api.bearbytes.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f3:72:c3:93:81:f3:c0:ed:fa:a4:27:04:fe:a1:63:5a:a4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.bearbytes.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f3:72:c3:93:81:f3:c0:ed:fa:a4:27:04:fe:a1:63:5a:a4Serial Number (int): 344178020438285764058474301182459884296868
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 93:88:e5:e3:0d:2a:38:be:55:e1:c3:dd:d2:42:72:6e:19:76:d4:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): be:f3:3c:de:7b:d1:8f:5d:83:0a:a5:47:df:7c:80:b8:84:52:02:8b
Fingerprint (sha256): bd:da:47:9c:7e:2b:e7:f8:ff:a3:f4:e4:72:c0:b2:2f:4d:63:20:6b:82:76:d4:60:0c:89:9f:00:43:58:dc:18
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate api.bearbytes.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.bearbytes.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.bearbytes.nl
Other certificates including the domain name bearbytes.nl
(limited to 100 certificates)
api.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
*.bearbytes.nl
*.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
intranet.server01.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
*.bearbytes.nl
*.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
app.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
api.bearbytes.nl
intranet.server01.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
app.bearbytes.nl
Certificate
The complete raw certificate details for api.bearbytes.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISA/Nyw5OB88Dt+qQnBP6hY1qkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMTMwNjQ4MjdaFw0x ODA1MTQwNjQ4MjdaMBsxGTAXBgNVBAMTEGFwaS5iZWFyYnl0ZXMubmwwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDRTYVEDp/fpk0Xj4LRv6IqzpDGbLIL 8fx9UMW1gb2NdEikVpdicqCetzncfIRILarpSS7OtPpkibFzML0qYnBtEFDiT+Px sIM6IfAVMG4n0y/uoo+Ckgqjru4BW2EyaGA7XTATIKLrLBFwHJ/4OAWY763sFGUI pgcyx6BMAo1AM5yr4Xd+EJCDI4Dn4lQ6YrQZeLZFCntZn2ktujcAZp7STUdBbiHY 2w715rQt22AxTu9Qw146Pco9YKG8agYp0Fbbkfx/XMJAXqx9Fy9b3xMPlcrkC3Eo d8mu2xCUT3dlXz3avPm8ttpsrhIhPht0W4wA3VL3f8ydmrtZdO3fy96HH9hUcofJ GIYi2oWJHswmCXmVSCdSlabGBVsNACgFrmMELTFP7g9vyegnXBUvCPa1IkXP1vxV dHImcNhL6RmGh5qIKOjo6eF3i2xAwIMN/EhvMq6DMzAAZvZ4dm5wVM9kwPgfO1KX qoJPWrGbN6xIC+HarmbdG16qz/DsauJFRxZy1hGyIraaTd18n+hh9D/nYksryw6u rXZNt63be4z1OVVzq8qe7/EYkwf0t/ar6Eo3tgosAjuGcdg/ZNWTFFtk2oHm8FWM gqXR5CONvTddLdCBvGXvOsyNB7xy1GrsA+h0MYSYmkp3HxcXOL7Fox4g+Jj3Bx4G 5mKrXIEtIlWzqQIDAQABo4ICEDCCAgwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBST iOXjDSo4vlXhw93SQnJuGXbUPzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGFwaS5iZWFyYnl0ZXMu bmwwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy eXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAANjcleoKyh8+ mp9bI8dNUnsRPutVIQlFErGBPQX0gjLDYtD31+jCQy17QmxgKUmAjUf6xvoQHGnO oJJBVUAgyJQKZq9PGxAfX970vfuEP0/8XBL8my4qZzFKdZd5TFiDLNHA9roqblCu NVQ37mgmpp5gWsw13hEVFtzh44LSFHVOPpkIINlE+nLn8cQ/+sn/jN71rV+J7OgX XlGkWtDjAQzapNsmxyCeh/YdVSTOUx3AxrzKz5FcYrds4VNM5alInCZ9uesMkLdU CoBQn4tt6IT2paqkhA8ClrNW9ag3hYHUY+CL2TzF56+Sdl8iHBGEJmMjj29u8xmm /pnbbFI/iQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0U2FRA6f36ZNF4+C0b+i Ks6QxmyyC/H8fVDFtYG9jXRIpFaXYnKgnrc53HyESC2q6UkuzrT6ZImxczC9KmJw bRBQ4k/j8bCDOiHwFTBuJ9Mv7qKPgpIKo67uAVthMmhgO10wEyCi6ywRcByf+DgF mO+t7BRlCKYHMsegTAKNQDOcq+F3fhCQgyOA5+JUOmK0GXi2RQp7WZ9pLbo3AGae 0k1HQW4h2NsO9ea0LdtgMU7vUMNeOj3KPWChvGoGKdBW25H8f1zCQF6sfRcvW98T D5XK5AtxKHfJrtsQlE93ZV892rz5vLbabK4SIT4bdFuMAN1S93/MnZq7WXTt38ve hx/YVHKHyRiGItqFiR7MJgl5lUgnUpWmxgVbDQAoBa5jBC0xT+4Pb8noJ1wVLwj2 tSJFz9b8VXRyJnDYS+kZhoeaiCjo6Onhd4tsQMCDDfxIbzKugzMwAGb2eHZucFTP ZMD4HztSl6qCT1qxmzesSAvh2q5m3Rteqs/w7GriRUcWctYRsiK2mk3dfJ/oYfQ/ 52JLK8sOrq12Tbet23uM9TlVc6vKnu/xGJMH9Lf2q+hKN7YKLAI7hnHYP2TVkxRb ZNqB5vBVjIKl0eQjjb03XS3Qgbxl7zrMjQe8ctRq7APodDGEmJpKdx8XFzi+xaMe IPiY9wceBuZiq1yBLSJVs6kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344178020438285764058474301182459884296868 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-13 06:48:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-14 06:48:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.bearbytes.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853880986514663825849942826713195401199938188826954806910804531536425635297594802239907329602853000734447635005038348236650913051997975931537248747145190694435422092396068753276508146033169545952863748285420886176139025974024082610859525151589856291510453721266230884603708895638981775086078834572157857714472336719759742711939800109738214705206306527243933317203127536844784657343345170003195957514777526047263432807845549399291743573436488062779197746535615663748953809787053907551708069106696081585505471565124960131069482956474594878492273236354781040208318652239855798741952270632047471296718339149301156752958246347680051301065331948622206292038177591415708690007179081935630262333757407375613270133841685567376565985080588516873071797831035010991027249309968592992931126295799287405228426137900502733251790558949432863666004497963957538830691266858944127351096478240236407013483759312842240053479909791667319174655350503797214987351238179217641869933484000686678224136162554051706688607228984780757560283086382596799107715414339039094699227006415026020114047167979053923891327607448170505376625423440751812325516369987217469752392884157303965720318354191047863314777432051301083528885334205771920948896372354220562262472897449 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9388e5e30d2a38be55e1c3ddd242726e1976d43f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bearbytes.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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