www.wijchen.nl

- Gemeente Wijchen (2000000222) -

Issued by DigiNotar Services 1024 CA

About this certificate

This digital certificate with serial number b4:7c:a4:c9:f2:be:33:4a:7f:54:ed:c9:e7:7d:c8:6a was issued on by DigiNotar.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage contains an inefficient encoding wherein the number of 'unused bits' is declared to be 7, but it should be 12. Raw Bytes: [3 3 7 176 0], Raw Binary: [00000011 00000011 00000111 10110000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself defines that all trailing 0 bits be counted as being "unused". (Where ITU-T Rec. X.680 | ISO/IEC 8824-1, 21.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)
  • KeyUsage contains superfluous trailing 00 byte. Bytes: [3 3 7 176 0], Binary: [00000011 00000011 00000111 10110000 00000000] RFC 5280 Section 4.2.1.3 describes the value of a KeyUsage to be a DER encoded BitString, which itself must not have unnecessary trailing 00 bytes. (1.2.2 Where Rec. ITU-T X.680 | ISO/IEC 8824-1, 22.7, applies, the bitstring shall have all trailing 0 bits removed before it is encoded.)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Gemeente Wijchen (2000000222)

Company registration number: RP070001001992161
Organization: Gemeente Wijchen (2000000222)
Organization unit: Facilitaire Zaken
Locality: Wijchen Kasteellaan 24 (0000)
Country: NL

DigiNotar

Organization: DigiNotar
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b4:7c:a4:c9:f2:be:33:4a:7f:54:ed:c9:e7:7d:c8:6a
Serial Number (int): 239908226366904150487121629820122679402
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: fe:dc:94:49:0c:6f:ef:5c:7f:c6:f1:12:99:4f:16:49:ad:fb:82:65

Fingerprint (sha1): 9c:1a:4f:45:d5:b0:7f:e0:9a:87:fe:fe:a3:ec:b9:5f:95:1b:e5:f4
Fingerprint (sha256): 93:a0:1e:be:e6:16:40:6b:8a:d6:cc:8c:c8:5e:18:01:f8:f3:78:96:c8:02:76:8f:bb:d3:97:84:f6:3b:b7:3d


Revocation information


Check the revocation status for certificate www.wijchen.nl

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wijchen.nl

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

5 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name wijchen.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.wijchen.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDd2vJww5nsAzLMX15d20a4ArJK
KtraMMFlPb87sIsj1k0/YisLGv17jGxIC4wNPfDXrnEf8O9MrJp1kpmPtSzTph+T
4ve5o2/TB2yRuiuh5pv4Rsn0cx46awjmyK1wjqX425uuDHMPqpF82cXxNlgThEDY
7NATM7+gapJIlZy8rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 239908226366904150487121629820122679402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiNotar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiNotar Services 1024 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-03-31 10:45:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-30 10:45:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gemeente Wijchen (2000000222)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wijchen Kasteellaan 24  (0000)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Facilitaire Zaken'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RP070001001992161'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wijchen.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 155792062952194581331502321064959392569046006883217846289503205541945154555292571141782419132431580141045150983200080583673338733457625539705664469412224357499103951978958728887293310496128865678528792934112917293412446477562235651571083536828497795688117946532632115062097389709767159136482374890385733106861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fedc94490c6fef5c7fc6f112994f1649adfb8265
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.528.1.1001.1.1.1.10.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.diginotar.nl/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [67 111 110 100 105 116 105 111 110 115 44 32 97 115 32 109 101 110 116 105 111 110 101 100 32 111 110 32 111 117 114 32 119 101 98 115 105 116 101 32 40 119 119 119 46 100 105 103 105 110 111 116 97 114 46 110 108 41 44 32 97 114 101 32 97 112 112 108 105 99 97 98 108 101 32 116 111 32 97 108 108 32 111 117 114 32 112 114 111 100 117 99 116 115 32 97 110 100 32 115 101 114 118 105 99 101 115 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (9 bits)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:16|true]  

 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		002b493c10f9a7d9440190ec2ac72f10d1ba450e933da50df84b2a44d3060b7570d2535188cf33a0825016706ce21baf371c1a4b6e4ddc43126b9c885543bd7574717e618415bbb5e10e9cb6f7279bd4033ee225961b24cf06218a33d5e9c4699b8cd5c6dd636134f19002585a9f835d7cd42ff84a08d8b2666b7a36debf79be6d