koersupdate.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:8e:ae:a8:7d:55:d8:f6:d2:75:f1:80:33:08:f9:e0:e8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=koersupdate.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:8e:ae:a8:7d:55:d8:f6:d2:75:f1:80:33:08:f9:e0:e8
Serial Number (int): 336728918137237885726397185928354642649320
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:01:51:ca:d6:88:80:e0:da:2a:f0:06:e3:24:55:b6:2a:a3:5f:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:60:6c:b8:ba:8a:0c:f8:12:1d:21:b2:fa:cd:fa:52:0e:32:b5:94
Fingerprint (sha256): bc:e0:11:93:34:2c:2d:35:d3:4a:50:9f:cb:60:d2:4b:6d:78:90:04:5c:c9:fc:17:92:9b:3e:31:c5:8a:c5:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate koersupdate.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for koersupdate.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

koersupdate.nl
www.koersupdate.nl

Other certificates including the domain name koersupdate.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for koersupdate.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336728918137237885726397185928354642649320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 05:11:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 05:11:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'koersupdate.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917575725494308136631062979036683246688759919664132590726115495550299837669255346870221052826584917841475189483436970976146805084392975471979220933765195114924825717137213746818269418947575883516598899614077193547396179853570726224349149627217533064465690531028861961147370681575049761491369055061384384008368334793914646448725839126051147719035241544116380570979426874605500502375042711565736636062853791780685122018699798234214115275439369200208367867539960120080039326408618592584075889189063425463078327005626173601474594836974521501271528454550439358903695978825124910491806787702692924839742304799341352288768950194984084065893971359598734215471115150936829563814965695747606643438526637658226693144853474695997669791524129655715519495267849466546424992233119233762490024947712295445823106695494933299973642442140029642443716267648161901701940285612884440485848471671909582955277306356312666452251982191519805622447323482774514708331332969103907555444791878721840920684610194995031654244365328699172309498532018372357994651194438456930779081011694476366798318808846676609233739091950396900413021619004998247689385656098262222664218697563019843708723056286846606692189322463051002820294469610527622370412597857267010457754273053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b0151cad68880e0da2af006e32455b62aa35f7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koersupdate.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koersupdate.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001710b2aa9bb0000040300463044022024a964c2fa794ff251c4ef2419c21427ef5dad20610e8fec2299aae8d80499c8022008332fd37512035613f98e4715bc98644c6ee736c8976fdfff4b69eae01bcca400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001710b2aaa040000040300473045022062471059cf509dd69569d479446090f3802d79a0f72043072504dca887862562022100e9f0a1062cb54dca881b294bd5827d21a2c3b8dbf48683fc116f7666fe76df84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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