appserv01.schooldatabeheer.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:66:0e:d6:77:3c:2b:df:bd:e7:c2:38:53:8c:6f:65:5e:14 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=appserv01.schooldatabeheer.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:0e:d6:77:3c:2b:df:bd:e7:c2:38:53:8c:6f:65:5e:14
Serial Number (int): 296065381983059189416556258067387922079252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:f3:64:f0:5c:55:cb:1e:f0:8f:f2:a1:2f:81:b3:b7:4b:ea:52:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:45:b2:bc:7a:6e:1a:ac:1e:35:84:83:71:28:92:c6:f6:16:24:aa
Fingerprint (sha256): 97:65:93:ef:26:23:23:2b:c7:b0:98:1e:3b:65:2f:ff:ac:77:53:23:59:55:15:f7:44:b0:8a:31:81:97:f2:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate appserv01.schooldatabeheer.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appserv01.schooldatabeheer.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appserv01.schooldatabeheer.nl

Other certificates including the domain name schooldatabeheer.nl

(limited to 100 certificates)
acc.schooldatabeheer.nl
acc.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv02.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv02.schooldatabeheer.nl
acc.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv02.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv02.schooldatabeheer.nl
acc.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
acc.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
acc.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
acc.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv02.schooldatabeheer.nl
acc.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv02.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl
appserv01.schooldatabeheer.nl

Certificate

The complete raw certificate details for appserv01.schooldatabeheer.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44nRiAXGYQfpEsBpvXWt
rldxX5Bra2FnyQY5jQpHTz+4RZgCSRfMb5lDKEq3fhXywSSEYRVLnLPjSGN2uUln
BAxuSUkgmwlgpFRIHW+iIfYM16QLW8FunQtFITcC78Z59PGPJVfEvKuUxYDafmwj
YOeZesaRQPpIH/honm1dnhI1t0vdX4eZBI9rkRC/OsRI/Ut1HleTxywOt3d2urhE
yxVk14SWd1gbUWQVxzZUnNG0aepJFxSXBZHW3NIDiNhivUPJJw8CempfbvhTg6cd
9N/gUA9JZlVoAHavfhyOLkArb0pV35dUjrw/fPXJPe94LjDlEOjAzNBAAV29Qe7v
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296065381983059189416556258067387922079252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 03:45:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 03:45:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appserv01.schooldatabeheer.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28724056053600405625886331987140610208487402568734415067648244254206545840244672213268020562653022425556971099445827931398952054497487830356944827613838912075697860198197412363369075459968891917024930599300100855423885043812812205437391058194024451587301837501943840007919437322624614573691156176315820706764630115522558066074562043987373118216036251180050033480222521507826024807048380818304243106377495885293741437930916008740510900581381721044240327445181900155099171559924698914021985315740756320524119004729412956768875962292066948917243488049553758506387409052453632218230021908681330905277512647240538236317643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aff364f05c55cb1ef08ff2a12f81b3b74bea52e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appserv01.schooldatabeheer.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b938050da00000403004730450221009a65e1aafa1737f2ada3877ccaa55fad30b8e56c0bbe0fbf2f749544c51fa6010220470275690c72db4a05472a4a91be957d04672c48608a763995377a9d061d3ec4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b938050d5000004030047304502207770f77e668e2cf9497276b2420c77da992a8ae9c3a285f17f784a5d736d53de022100e7e5915ae49234283e162504c49a2e4acef0f871b16975d197695e5884f9bfc5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000f336d86cc171a389639f9b64fba5af08395a5ec7866b1d3e43c7ad026b045cd8c997fbd44499108938074cfa4b9763b112ec3a74bf85a807e20a8bcc9e4206dc3dcc4e95a88d7b67ce35430f5c8cc2fc3e03ea1d938619b24f3f066f51786a4935ff6da5250d2ee9d59dbb3a9420e2c837a9ff705f95e26cf8d46486149e5e6aad712861b67f24680d0d3272458d4f90254b80c2bfbc5f9c407f3d80a2e039661ab3828161700a6718d287113300ff04b81082d10144bc86e3d0bb4e367eedf7a882d398380665636081b6bd8994989b14f8a55030bd69ed1a8fd797361d7c3ef3f4c3660b8b4198fce11d16e53d8d3dcf0b2ed030e75091cc8439d4e2f1f6