life-time.nl

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:33:9b:ee:ad:3b:7d:18:24:3e:c5:9b:e3:5b:c2:25:10:c4 was issued on by Let's Encrypt .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

life-time.nl

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:33:9b:ee:ad:3b:7d:18:24:3e:c5:9b:e3:5b:c2:25:10:c4
Serial Number (int): 104673956264297139364222733720114325426372
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: db:60:9f:a3:05:cb:1a:8d:21:2d:6e:b4:3f:7c:ca:42:9a:71:d1:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:d7:81:90:bc:02:f4:f0:ac:e6:4f:91:2d:8b:74:af:da:75:a4:c7
Fingerprint (sha256): 47:cf:05:7c:8a:0d:41:fa:84:43:f8:f9:e1:9e:1d:47:10:bf:ed:40:fb:77:21:88:90:6a:13:57:be:cd:28:4e

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on life-time.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

life-time.nl
www.life-time.nl

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISATOb7q07fRgkPsWb41vCJRDEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMjgxMjM2MDBaFw0x NjAzMjcxMjM2MDBaMBcxFTATBgNVBAMTDGxpZmUtdGltZS5ubDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKU3aOtxOeakPDclT8oYSeG9qPFKowjRF/dD Rr6144Ry/R69JTLmi6bekgFhEry0LeKa/XJunUNPjMbT8FbVxSllw+AznVeCthNu +gJ+VXfV3M+8ccd41lppvyY9G1qOtMAB0NbRaisMlF3uc6JIQxyl4co029jBLIOx h65WJswrpOtWInd8cNJIZLGTyaawWRp5yALal//nWgYeFx72tB5bhqHR7CjZq/I9 d8TQpDdiKfz3T4ALM7yTycooABR8qmj77FMbIdSvrzw0IPqsIxA0TyJJmKT6aBQi RgXRkvY0d6pOHBlHqpqRqqgZIQKR90oz5wbMPIT7gTGwardRZuZsv+Q7oDuG6lJ7 Jw39PikFBmPFutviX0NS9KyxjIwgjCM8S07ShtCCl80rRuePBT6YMpJVXBnYCUj2 w7X+LqF56Lroganxxg4okZxTQmSjXgyxnossEiCGR5bE/aTGzTtezvS1jbacU/Cr UnyU6yOmtKx8lGJ+G1kiQm+zkau80E5FY35K8CwxarUMQAUxcBnwL843vKb2UluK ldxejxlpHKojWoCpZH2fQvabGkeX0OWVa8ZTEwA9KZG9zN0P4p5Rrh/jmEN9y4+R s/DwUk8gXEUSw2YDxrIugrrk26L8VofO4YUe1240+cb8wPSd1oVf3/8h3K6MHpnj YCp3xiORAgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNtgn6MF yxqNIS1utD98ykKacdE/MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgx LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 MS5sZXRzZW5jcnlwdC5vcmcvMCkGA1UdEQQiMCCCDGxpZmUtdGltZS5ubIIQd3d3 LmxpZmUtdGltZS5ubDCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC 3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUg cmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29y ZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBz Oi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IB AQBpEwKDBGvRwvxfnCX6IeScc2MBihMd0O3fawvlPArI6bk3wgGuvUe/Aud6nGNE R2i4s7yjqUF81ayVxFws8aNSqWLXvfdtCNxZ5o2PfBmKCrTputlpisaM3/RXG01E RPeXFJQGPndh5ZfG2SrxKWmGp2+BU19QlBOP1PlegrV6lERa2NzV0HNoHM7WqzLC xKk3Z8VsbsgU4p1KJtQgaURTPf2uYJiPlf/f3QDYjaASPl+O0Ri3yIpcOqZz42LX 17nli9u59kGAnpaxlP7U+FcVSf64VlF+FjL6f2lAoZDNXz3y4lJCvi3KcpQLUeJL bgNOd2bw5iFbZIXiOGsU5FMu -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApTdo63E55qQ8NyVPyhhJ 4b2o8UqjCNEX90NGvrXjhHL9Hr0lMuaLpt6SAWESvLQt4pr9cm6dQ0+MxtPwVtXF KWXD4DOdV4K2E276An5Vd9Xcz7xxx3jWWmm/Jj0bWo60wAHQ1tFqKwyUXe5zokhD HKXhyjTb2MEsg7GHrlYmzCuk61Yid3xw0khksZPJprBZGnnIAtqX/+daBh4XHva0 HluGodHsKNmr8j13xNCkN2Ip/PdPgAszvJPJyigAFHyqaPvsUxsh1K+vPDQg+qwj EDRPIkmYpPpoFCJGBdGS9jR3qk4cGUeqmpGqqBkhApH3SjPnBsw8hPuBMbBqt1Fm 5my/5DugO4bqUnsnDf0+KQUGY8W62+JfQ1L0rLGMjCCMIzxLTtKG0IKXzStG548F PpgyklVcGdgJSPbDtf4uoXnouuiBqfHGDiiRnFNCZKNeDLGeiywSIIZHlsT9pMbN O17O9LWNtpxT8KtSfJTrI6a0rHyUYn4bWSJCb7ORq7zQTkVjfkrwLDFqtQxABTFw GfAvzje8pvZSW4qV3F6PGWkcqiNagKlkfZ9C9psaR5fQ5ZVrxlMTAD0pkb3M3Q/i nlGuH+OYQ33Lj5Gz8PBSTyBcRRLDZgPGsi6CuuTbovxWh87hhR7XbjT5xvzA9J3W hV/f/yHcrowemeNgKnfGI5ECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 104673956264297139364222733720114325426372 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-28 12:36:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-27 12:36:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'life-time.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 674024288549598737345811982227577517989993209117825329552712775087948171658901948735112301313561279276704607787510788608507331805935515494701234875609813657578121083255122960721980469514035767674155083523678584293765858664161038235257076528220887217044443892539459960114022603444211817009718035756356443770547722271287529617131154695661636330327666630603861635049958790869724721391569405832579682800350860375392666891850754175384474582745312570548919478201253702265495445126274342706746536135991876016642234191744815269175101642209222259520812597427876545547055982069556801639753922777171346301628703856150233791858100687589647010921308861369639804634467109000155737953771885373834102518217234395429972018259071673784027864235825576869601220402140107680638070443939704260346550737970292264050020125349870439278093994794702959522559049634010398111544070843964058288161945011140068782792005660366460529139579567676215894912973742311056922169968330421200527546482356724861086416116021275414286360545229882520775442454342372879215392816980206008815119223064560626763015585677746338071448142958157787545363377563181014584985614753666874086713099434517594559360349829206147570071643205850171525729856648106281864335370735200015562584761233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) db609fa305cb1a8d212d6eb43f7cca429a71d13f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-time.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.life-time.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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