaAfd4NW1e7BMZUKjNTa doFcF9YX9nqesdT30hh/j4epUjUXvkutflhjZSQxSp+jV0jJR0WVWPj9gl9BYMa6 MtPNBzgeamnMPUzRUWnfm/zEi52V1ZCpmrdvpi8jYbFycOP5b/6GU6zQ7mGR6Q1g jYN2TO6wtjK4Wueh7zC3fNIM/BUE2CswQSk51KgfURtZViakN6sCbWRk6YrMoZNg bRgHCfvhOnXuVR+bgD7reXF8Zia9egp708WsQhjoDnElqanY18StYQBPm2KRQWyP nceDoZqNOF7/ctb/T0CnyHSmApRN3xdF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqEGdPVTiZ+PWYf3L6qku kb2BKo58Cn44h71qgKUDVyg8F28QlMUxOfnB7+juzg2GdTD5y4p8xVhJign3d58s xtJkodNKVCn1S1R4XiVdPXrUFAkFbL6Uv5hkU1BIpqV+NYLoTHRBYmUdbpPInI8X BmTDCk/9U85nUTS7hwjjgY0c9xTA65vEWM3P7NZDQARafK4RzgVmrjcAMx8jagtw sslnRdv09cMUfcEalwlks75ACXFhBd5fL6GUh+ifVsWgf/IMbfirS4L5hmCyr+co BR+D0N2EjF8DvjQVnQMyE7Sl8M6gali1iAhWftST/yQJGJV088XziMSxiLhOOQlP /25L1CRvfOmiVmDvxSN0M7jyFsLSOkA2mKEdNy4n5U9ksGc17oGV1pNDTxsLkvUo w7KLc34zZCHzF0uG28eSqNElDQPDu+TI8S8jm65KxE6Vd8YuKjzp579g/QlM4EIZ OFPVF66jqvSgGjo3rz1jkAvGo1FGDae0o8xIoLgd53mqbMv5njlyfa57szWPCpbU WMAEbdy64bAy9XU/VuNGXCb3k0Zsh3rnZ4gGwgTQjLitD5tL2VTjLvR6QKYo4+VQ op9tCC01qzGFqTZE8vz5WjbRY7TXezDm2mmGVwP2ZC/BQPRlqtIbNF0wZJQjEWE2 tW7thtCMQ1/7LA/MhIdx+tMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316711641220428706666581661585269061670070 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 00:04:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 00:04:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'actic.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686425838785006336627976560191607349302762409070651333986763750135856321802115376748897727112381507253461109904187994907725846505267004662013717039869915008588907952731334790359012811172731847468664072788988938994209778903909250480291896579492532786510869881152961459730654881160522595753986428274008791725126895065445871187756108035897911916455683568561405947776116533996308297143166670184809251071054809165388096502603936415052324291336471116223266771842014770733392756998906605329420444638079690573372454612877047183772629634562308345814119929189484004430820427415150112357360531392479790919281276376548578583706663167268800886803051627308819989812627146095578114732114708367307577488945007721242912602194126103500395926238028824249083484882351758792728264433603653573942661697208527655714769623418729469266722246860026963145486929109670927558645038341726810337064526283686506648339340778770776250725665344018367381671391173205549923870335362635298833705290265492195021698268361553427029325799337630364602723609599469057455657084114270842195397838200490739286316630835835058302002097912530244244404749452257128724327409325455760142374510594121928186877175339658751806753786497915434451109423444588183443379280031184472183363730131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b3a86087c38b0c6d63aa9163cd54b9c8836a42b8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actic.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.actic.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.actic.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actic.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167907ee5b0000004030048304602210081028a27bcce0d185fab6a041f3af4c5d9c58bed7a8cdf7ee94dff3a50e33813022100ca2fb9b7a417dde20148eaa43c2fbbc6e8e711ba23f725aaa6cee53def5a57db00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167907ee4120000040300463044022018f4a48f09cd1088dcd850bde23600210ec29cf69951e98046b32243906d786302206cd709efa9635388cb63ada1b55864f0174d45f448c65d09e67ab0a19363d35c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0051d69529d199baad626390f321599d3bcc3fff63ec985683734da01f778356d5eec131950a8cd4da76815c17d617f67a9eb1d4f7d2187f8f87a9523517be4bad7e58636524314a9fa35748c947459558f8fd825f4160c6ba32d3cd07381e6a69cc3d4cd15169df9bfcc48b9d95d590a99ab76fa62f2361b17270e3f96ffe8653acd0ee6191e90d608d83764ceeb0b632b85ae7a1ef30b77cd20cfc1504d82b30412939d4a81f511b595626a437ab026d6464e98acca193606d180709fbe13a75ee551f9b803eeb79717c6626bd7a0a7bd3c5ac4218e80e7125a9a9d8d7c4ad61004f9b6291416c8f9dc783a19a8d385eff72d6ff4f40a7c874a602944ddf1745