food-express-deurne.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fc:08:ee:82:a9:a7:e7:7a:59:c4:25:15:a5:62:f7:98:36 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=food-express-deurne.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:08:ee:82:a9:a7:e7:7a:59:c4:25:15:a5:62:f7:98:36
Serial Number (int): 434212172431890861771141748429275337824310
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:b0:9e:73:b1:67:01:4f:b8:92:92:a0:af:0f:f7:c3:9e:2a:99:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:ca:ff:cc:94:e7:50:29:bc:37:0b:f2:ee:0a:c7:d8:95:6a:38:c6
Fingerprint (sha256): 93:9a:7e:29:e6:4b:86:c4:f4:9e:50:aa:b7:94:78:ae:6e:d8:60:30:8c:5b:e1:9e:f7:15:72:6f:72:16:4a:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate food-express-deurne.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for food-express-deurne.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

food-express-deurne.nl

Other certificates including the domain name food-express-deurne.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for food-express-deurne.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434212172431890861771141748429275337824310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-10 22:26:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-11 22:26:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'food-express-deurne.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 617461481704526833851700482987753569929247969405153584677349090066729285576386508628402525830044262759871526852577624062109494260078696442098985765411783289200960568903528822975803939628366554339985113182084835206969406176816336226975337826433059442632391002716445306920627211191254830138874323086180297296257355551609172501015183823531156495216259580770745238395255378632261665973728721823700027036000221219659685765259146059347120098753992920509784762079087011505356209885553275894012927665376277340498179375846942131910008774213295351682185511209660180756143002649658474547534300641627636224512906651087842151792754911711821229404685314318704557505984394189925652660970368877930094158180454265018314586491042204260794750571696934376933460504303270514841189684440812636724550969736713415521447545580637954829175820137074150001412820514432253330427118104475580310307729300383111556094394649416412666553360317265123522950054550879941109138303449934620515106464461623281398406775572915498931547519166183552167892604677128694009110122829750102090221467768589255496930817535998380015823676781648902460287994438945123518038413238929139330757455206580528042037825630607660473314851167273861648355208449756851934809662706707483470338819583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6eb09e73b167014fb89292a0af0ff7c39e2a99dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food-express-deurne.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168d9bc3c450000040300483046022100b4ef3b04007b3aad347b0c22529a1a86666cdb1c0650d40e0985d2aa32a38edd0221009a99b5573529c6e8bb4928952f1ef3d8463359e7789f522d8d0758c8d0226b5200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168d9bc3c3a000004030046304402202a290775b582e38b5ce4bf3f4732f9d11e7352dde25bd89fcb8bc9c2f8580c6f02204fb4d2390af45246fcbb3f206e2c29c4f0d8e205f90544d30eebeb1c3cf4d160
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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