DV SSL/TLS Certificate for www.grondverzetters.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the www.grondverzetters.nl DV SSL/TLS Certificate

This certificate with serial number 05:63:1b:f9:4d:a4:bf:10:d6:ae:fe:ef:c9:fb:fc:f3:48:3b for www.grondverzetters.nl was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.grondverzetters.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:63:1b:f9:4d:a4:bf:10:d6:ae:fe:ef:c9:fb:fc:f3:48:3b
Serial Number (int): 469286567596576199143662986210513417095227
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 86:6b:87:99:4a:a5:35:f8:78:13:9c:78:08:30:0d:a8:34:7c:68:ab
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): f4:27:f8:f5:e8:9b:55:87:d8:7b:b5:99:ce:4e:05:ba:f9:4e:6c:e7
Fingerprint (SHA-256): 07:a3:67:d9:aa:14:20:31:29:c0:5d:d8:aa:92:6b:f9:d1:72:7f:9c:4a:0c:58:48:5a:76:8a:45:00:e8:c4:90

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/60.crl

Check the revocation status for certificate www.grondverzetters.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.grondverzetters.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.grondverzetters.nl

X.509 Certificate

The complete raw X.509 certificate details for www.grondverzetters.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi4almpJnGXnVF20aAis
YnMAWJ0cMwJHtLrHB2UCRL+7upiW2hU3W1HWhFKvQYJc9SXkPkLk9reWeI89LK/O
QiPqPcZTLKqR3BGuHL/0Tf/GvnfrjmTwgLFRrR2UJSMeDlxmXaC/hBKlsuXmHUzQ
WNCp16SPh/yTqlk9UDfupn/lIGIifxFkH513peFsGGLT+sIktPNMwtPvo43cYLqI
H0T3/6auHMqibfjFcIO1191KyVuzk6ED4PAKVDGQcOiCTZYSvPvpq9wllIybquMj
j+n8Gz6j7RKfFKfRRLSdkV9gTJ2Be/Mp97eBBqiKXmwJj13oCJuCkPSxEoqSiYJ+
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 469286567596576199143662986210513417095227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-10 02:02:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-08 02:01:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.grondverzetters.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24008012603092488724106356243198134281076282854509482862320047481539101336263142420737725737898730587082814902438351058904793895469294956275660817509757354725693203865479026209403323826803496806535003560212354628007421332794797998128367969956963533182825436200402039564695084113576064171307395403041680506374002286069797498094126411170855817145593959624226458892926307713032434969941265897533053931113211718280696437242737454227386364323394301039604486866779682521771778829297788595873586469412428391952743260346695044854638541534420152183329532053070600317105160384966533747253288325528605674503661169344593663262427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							866b87994aa535f878139c7808300da8347c68ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grondverzetters.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/60.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019757c84128000004030047304502205dbff3cdc729514042e17b6114031455f3321dfd1f292aae94751883cd3e4ed3022100a2b064e3486482d73540051ca63e81eecdceb163c2b44c30a6e7e8ce1b9e0e0e0077000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa340000019757c84135000004030048304602210097b3cabfb95f41ed1af890478081459d31164db9ed2f6c47f06da44e2c74d1d4022100d816380a0b779d12e0a75ba3da2a020d1662ed30e8afc389aaa03cea3951e4da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004775d5f0bab048b7c72ea00dcdc5a37786717f1bc2abb09664163ef6a72695847faa343482d7b8a483be64cb9c101bc64597b6ff8baef0dd5c6adf55e1a24140455d3f6d945ba48e849245d14cd9745636156d77704618d34e3aba3372d74eef7544148e671f8bb4e0ae3f6fbae3b2ce5a7cdfd3ca1848a9988a33806f4a1fa6f07719bb5bff8a608d41040fe55ea88586a4f7c92dcedf67cd1188f096a1cfff2c11cf6e0d77e47e21500c9631efdeeaf24438ee64a34ecc50f862e518b7d0e95d9874cc46af2dbaf39353acdcc4535f196c6ec1d21c9a1baa109af50dc2a2486241251961063728009ebd7c6ae290ceb12ddb4e1dc2d11fcaa00f24128ad552