groep-een.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:3f:2c:89:93:64:15:4b:27:88:79:5b:39:6b:3f:ac:79 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=groep-een.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:3f:2c:89:93:64:15:4b:27:88:79:5b:39:6b:3f:ac:79
Serial Number (int): 345810857406837333944403991684083758378105
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9e:75:d5:52:ee:da:7d:c7:bf:a9:53:5f:47:cc:55:30:6f:03:9f:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:59:5d:50:52:1b:2c:0c:d8:2c:a5:44:64:44:d7:fa:ab:f5:a0:6d
Fingerprint (sha256): be:7b:7f:aa:9c:43:c0:a7:77:2a:af:cc:bc:74:1a:06:28:c7:94:43:cf:33:3b:2e:44:3e:b3:9d:01:7d:45:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate groep-een.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for groep-een.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

development.groep-een.com
e.groep-een.com
groep-een.com
mail.groep-een.com
onderzoek.groep-een.com
research.groep-een.com
staging.groep-een.com
wiki.groep-een.com
www.groep-een.com

Other certificates including the domain name groep-een.com

(limited to 100 certificates)
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
e.groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com
groep-een.com

Certificate

The complete raw certificate details for groep-een.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApQQhQnyqMrbnS8F7BbHI
SvOdXNc2kZgQh4XPfrTF2bNIadP3pXlqpGDzT590xQJgwn/1aHvB5A9Zk4+Fa8A+
VZ7W5dgUhaUHrzUKp++Q36utURN+Ie6bapEDOmobzmE30oFZvRk2Bg+15bQThB3b
09vmuWbtry2EkJ4cUSCbvxbhacAVjndIc0dUzEA5oZcd1TVQ38HioTYD9xkKZ/32
LJxFtp3R0g/m54hR84xVVcWG2bfG1k4Gg+imHaQdnSTVK2ir2xfCo8XCwhvYqBVq
bDCtH14VpzW6lgfAisE2+ltBXouaaoNYhYQuo0Le8umiIrHY23hbzb7scrHx7VQ5
a0do7m4jmh48TZYT3/71va5POyJYFYHMiedlMcmfxsuL+5V/by546LvvpqiAKYw1
aYgIKFJOaDShW4q/eJk8k08UA5hZwopNmssWTm8NK44qGulL9OmYv1wTJ5nE2v3s
VKMeu7HhBG5an9hC2fsSo/nay7gQb/3gXmfJs6ppVcPt9o4RaPayo/+Wxsbgazoe
rMrIFThYgKModcMZBZQ6S1beY6BVBboxj1+oTTAsv0cUgVd2TW98IQkKZlrZKPF8
aV6rEqsLLiQWIVcxKxZDJcWD4mToX4xinICnb5BAYce3ZE5eRbzt3eOf4wun0QDM
ExgErf0bV2+F7DOuSU5bROMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345810857406837333944403991684083758378105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 01:33:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 01:33:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'groep-een.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673207086093370588646231118850758516278178865011303705338035122218810920436735023218915932422287150014214108936584447391362160181613861036771640700405804786353437199048845366130043331720402399988782513634200956826046640563047768592005677837812582761934131463438989655978831436085333813012649325280615514299724481238781060786629266967990601112734166183501201135275314998844174076656269596258809043708163780655857257675922209355282251460843936385053011092986304552255250204939398670961729920922347046313457450367430449688309888666944795845372521824092408391713800681235828413236456108586574285376480837843724770022261516854562777771155698785681408802286538789139300482183537837289163875227923817094174959164634023885559239404917016168910570760272136868253381281214487704262126302597548108382336912589925649157733044596924569868046097005048557680573668855668171033186426317727256557236865316953249428318519533884257239595717867831302842520339876902883416597644644029036041893196956324632270086305979981655138527526403474589602722258049095758433154651363901360644813868648656003523962605106728414671804238339113287279102946291614129534984939642129423338269160780886312200102115198992150930292772600361372720175302309549990842818077869283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e75d552eeda7dc7bfa9535f47cc55306f039f4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onderzoek.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.groep-een.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groep-een.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf65dd4190000040300483046022100facef58cae7d5f97fe240167d66d931200ee5ce1ffce6a81fb94cf8f94e14af902210089fa028b1068a7aa1a51067729b80dc03aa4aa8765914e69ba09c9942ce71b93007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf65dd43900000403004730450220294068503cb27ebbc3776d41dcc29f85e259f1040543b186a49fc7f06a318fe4022100b13d355180f7f2463e3d92eecadb6a0b3a48fecc13f9c433d9de613d7d580e11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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