mail.bosschewijnkopers.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:2b:4a:71:2f:5d:ef:5b:72:72:c8:a4:80:bd:31:da:7f was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.bosschewijnkopers.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:2b:4a:71:2f:5d:ef:5b:72:72:c8:a4:80:bd:31:da:7f
Serial Number (int): 271262589765439318661928941651268908210815
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:87:77:23:14:bb:e9:d0:8c:d9:51:02:b1:eb:68:e3:ac:75:78:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:21:dd:b2:cd:9c:cd:fd:b9:f8:10:38:f3:9e:23:08:66:1d:6f:9b
Fingerprint (sha256): bb:8c:34:bc:66:a1:c5:3e:90:99:4b:dc:10:56:88:3a:79:6d:7a:e6:d8:cb:bd:55:a2:16:ff:f8:34:71:c2:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.bosschewijnkopers.nl

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.bosschewijnkopers.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bosschewijnkopers.nl
mail.bosschewijnkopers.nl
www.bosschewijnkopers.nl

Other certificates including the domain name bosschewijnkopers.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for mail.bosschewijnkopers.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuXeSOKzJxSzraF6pdeI
Kl4iq+132nxHfGtDQqxWagbdjqsFuT9e9HwG7J1K4ePSEg1Yv2bz7e09ak0vla+S
wXzviKWRw5eCwXFGejtLAERlKDXBEBsX6dBwES0yFMgZMQRhF6Fkzz6+Mdlt3jA/
J0pawSi6Svizvdzu6vXhJ3giQUt1+kdCmH2QVSZ6vIRg1ss65WSuelpjEzzDCBD1
Tx7i9OxMgAgIiSo/1gutpUY1veYWmlopco28pM4BFY/7R0FQcA+97pbChyxpPvRI
FiRrN0VNijJzu9EC1ljnraN+SaEq6Hn+LmizzmQEeCDV+NEZVNEectHZo6LEIBij
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271262589765439318661928941651268908210815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 23:13:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 23:12:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.bosschewijnkopers.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23088723787075157053614125322932455325371982991276301080620439685546774468493804287368057255896247033570231253005995234828643884835175944707657893436879861538862313544111795606493977946099952371198773414433807649181894022166559645929377690598244022061295334202985094283076076724669732535888771849817486162375090809595160518058612010340925443452589384701018620992921078283364461001723953973870266563156863492525344144765449319596058106501782508194349957793908636387570457814998828017048997547212987964626135131387173888964571917344523981273656760229883893176362566912156546303035789571617890421748526743661566227948469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0387772314bbe9d08cd95102b1eb68e3ac757847
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosschewijnkopers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bosschewijnkopers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bosschewijnkopers.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a3ea2f2ba0000040300463044022055360e87eab31654deb5948852cb5aaece311e45fb7d80907cd33c944dca155e022061f4bf4fd53aaff5824bc1c4ac485a41cf82d0aaded329be3a8a4f3fd803cd41007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a3ea2f2fc0000040300483046022100cc3967227091b1a42ac446a1ed9957631f1e9cf63f42c0dbf04cd6d2380d7319022100bfd2107c722c4852c19f50377a065b495f8fd5cf35b5dc9af7eba1b8148eaa4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a519c09719451e519e9f417ea5cb18d4d29654178eb338b6f669c84fbc3dd15c7cd89677121d3f9fae0f7a826cb4b0562ec3fabcebdf9c7f997ee8caad362ded41bc63a6a95911cdcd561e1e08941fbaf71133b13da3672517def3e12d18fc40d686c409bdd276c88facd8dafa424cf2e6722e0fb4947a455cf7baa5776e2e65b43207f886c65b6fa9cff556e739b39158b88d963e9c32e1c3af3300cd670a158126d84cdbeef3c6ef07ddba758a4f39cae67a4eba5471e5c70a9aa0cb4cc9932d855e9ffeb3dd0e1e4ec5ec147de12c7cd70016415ef210cd4b42b17f40a7d40c6eb0f963130e11dcc852332dcba0fb1a73a6cb8c48f4a8a0832333531cb22