menzis.lavg.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:2b:64:0e:d0:38:8e:95:2d:c8:49:cd:21:9b:40:77:fa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=menzis.lavg.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:2b:64:0e:d0:38:8e:95:2d:c8:49:cd:21:9b:40:77:fa
Serial Number (int): 346124843492549717994133582990162478004218
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:11:8a:64:8f:e8:6e:83:fe:22:49:4b:13:f4:8d:c6:38:dc:45:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:71:c4:7d:2e:33:21:29:e9:f1:73:03:28:3c:ea:18:bc:6d:1c:1e
Fingerprint (sha256): 97:33:56:3e:7d:46:88:8f:a6:50:53:3a:55:f4:2a:d8:0d:94:29:4b:7e:ea:0e:40:9d:3a:1b:bb:e0:bf:04:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate menzis.lavg.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for menzis.lavg.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

menzis.lavg.nl

Other certificates including the domain name lavg.nl

(limited to 100 certificates)
webmail.lavg.nl
lavg.nl
payportaal.nl
acg-incasso.nl
veilig.lavg.nl
login.nieuwegein.lavg.nl
portal.bosincasso.nl
alles.lavg.nl
lavg.nl
achmea.lavg.nl
lavg.nl
lavg.nl
betalen.lavg.nl
achmea.lavg.nl
payportaal.nl
acg-incasso.nl
achmea.lavg.nl
lavg.nl
alles.lavg.nl
menzis.lavg.nl
alles.lavg.nl
lavg.nl
veilig.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
betaal.lavg.nl
payportaal.nl
menzis.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
login.roosendaal.lavg.nl
acg-incasso.nl
achmea.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
cotg.lavg.nl
mijn.lavg.nl
lavg.nl
portal.bosincasso.nl
achmea.lavg.nl
menzis.lavg.nl
lavg.nl
cotg.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
alles.lavg.nl
lavg.nl
lavg.nl
lavg.nl
lavg.nl
alles.lavg.nl
betalen.lavg.nl
payportaal.nl
webmail.lavg.nl
alles.lavg.nl
alles.lavg.nl
support.bosincasso.nl
webmail.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
veilig.lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
mijn.lavg.nl
achmea.lavg.nl
betalen.lavg.nl
payportaal.nl
menzis.lavg.nl
betalen.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
achmea.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
betalen.lavg.nl

Certificate

The complete raw certificate details for menzis.lavg.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISA/krZA7QOI6VLchJzSGbQHf6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjIwNDQxMjdaFw0x
OTA3MjEwNDQxMjdaMBkxFzAVBgNVBAMTDm1lbnppcy5sYXZnLm5sMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvFVHHF8RtPvhw8kJXGkNyP0hyLbV/E8I
k832ZtxhcRfbB8dFPR7zVufbxzyxJPl7Y40vwt9M/8kigdPpIgLjtn/FNP+Xr87b
8BId+O67P2XVSwQ/2ezQg18gxzs7r3XvmVw+F6MOjd5lcywVLcrjRbPJAJL1yzjE
S30OS6f81n50OKobdYUx18CvZz5HzdpLa9+sg4vXfoExkFVnZr5TY2j4UZPF4bq+
QfJWSR62p2/Bnkv0jRdHx0xu+TWV1fbF6SlhkJlPxKgwnA84r6+FbvIEIbtAkGLt
TBYHrpxpP0pucM7WYPjPZVLJWhwTd5uTDxKCbQc2y0N1NZJkV1hie+05FAL+ZRty
6HflV5EKnVFJJm1OPj6Gn9mN2X0EGr0SUjQE6IgT3JjXHuVqbWhhE5xFeiJ26msi
4Ps0N6Uyo67vYoJeeHfZURLZ5f5YTfY4JAE284HXC48vXT2PynCbZnm80ETQaG6D
UEwH0WEj6o9q+ExPKii+7JpocCDYZkvecpSL1dTJFwwigKRMO+30HUk+C8g35gAH
Sfsrdj2Mz6o2DKw2pd70OaETIzpd18R5/2ulRCj8GGJAyrZfJDtXde3df/AM/zK/
20R3pou3VwPfNc38RbEFpz0sYtK/PDBqLhYG6vQTrnCZcY8j73A93JMIaxxdnbUa
lZf8FMoRHw0CAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUMRGK
ZI/oboP+IklLE/SNxjjcRZ4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5tZW56aXMubGF2Zy5ubDBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABakOQPh8A
AAQDAEcwRQIhAKyQyO0r7wu6j3lWz096XyuLlvcgSDwXu4gnSzV6x27fAiB1sqaz
c9/zjGoVIUrP92bjMvxF0SrZ3ljjTlKc8J59nQB2ACk8UZZUyDlluqpQ/FgH1Ldv
v1h6KXLcpMMM9OVFR/R4AAABakOQPQMAAAQDAEcwRQIgVatzfeU1wHbOecOn39i7
6I8LcF/GcDXbtyEC4ARI7ZkCIQC3cwPi3PFen3M5aN7Ek2HGZrtPHDJWJUF8kcVp
iKsHwTANBgkqhkiG9w0BAQsFAAOCAQEAIX0caZoykalgM9mql97bu/MSqI2OUZuS
6US+Ub4iBCEjBlJEEloXGVP67DN1bQGqpb11RolX3PmJuSpZ4MULvJnDFVd3ksE2
NR17vxAHjETt/AvyT3kJ8+fNKsDFdOJUBDNLL2j2h9k822wHQy0fAApx+4AVYYGf
+Nw7w28ZBuMOxWEW158sq8N8+Pcr20ujojU7NwG8FTOF0sAvgOsZpb3eeLUvFzpo
r1LSI67MgvdoB0LAwcKGZMOZ0QQs5tSthkus1ag9g86SstchyGYsCFoIPL6Xz5gR
yZOS2tbZ9ZThuNdY+7FQlE8o1cpbiSeKVujaXJXZRlKmn+8K5gcjUg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346124843492549717994133582990162478004218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 04:41:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 04:41:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'menzis.lavg.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768332080786595422192741667011849982409031445340661450461131403664844790849565341829343637920533259650985196589892511987607769484313398650109804372042847069151573704439225504703313034808296901601478275514256975070770191501520647733903212123094461555914243306079176160896224221073682181818809097165280488791905149024706770833715004568275940610596609863434236053949163503280603261648439635867881335929129168916794183941323945673162783728105080140648981094350402739735136800648704905681058037828635125386244851815736582175456133776359027320679531735586177626644097787021215871096884111300417395335650759454061097116136574994054275703480764256829099008508935614331068460093818375772343318880248705206693910976192991698070549187056453315360800771724055815301751692753430312851635500737183935733457727803425563698757647633195560434503515591239634385029577782812801508373557082449360156806868160886583470564646531186792884765422693830814580099477683315113486608106187602434493333830994530131437135739406235821187117786530142806713597318012995211492873343575305448130130762455473058027263169360921534725875840939354168713475906324088218161043833751007445580949336314168647992057620946431765767363991008325959855201566993585323668395552481037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31118a648fe86e83fe22494b13f48dc638dc459e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menzis.lavg.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a43903e1f0000040300473045022100ac90c8ed2bef0bba8f7956cf4f7a5f2b8b96f720483c17bb88274b357ac76edf022075b2a6b373dff38c6a15214acff766e332fc45d12ad9de58e34e529cf09e7d9d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a43903d030000040300473045022055ab737de535c076ce79c3a7dfd8bbe88f0b705fc67035dbb72102e00448ed99022100b77303e2dcf15e9f733968dec49361c666bb4f1c325625417c91c56988ab07c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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