haarmanengineering.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:f6:c9:03:3d:d9:62:c7:f9:c7:17:19:01:54:dc:29:bd:96 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=haarmanengineering.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:c9:03:3d:d9:62:c7:f9:c7:17:19:01:54:dc:29:bd:96
Serial Number (int): 432425797648085260668511975163684257906070
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b1:b0:7b:09:4d:bc:b8:f2:6f:8c:f0:11:86:e5:c1:5e:bc:9b:c5:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:7f:85:b4:7b:f8:08:d7:ab:f2:00:dc:61:61:01:37:97:37:35:8d
Fingerprint (sha256): b7:23:ac:51:cc:0e:2b:b9:7e:09:0e:a5:5c:7a:9f:26:e6:9e:c3:9c:76:53:e1:1e:1e:5d:c1:36:a7:31:c4:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate haarmanengineering.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for haarmanengineering.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

haarmanengineering.nl
www.haarmanengineering.nl

Other certificates including the domain name haarmanengineering.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for haarmanengineering.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBUP7IquNjZjeHSJCXqK
zeF9rGwwifYk6ccz36h3ux3VBqpEOwfEeJtHCPryF7BILciEgeYHVSDLUpkZeTu+
nybDcpKyfVsziPRjp48X7zhc6pH009H/VaG2XkxUfgSYVAxKnRfjBGzjV1SQRoDa
FFqRvu7xO5MVB3mFTpjQGcEPh0A66J2rpW9/c7MoW4llOIz3iwBGaACk6R3Kgbl9
wOm91do7MMqrdPBq7F3UA1D2PYowOfsaGPOK4UgscwM04NT9bSfx8i5vTi+FKhTJ
WjVQkDf/ALX50caRKNfyzkEiGpE5eNmddEzHCvog2A01JLno8jXFurynSOqNxtn4
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432425797648085260668511975163684257906070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-03 03:25:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-02 03:25:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'haarmanengineering.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22228327833467569286796453902997482779103459831844021999576720216652598508564480374462507488547412841333555407989776212000411482711206060339530495518044290889430046414351806962881558207603112639681360466632985896026441382894244862824281971033714869036149361861511297699531191964641830888321661945844742289377805827382296395773075449889836361405253860845394533510275059698123526066016754900034040445153708716039716445069626472669210434070560985801606805899688743207443419235450082623431432445118106335230070301332007698491948385362099738971159004384928477089284237718625437524343383928763903434510420268366666093164677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1b07b094dbcb8f26f8cf01186e5c15ebc9bc56d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haarmanengineering.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haarmanengineering.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a5949a7bf0000040300473045022100f64fdba1b8bcebe8dd8f89892ee0c1425b41d9117da74b77b88eb300450f0dbe02206159d517644bac0a25efbf62f6d6a7ade381cf4a5c519b546adba5e587ac0c770077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a5949a7d0000004030048304602210097511fbbddd383543db127a03b39b5138b21246d8733f111b8165f629d747111022100d5734a7b5d091130dde7daedae7315808215ba11ccb5385ebf9e689f77c78f4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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