acumulus.nl
Issued by R3
About this certificate
This digital certificate with serial number 04:79:d0:4e:c2:e9:6c:2f:3c:cf:aa:b3:a1:ab:27:75:d0:47 was issued on by Let's Encrypt.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=acumulus.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:79:d0:4e:c2:e9:6c:2f:3c:cf:aa:b3:a1:ab:27:75:d0:47Serial Number (int): 389900198500033875345677588164882912890951
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 62:b9:83:56:20:2b:ee:8d:ee:0c:a7:95:a1:7f:54:cf:e4:15:3d:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0e:a6:eb:5f:96:fe:ed:21:80:df:19:19:f0:d8:02:ad:7f:be:ae:1c
Fingerprint (sha256): b6:c7:a8:6a:68:08:e3:9f:4a:20:a7:6a:24:37:d4:e1:df:c6:1b:dc:53:6e:92:ae:cc:8f:0b:62:25:d4:1f:29
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate acumulus.nl
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for acumulus.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
acumulus.nl
forum.acumulus.nl
m.acumulus.nl
m8.acumulus.nl
wiki.acumulus.nl
www.acumulus.nl
forum.acumulus.nl
m.acumulus.nl
m8.acumulus.nl
wiki.acumulus.nl
www.acumulus.nl
Other certificates including the domain name acumulus.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for acumulus.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISBHnQTsLpbC88z6qzoasnddBHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTgwMTMwNDRaFw0yNDAzMTcwMTMwNDNaMBYxFDASBgNVBAMT C2FjdW11bHVzLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwmL iNlW4bEaLslHNtOok9ejcKVH7M7EWe29K208S7xYLhYnTHRsnTIkryjb0sBOTsbN Qh5NwUsB2emwLAidjW2OfgQkwV6oUJJSS3UwO+c2RmcvDSdiIqNi697YZtOnu/h1 j+lk/qT/2hC1eXwvYh3BdJvNGmdaYBGqYOFEbQ2Vto2Zq3+83CUzignZ8eDxBGmO IjTIvpls4K9OaHaMYZoDfAfBx6ZGG3f110XwkSOig7vYmTUb7571OOv/h8xr2N/a eSsto9HRvbtatt00NYmk6fhSep/+a7fvLG6CQbA9NM6N/l+s+oVTDuD0y7s6JqVC Xxe3WMv65+SR0KI2DQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRiuYNWICvuje4Mp5Whf1TP5BU9yjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzBr BgNVHREEZDBiggthY3VtdWx1cy5ubIIRZm9ydW0uYWN1bXVsdXMubmyCDW0uYWN1 bXVsdXMubmyCDm04LmFjdW11bHVzLm5sghB3aWtpLmFjdW11bHVzLm5sgg93d3cu YWN1bXVsdXMubmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYx6 wvDXAAAEAwBHMEUCIQDb6Kf0TaniUY8CgpS5ENMYtB9oc9TXKU13CD0a91CylQIg Xe4/yHscDO9Ed4+Oeu5BXfEr4VFjbMtnkJGiBxeIkR8AdgBIsONr2qZHNA/lagL6 nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYx6wvLXAAAEAwBHMEUCIHw3ASl3M/QalZVQ VTf0a9HznMxCtx+8eHoQWYq/7fTIAiEAj7WC7tomD+wS8VKQfM6pmVlXWqACkYAI H8uW6so/1zowDQYJKoZIhvcNAQELBQADggEBAIECxtAUErBii2hRpC/GjhjIXO9U sI1DFxb1r0XcgK4Gcprt2XTI5yxG4mf+i07cXhRtcIrgyNofkgbSgP8bI8YTp018 Qj6mxjiKvi3Yp9Dh8JN6xmq3CXwH7ZCaldYRcLqzPA1TpWe+NYvQdL8iH0aWIteg 5qMxeo8qISvBn8YRikLr/MbXZPScZgm9Xm9yzOBGr2xA/Oex8ITiTlZk1TZdzNKk X34rLhlYfbYLyykYbfvvDq2l0TzSpn3+stJj4Eu2wTNxRHVgAQ+87CU+F92xWlub CwOeRsnWgObIOc8ebSvwP96+iewzw2JKJD3XRbZepC1cumZiqBmAfyzbOEg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwmLiNlW4bEaLslHNtOo k9ejcKVH7M7EWe29K208S7xYLhYnTHRsnTIkryjb0sBOTsbNQh5NwUsB2emwLAid jW2OfgQkwV6oUJJSS3UwO+c2RmcvDSdiIqNi697YZtOnu/h1j+lk/qT/2hC1eXwv Yh3BdJvNGmdaYBGqYOFEbQ2Vto2Zq3+83CUzignZ8eDxBGmOIjTIvpls4K9OaHaM YZoDfAfBx6ZGG3f110XwkSOig7vYmTUb7571OOv/h8xr2N/aeSsto9HRvbtatt00 NYmk6fhSep/+a7fvLG6CQbA9NM6N/l+s+oVTDuD0y7s6JqVCXxe3WMv65+SR0KI2 DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389900198500033875345677588164882912890951 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 01:30:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 01:30:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acumulus.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26136035970957841493500752350465227583003170403230735929160022427022467779821988974358682220285325820100928131054857734611219256009749503379475980222598007505974965372241401649555989972046110804564313425128118101736640531618741361419031970767109017934903831881229578376809857645882013338566733867598472985062939804840558645512934535229577020711545517266922903101881367793510968600848977432695684236073350376367062881962092048782680691103259741916874489418004507801463179185105767104737212029634100054797624053016430385298094195555268397453659766105852852519390841078030262984974929897607568547715660616586707452704269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62b98356202bee8dee0ca795a17f54cfe4153dca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acumulus.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.acumulus.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.acumulus.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm8.acumulus.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.acumulus.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acumulus.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7ac2f0d70000040300473045022100dbe8a7f44da9e2518f028294b910d318b41f6873d4d7294d77083d1af750b29502205dee3fc87b1c0cef44778f8e7aee415df12be151636ccb679091a2071788911f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7ac2f2d7000004030047304502207c3701297733f41a9595505537f46bd1f39ccc42b71fbc787a10598abfedf4c80221008fb582eeda260fec12f152907ccea99959575aa0029180081fcb96eaca3fd73a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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