twanvandewiel.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:32:29:06:b1:19:8d:b4:c9:f7:f1:1e:cb:ed:33:ff:a7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=twanvandewiel.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:32:29:06:b1:19:8d:b4:c9:f7:f1:1e:cb:ed:33:ff:a7
Serial Number (int): 329460005599154629178597118254897404575655
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:3a:29:d4:87:07:e4:db:62:86:00:13:35:81:98:bd:ce:3e:c7:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:93:5c:7c:91:2d:b0:16:a9:24:f7:0d:a1:ec:33:4c:55:bb:dd:5d
Fingerprint (sha256): c6:24:0c:7c:76:a2:d5:c3:ac:3c:98:36:e1:f3:d2:9d:04:c8:34:03:8d:28:31:fa:8a:3c:30:96:b7:93:2e:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate twanvandewiel.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twanvandewiel.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twanvandewiel.nl
www.twanvandewiel.nl

Other certificates including the domain name twanvandewiel.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for twanvandewiel.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329460005599154629178597118254897404575655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 21:11:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 21:11:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twanvandewiel.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926689850870400971078070760982789997211262478431810317378074215613402213966001285868361923810553195507515848144833170173056274054934543594865206994787811691254026614012538284890142505302528461089592338955581959867987654586811476774594258750377517711122695660540067352577796010141470727150799188413255069789285955491382143176057793786318262930593074811482839167017278469450896264897108142055008903000436927994676990776702996115863523296811721965533576485545005129758210893748534509396969284152047405790804578452287864023322035228648933653806401625324857117942466785556670033713467268814774146662547268785001486257942067537450535990009205890722052095211727514020490518029372177847619567302890724920482362697993057303246461366190387998192594041172413626288587805867567795079100872259571008254721008750435079695013190435951803071057646092646459261431507286897458732194150776551417525941925828830045150789773186569244520638357623139367163379444239469065822422951205129067493297278991907572963050425679504257718983814012129210190189874502894041724253213775140427183037561374276444617660658943466040216596796104938881631843045480329108268068267416113351422380893889961338982146208857175779357761186751512695082287077785077681210067648130651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							243a29d48707e4db62860013358198bdce3ec71a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twanvandewiel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twanvandewiel.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a516732b000000403004630440220268389dd15792e5be0534821fe4a117ffdb492ccdf29f8a32fad79289e8b63d0022009f0777c15ff30ecd1b505c6a7687330c7257422ba00c034f630a0983eec9684007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a516732d6000004030046304402202e313bac8931ec1a7721d33357ef889c115b0b9f56d1f43009d41e1ae1131e68022075c562c9e9fd68e1be7eef2bd35a59b9c0ab24ae055910982688e5fdd692cf73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0077b13c41cb3d05964be2acc613862c709c64b28837a6bc7eb9945b8869ca506c099526cf8ff9c38da7973622aa89d15f915724f697f0c27f0674af477fed46a0b576bcc8b8c441999696a70f7dc9566df35b7f210d44100629240f2e7a32a7a78a06143fb387189399da24586f24d85bb1ecce9e68b21cfb3d6c64e04d921d2bd9df870c29b603f3cf3ad711bb0953335e16c96c635c9badddd7adad0c7b27ad90fd8dd49f6d1ad73b2ddda900624fcdc51d5b7e8d9c9cd0c182a313d1d11a70b1ad571418db80058b4cf1a4b45bb4e74b56ac84a812f4d8dc308df86e3111f6ff66ddc2cb2194b602dec94c93196607733c2b7808f25b8091c7639b335c7843