ducoonline.nl

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:2e:ff:dd:e5:3d:fa:f0:bf:34:0f:cc:54:d9:40:19:8a:34 was issued on by Let's Encrypt .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

ducoonline.nl

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:2e:ff:dd:e5:3d:fa:f0:bf:34:0f:cc:54:d9:40:19:8a:34
Serial Number (int): 103105380096236685157622570237797106027060
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 14:10:41:eb:34:92:fd:dd:59:12:98:0a:f6:cc:eb:1d:79:69:52:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:73:a3:2a:78:80:68:bd:66:eb:14:53:01:76:e8:e8:b6:75:f7:74
Fingerprint (sha256): c9:2f:b3:a1:f6:c1:f0:c1:53:9f:de:73:57:08:87:08:19:b5:31:46:a2:82:e9:a0:e3:09:fe:95:5a:16:f4:7a

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on ducoonline.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

ducoonline.nl
www.ducoonline.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgISAS7/3eU9+vC/NA/MVNlAGYo0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMjkxMjUxMDBaFw0x NjAzMjgxMjUxMDBaMBgxFjAUBgNVBAMTDWR1Y29vbmxpbmUubmwwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDphP6veqiAQnZL6WOBpKgtXtWsuNHaFsHr BYvQg1jbkBcu/l4SC1nuIaoUHB3spXq+x/0m3kzFxmegZztkSrxD6uBkIAhfDPAD rjAVQproFmS+1KXgKnnPs2fRWXr42nWbw+6F6USXHvPzOUFZpT4lIB0Vg8xwJWEY AvvJ5lawh1TXs9veCaGhRnI6PV/XcBepI+MZIkxcmGWObpcRHxcZYm+fZOwTPxKe M1OhH++R256lBYrpqbINSh7N+F2kt+iojrCiA9sQeQQVrT69tXN/MFwgaicIqag1 ytzwRbbhC0B+z4NqhbC+s1mKQc7/EwGVuLNfPmiEM83X+LhNCYwH3OTs+gS6qZ2Q fR7brwA1Bgy1fhKQ14K3FONY1aS+c1WC8vZmM1ch3Y13mB72KHV/PKFYSfUbjZpZ 35hjaD3347tk39UX1uZkMvn2Ru8XXNzjpfpwpKWjrkI6G7R2loEspro8jGTNbjX6 EIEyEVHhWANmzLnogpx3Yb4FLbWWgzca50+Tk1VMetgAydr1n8vdN64tlBaNkb7Z QtS48IsNUCb8pqQnK48CTZoK6BvViFVswHQ2cj2iosaaok+mc39TVmwi+0KEcan6 ZVmUrdQ1RGzoGgjU2fR0c+tAnwuXy+SEgLLQkDQZ0ZB+1hAaemorFjwJED24v9K9 yar3THFglwIDAQABo4ICITCCAh0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQUEEHr NJL93VkSmAr2zOsdeWlSjTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14 MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDEubGV0c2VuY3J5cHQub3JnLzArBgNVHREEJDAigg1kdWNvb25saW5lLm5sghF3 d3cuZHVjb29ubGluZS5ubDCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYB BAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkg YmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFj Y29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0 dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUA A4IBAQCM//FBtuK0pQsPeK8QzyY3ebPQNy3xaVsT25CJ103aeovet97N+mAoulnN n3JTWJvs75s6U70Un1d1Vns9oQm1Fxrcr4rCM1GtNqOE0m1hLbYhsN4qRxyg5u02 EfKEnEVM5YixxCaRpa0bp29faarVGSNM40Lq9tXVuoVUPvgWwaBnIF4YUGWOSltT GlQg+kqOf5fTRHkFLeuboOleLRRfBiv3pOL0lPXJXKeaKw8QgtDznl3gl0NQJG2g 9BYljl+Egi4f0V4tSe4+R7lMrCvqfsrJ1l5G1oO2NmMQpuLSbH3jBjlWQEjVDQ8D Sn1BkjMvd/Bw3vJ4/wMMmijLShHM -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6YT+r3qogEJ2S+ljgaSo LV7VrLjR2hbB6wWL0INY25AXLv5eEgtZ7iGqFBwd7KV6vsf9Jt5MxcZnoGc7ZEq8 Q+rgZCAIXwzwA64wFUKa6BZkvtSl4Cp5z7Nn0Vl6+Np1m8PuhelElx7z8zlBWaU+ JSAdFYPMcCVhGAL7yeZWsIdU17Pb3gmhoUZyOj1f13AXqSPjGSJMXJhljm6XER8X GWJvn2TsEz8SnjNToR/vkduepQWK6amyDUoezfhdpLfoqI6wogPbEHkEFa0+vbVz fzBcIGonCKmoNcrc8EW24QtAfs+DaoWwvrNZikHO/xMBlbizXz5ohDPN1/i4TQmM B9zk7PoEuqmdkH0e268ANQYMtX4SkNeCtxTjWNWkvnNVgvL2ZjNXId2Nd5ge9ih1 fzyhWEn1G42aWd+YY2g99+O7ZN/VF9bmZDL59kbvF1zc46X6cKSlo65COhu0dpaB LKa6PIxkzW41+hCBMhFR4VgDZsy56IKcd2G+BS21loM3GudPk5NVTHrYAMna9Z/L 3TeuLZQWjZG+2ULUuPCLDVAm/KakJyuPAk2aCugb1YhVbMB0NnI9oqLGmqJPpnN/ U1ZsIvtChHGp+mVZlK3UNURs6BoI1Nn0dHPrQJ8Ll8vkhICy0JA0GdGQftYQGnpq KxY8CRA9uL/Svcmq90xxYJcCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 103105380096236685157622570237797106027060 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-29 12:51:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-28 12:51:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ducoonline.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 952676488600559188981601838693808332820928964675396536813627082196141427596011084465163628150727908296931995026154285166330513016167360179438236046133688370872526889474555407030303955288387095008268275546534505232373933505942167687119989105477661612128037430542849848179773014577166793249451294005941846043918236914814579034565729452378156162436038964095974575741521428474143630760784343640367871385259315739565696764843778564883304678010485300525727091752230150991648276343582946312412378943832957949785763481959635101321755104082167643801477646357090146428083933858183536066280657072995821961012003157292438948301076242792796272018351397343463937623970309415372482543386632486603207170874279178948746708499748710357412989856440845940855825235257688736008051245439218804065883653858014119214135271223401333314601770025737882311396167642146743502820173337733264622325998078355454985645941689068061201339099573257116943040612343439725149854647441783172500333683346793044922441738550630867952123484590303164758181008003239050684506469549283143451159439896905027219281520668827889862962591386931655427269825140301254852777415170897140440309801143671014379385572171752804352902551402722400345192357335401989432852467273274232176209125527 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 141041eb3492fddd5912980af6cceb1d7969528d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducoonline.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducoonline.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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