universal.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:ea:d8:a9:fc:41:29:0b:8c:9a:1e:ef:16:8d:c0:7b:c0:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=universal.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:d8:a9:fc:41:29:0b:8c:9a:1e:ef:16:8d:c0:7b:c0:2c
Serial Number (int): 341250927516368728135926955526798507229228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:cd:0a:69:6e:39:bf:2f:64:f5:00:35:cb:9b:3c:73:64:bf:ca:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:04:cb:1e:71:d0:0c:1c:3d:d1:21:ac:4c:87:c5:92:0a:bb:b6:b9
Fingerprint (sha256): 95:d3:55:74:49:ba:c1:ea:e2:86:5c:c0:d3:35:4f:17:fc:2f:15:7c:78:da:7f:7f:b6:3b:42:19:8d:1f:62:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate universal.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for universal.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

universal.nl

Other certificates including the domain name universal.nl

(limited to 100 certificates)
access.enterlync.net
alerts.library.nyu.edu
control.universal.nl
access.enterlync.net
alerts.library.nyu.edu
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
access.enterlync.net
alerts.library.nyu.edu
access.enterlync.net
alerts.library.nyu.edu
alerts.library.nyu.edu
access.enterlync.net
universal.nl
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
access.enterlync.net
universal.nl
alerts.library.nyu.edu
access.enterlync.net
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
control.universal.nl
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
alerts.library.nyu.edu
access.enterlync.net
sip.universal.nl
access.enterlync.net
alerts.library.nyu.edu
alerts.library.nyu.edu
alerts.library.nyu.edu
universal.nl
access.enterlync.net
access.enterlync.net
access.enterlync.net
status.universal.nl
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
alerts.library.nyu.edu
alerts.library.nyu.edu
alerts.library.nyu.edu
access.enterlync.net
alerts.library.nyu.edu
universal.nl
status.universal.nl
alerts.library.nyu.edu
access.enterlync.net
access.enterlync.net
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
alerts.library.nyu.edu
alerts.library.nyu.edu
portal.universal.nl
alerts.library.nyu.edu
access.enterlync.com
alerts.library.nyu.edu
alerts.library.nyu.edu
access.enterlync.net
status.universal.nl
access.enterlync.net
alerts.library.nyu.edu
alerts.library.nyu.edu
access.enterlync.com
alerts.library.nyu.edu
universal.nl
access.enterlync.net
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
access.enterlync.com
alerts.library.nyu.edu
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
access.enterlync.net
portal.universal.nl
portal.universal.nl
status.universal.nl
alerts.library.nyu.edu
alerts.library.nyu.edu
access.enterlync.net
access.enterlync.net
alerts.library.nyu.edu
alerts.library.nyu.edu
alerts.library.nyu.edu
access.enterlync.net
universal.nl
universal.nl
alerts.library.nyu.edu
access.enterlync.com
alerts.library.nyu.edu
access.enterlync.net
alerts.library.nyu.edu

Certificate

The complete raw certificate details for universal.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNc8ZailyNOmyNB9/rEH
OTU46GM1Ex+i2Ls+BMyMrdWXshqvVI0UTfoPMLqQZ4V/NlVRokBEo5rbwwabIHxk
NlpCg5K9kSgcOp7G+hrHrzRkUeF8Gr3LG//SHJ2GrZNefnrJ3/M8oRIfirbkXgto
bNiAshywRDeUzvI2Z7Bnm6sqOBR0bliFVsS/qeww2PTqUXcKH0nB2N/8n4gtW+5M
vFCCuaepTGy/9Zn/WJxEYT53041dK1h178nZkxdaj0ltXNM2OEPtE43miGc5RfpO
9zh7vYFGsOAq9nIIlSrKLucpezcHq7m9NrXQ1UYNnZ46+G7Y/Z6DLhcKn3OOhAKr
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341250927516368728135926955526798507229228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 21:21:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 21:21:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'universal.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24343891344459855348363203457076585185501399925522463363474419232652918926927584921099371835734270320548102269387414370183512146813191355136065817623724938209248240564481333100219441386363079045679944941812998743798482716269921781093350554024895034662099885658219555118454152231140817334363068949714351257923239861057106520697833947857685916415491334953980859512456984662034111991245861327959800960616067733393369281755340118798937365805537434922733704691787164998356488429222004539504341084506577161917958949171151090236567364641802497689396035315625596539824890338727069132389031529339610368919439184820359565323097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54cd0a696e39bf2f64f50035cb9b3c7364bfca75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universal.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018989fe7aad000004030047304502200871917963f079da0273fd80df6f81ecf53b03de1835f37095bbde9bfb8cb540022100a8136d6408bf40155837349d8e0c327b2d6c317ea3c4ed9ec5c411656ade142e0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018989fe7ac40000040300473045022100cb51c7f9ef4d2d2b3614d18e97e675d22f30e8c32f4d6b17ef56ff7606ecb8bb0220678c05006053d23344d187e0d90373554d7d7199748ba98c7ad2c37414836995
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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