spin.spinnet.eu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:54:fb:18:84:e8:a7:1d:65:ac:f6:db:5d:4e:b1:6a:c9:f8 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=spin.spinnet.eu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:54:fb:18:84:e8:a7:1d:65:ac:f6:db:5d:4e:b1:6a:c9:f8Serial Number (int): 290254340154416910511725504233629259844088
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c3:6b:16:85:9e:d6:5d:90:0a:67:b8:1e:dc:8e:db:8d:b9:ff:d7:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 13:5d:96:f5:4f:49:1c:46:7d:8a:38:10:20:3f:92:30:f6:fc:90:35
Fingerprint (sha256): ad:f0:99:8d:c0:a7:f6:7b:da:4e:85:ab:cf:ad:ec:17:68:07:93:d8:18:cc:85:67:5e:f1:ee:63:ca:92:ca:2c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate spin.spinnet.eu
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spin.spinnet.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ernie.spinnet.eu
ernie.uva.nl
romanticnationalism.net
spin.spinnet.eu
ernie.uva.nl
romanticnationalism.net
spin.spinnet.eu
Other certificates including the domain name spinnet.eu
(limited to 100 certificates)
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
ernie.uva.nl
imagologica.eu
spin.spinnet.eu
imagologica.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
ernie.uva.nl
spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
ernie.uva.nl
imagologica.eu
spin.spinnet.eu
imagologica.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
ernie.uva.nl
spinnet.eu
spin.spinnet.eu
spin.spinnet.eu
spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
spin.spinnet.eu
leerssen.nl
spin.spinnet.eu
Certificate
The complete raw certificate details for spin.spinnet.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgISA1T7GITopx1lrPbbXU6xasn4MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjcyMzAwMzBaFw0x OTA3MjYyMzAwMzBaMBoxGDAWBgNVBAMTD3NwaW4uc3Bpbm5ldC5ldTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOnSEkBhK85jtgOdInvg1Y7WSmzZGw4r viW77NvWBbzXuZmhv3nN3F4KkEde9gXQIThEKevh/24hiGg6/2xQVfpwtURtQ1eL v1xu8lTTnstv8E27f4T4+PthBdwh66M42MdLeYde8LeZCrd5ccN12G63AS/GjU9H mjHxGqA6YTnHD//BMpioAJu9+2l3gPYFl5P+whkzeD0z/j//009ezvFH/kQbraLu 3yTgLMM5RF/Wd8fzT0KscOkCK87mSaEn3i028YvU93f0yvT3ivq3+jsPC+hi1sKh E/HdVhpeQ1T06Z+FyVCXUbCDx1tjokwvDmMMRlhFCbmzgSVQRGImeVcCAwEAAaOC Ap8wggKbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUw2sWhZ7WXZAKZ7ge3I7bjbn/ 1zgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzBTBgNVHREETDBKghBlcm5pZS5zcGlubmV0LmV1ggxlcm5pZS51dmEubmyC F3JvbWFudGljbmF0aW9uYWxpc20ubmV0gg9zcGluLnNwaW5uZXQuZXUwTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIA dwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWphPj74AAAEAwBI MEYCIQDVK5S05DKf3Mvi/zhaY2RChX51gwmRapcLaTdLQO6j3AIhALSNz145NKuO zyD50iVM1tPE0Oz0svb/8lmtGo+hAYXLAHcAKTxRllTIOWW6qlD8WAfUt2+/WHop ctykwwz05UVH9HgAAAFqYT5BCAAABAMASDBGAiEAnJIKWFEGFI3KH29rHXcjRNly AgkZEnQMDpK9+yZJf5YCIQDxitl2HSYdcdgozh50uMPoagoD8fzOhfIRAhVsKrX5 izANBgkqhkiG9w0BAQsFAAOCAQEAJc9refuDKkuv5rDfS55g6n/B8MWLNnqsAiBM 37pILCQIsoJzemuhPzZyfMSrWUtXjY+I9IrZI4vid+dpAa2Dzwbn3ZDiWq8eyezb F8IK/46jBiKpSPse40hK5svy7RfMLG3g6kiQBt1hYqVOFWf2VUW0V8hsU1SygfNU mPGF1kdzU7l5oaiwO0P4hHZV2T53fLpbDkM+8jxNDOX9s3/JkDkJx6JyATgEZ79b wPb2Lrjvb5LqUxw2ynq3C8G5/stLy8pHnG9DK/TlvgCOUwAHmykcc27JbxaH4vEn 2Ikyg5HuNGzb8GRZfaSWS2EpBp1mBDkx3EnLMOKaEQvE3tiSDg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dISQGErzmO2A50ie+DV jtZKbNkbDiu+Jbvs29YFvNe5maG/ec3cXgqQR172BdAhOEQp6+H/biGIaDr/bFBV +nC1RG1DV4u/XG7yVNOey2/wTbt/hPj4+2EF3CHrozjYx0t5h17wt5kKt3lxw3XY brcBL8aNT0eaMfEaoDphOccP/8EymKgAm737aXeA9gWXk/7CGTN4PTP+P//TT17O 8Uf+RButou7fJOAswzlEX9Z3x/NPQqxw6QIrzuZJoSfeLTbxi9T3d/TK9PeK+rf6 Ow8L6GLWwqET8d1WGl5DVPTpn4XJUJdRsIPHW2OiTC8OYwxGWEUJubOBJVBEYiZ5 VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290254340154416910511725504233629259844088 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 23:00:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:00:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spin.spinnet.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29517115073437120914525946176058427771980860004075384120977544650005392221397405113382014415442627830101434112375533441256137742895217647270523623750884105634092487799204325936980005219476999889083110935063747734063816801991151401874545035956705150559891353876306698274199449702315802883496490120962544765213205864631368915317078781206067016730862762058999475976872632389447060939325703210997296796530369605637824919191636876069894126800755274102279949434093134296838315440905501632903046381415366319827382003489099188402659628112259340375819699685528093133012526580868519101425510081519608328083727119076412686235991 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c36b16859ed65d900a67b81edc8edb8db9ffd738 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernie.spinnet.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernie.uva.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanticnationalism.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spin.spinnet.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a613e3ef80000040300483046022100d52b94b4e4329fdccbe2ff385a636442857e758309916a970b69374b40eea3dc022100b48dcf5e3934ab8ecf20f9d2254cd6d3c4d0ecf4b2f6fff259ad1a8fa10185cb007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a613e410800000403004830460221009c920a585106148dca1f6f6b1d772344d97202091912740c0e92bdfb26497f96022100f18ad9761d261d71d828ce1e74b8c3e86a0a03f1fcce85f21102156c2ab5f98b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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