mijndossiervoorjou.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:94:27:6d:1b:6e:11:4c:f1:8a:fe:90:e5:27:5a:6f:74:84 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mijndossiervoorjou.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:27:6d:1b:6e:11:4c:f1:8a:fe:90:e5:27:5a:6f:74:84
Serial Number (int): 311751054508118335987053647333797596722308
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:c6:12:a3:d8:b2:04:f7:57:08:d3:c2:46:90:25:1f:fd:49:5a:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:7b:47:06:ef:26:c8:62:fb:85:99:e7:ca:c1:53:39:7e:e5:b6:8d
Fingerprint (sha256): 98:95:a9:6f:b7:38:f6:56:09:fd:3b:72:e6:1b:0f:91:ac:24:e7:b6:64:16:06:c6:8d:fe:f8:4a:db:24:51:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mijndossiervoorjou.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mijndossiervoorjou.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mijndossiervoorjou.nl
www.mijndossiervoorjou.nl

Other certificates including the domain name mijndossiervoorjou.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for mijndossiervoorjou.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4n5BCibfzuU/6lsniAn
g0jFtKezbdUAIVBDtnLGER1BV2mP1BI8egJHRhQcB9Pm8SzUdq0SIjAje1qRV/t3
P1HQKo+SJlTeNtARaNLUHElg3SEikh0jILxkSRnGJ6qzILhD7ZChgcMZ+Wxb3sA5
T2oZ+74X07lpOW2dJOqiaczCrTFRvd6W7szG1uymOWk4sjbDK9/cR+BCOQ24j50F
DC2gRabFr9PY5prSvWtcEwnP/3HYggsiS5HKOfjSfn4Uwvz5tofxD+J036WiKYe9
mMppoSZ6tGAHFCGO5e1EiO18p0GCedvKTVy821SiYMnJWQkr5XXCmwMZSSgd2LIv
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311751054508118335987053647333797596722308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 12:20:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 12:20:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mijndossiervoorjou.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22664693472780685988033593377233573346333211233919321925429350187542504470063507452471736172010304796019414851646153150165087613960900391094845429332475339743556588342517306069108092541180123463617450051262517353376599289113759271601087906212833911383805913683216154263123707115559663929345263375754407079793635395656473529402339745350581809494905592562520830800355056865172344329355729549421551746923508044367495423603110577332003449374133656928979904940562697285848165820035438298313974205218532963684307300489996991670957881589450201128406595278517270630636653153216740449363791331801016147783631400254144701935401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2c612a3d8b204f75708d3c24690251ffd495acf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijndossiervoorjou.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mijndossiervoorjou.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc18654420000040300473045022058902fba4906e2f2c655aa732521d2b04c1c27ecd12258410db234853979ddc6022100cfdc36f56dbdddeb609f2d62e3dc62e3c1a6139bbac3e8d6aa513242bb67966c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc186548c00000403004730450221008f378ecc18b6e9ef505d0d8262f6efdc025fe8479fab2116c122a747986ababf02205d5467bcf81e1db9444ae1a14bd1041efe0ac74e7729fc32529746bed730c5df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ab83073b916030c4104ecb9ba81b6429f6e649ea426ebe2b4179e547627b2f25d668d2356c97272f59766779596975713b2b81c798dc73ae9f9e9b8f35961d034f6c3e09b67c6efbef36542390303518fcc5f9c8eff9896037e3e47a25c510dba16386be256713f78083cff4a9bcb968b12bbbb1c3c676ab68e5bfec923d3d10a9e367afd28c811ede1c2cfad24f1bdd19c156784276951eee80f09ab6cab44cee47ba5837ec55f4d2b232572469f10c77a4af73d1085eea40cc5076b7d751816ab668e1c5554e192f8e286b936dec5f4cab9c54fb9949eb31692dc31dd8b8d1a67c1ed8cee2c1c9d6aef5a9092072dae1c901d4a63117c42c04d518b7a7e0e