actan.nl
Issued by R3
About this certificate
This digital certificate with serial number 03:c1:42:b9:e1:33:e0:9b:c8:00:60:2c:e0:0e:7c:2a:d2:79 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=actan.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c1:42:b9:e1:33:e0:9b:c8:00:60:2c:e0:0e:7c:2a:d2:79Serial Number (int): 327100048801314806859061502052255847338617
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 97:7f:d9:18:f0:f4:93:3a:7b:c0:1d:b6:b0:d9:34:2f:ec:ad:33:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5f:66:12:2c:cf:fd:6d:55:32:5a:df:11:97:86:8e:89:ca:ff:1e:cf
Fingerprint (sha256): cd:31:31:dd:d8:4e:80:25:48:57:57:67:45:ae:03:eb:6b:29:aa:45:cd:86:2e:4c:0c:90:0b:1c:1b:3f:b2:cc
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate actan.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for actan.nl
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
actan.nl
www.actan.nl
www.actan.nl
Other certificates including the domain name actan.nl
(limited to 100 certificates)
Certificate
The complete raw certificate details for actan.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISA8FCueEz4JvIAGAs4A58KtJ5MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMDcwNzAwNThaFw0yNDAyMDUwNzAwNTdaMBMxETAPBgNVBAMT CGFjdGFuLm5sMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmjg4DysK Ajhah7+CaaSaoGsVQUwlZ6o5iUc6bXIwDcmnGaFIBjEzguK1yIi7ha2DmAXLZWc6 vcdPDxhoAIs9rZ8bAXIChzYRNxhmLmUgitqlCXO3aJQL8Te1N56yEhjtFyYRPLo4 GzdIbupgvqOIJzm56Qiz1LTUFWm0/62kQGvEQ6GXfR/eMc3kre6g/ceKBretEmKA OERI4uSR06qde6wPsaMvS/iXsLNlNzc+dDEnk9DMAQWonCwKKT/cf+h5Ka3OOfCH ErefzqfP0TVXrMFcisOt7noCvNfNsGujt6gRlQZR7Q0ByhQomjwq4hEtq8s+7DZF 83ibdiOOysbUqSjpuv33okSinrc86PkT2RxOqsI4+qMZwJjj458vQHvnaS4k7q/t 27nTGPPY2KmNjvM77xq2db0fQiWYYaVZ3B4vyEdewcVUkncqM68dlsiDjFSS6XxU AvNXLq/zoe7yPM90K1ypV01i6l/uiE2MrrhMqeBdjqqr9d2JRXJW20qRAgMBAAGj ggIZMIICFTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJd/2Rjw9JM6e8AdtrDZNC/s rTPkMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCEGA1UdEQQaMBiCCGFjdGFuLm5s ggx3d3cuYWN0YW4ubmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5 AgQCBIH2BIHzAPEAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAA AYuozIf6AAAEAwBHMEUCIEG0xPNRABOsxBE+1E/r4cHWI6cmlwv0KCY/ub62jEon AiEAzYvJPfdCqFYEPBLuNHJ8o5yRrdOiEZGe20AZP3Z6iCkAdwB2/4g/Crb7lVHC Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYuozIiwAAAEAwBIMEYCIQCJVYeV+tkJ tPT0dbN9ndkpXlPDXPMH7q1CGVwuJba+1AIhAJNdlfxDPxxLEau9ebEQbGACLy9K LZz2ZcuaQkiZZnjoMA0GCSqGSIb3DQEBCwUAA4IBAQClvJHJfi3bVTvaZhXbkMEK uAPjHm1bbTrAx02OxSrPYCEw98M7rcv2qhcNKaBqka7tP7oYok7kmoZsWO2jhDji jSGRpUneaMC+8W57fKRxsT2EmNYMLzkcz0ltBzOXA13zaQkAydUXJ1x9nNXQdKpZ SX7rsCFpeY9FV7tVsfsi6YZBLFRVX6mVJUdEndThkbY83x5InnOgBMQU8Jw2uko1 SSvCjFp0/FPvM8cXP52RSje1sxkfagS3PCbA9JCP2VxJvsWfTT29GX4H2O9TrOB0 4tEmEypq42wp5NfH8vFs2CMkp0y9LsT9UBfmnzc/YLEvpy8PvuyJzSzjKoNpyKD2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmjg4DysKAjhah7+CaaSa oGsVQUwlZ6o5iUc6bXIwDcmnGaFIBjEzguK1yIi7ha2DmAXLZWc6vcdPDxhoAIs9 rZ8bAXIChzYRNxhmLmUgitqlCXO3aJQL8Te1N56yEhjtFyYRPLo4GzdIbupgvqOI Jzm56Qiz1LTUFWm0/62kQGvEQ6GXfR/eMc3kre6g/ceKBretEmKAOERI4uSR06qd e6wPsaMvS/iXsLNlNzc+dDEnk9DMAQWonCwKKT/cf+h5Ka3OOfCHErefzqfP0TVX rMFcisOt7noCvNfNsGujt6gRlQZR7Q0ByhQomjwq4hEtq8s+7DZF83ibdiOOysbU qSjpuv33okSinrc86PkT2RxOqsI4+qMZwJjj458vQHvnaS4k7q/t27nTGPPY2KmN jvM77xq2db0fQiWYYaVZ3B4vyEdewcVUkncqM68dlsiDjFSS6XxUAvNXLq/zoe7y PM90K1ypV01i6l/uiE2MrrhMqeBdjqqr9d2JRXJW20qRAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 327100048801314806859061502052255847338617 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 07:00:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 07:00:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'actan.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3499824781694553751191037041748489328851428055811720252179675867985046846564268335823725174158250792510917282379478739751200204823928724957746741811848607220459464591817840510973068263514396401228805433607195584096895652025207312694178199784366552045992421102061165073732521543957735899988180346905074903225655849307864814217580411488669108742933295546873129025668392074662687647419851819640002118463177556972590312479943741304381128622081584468199946719885803876160385478631653494201758338620561131010948003465740950041790092083473649276825289237933366293999941150757175723709727219319927658713505305749426002232459732846619991381342921455846720050001497988811333539807595763234600483911900941074963321299003384597547593938112817851145108081483359725861799242764267691949831992084348685564547526093446299572317912364130371117124275128672443835844294891321222595594098579886441600269188689468469012749361104908576851849071249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 977fd918f0f4933a7bc01db6b0d9342fecad33e4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actan.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actan.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ba8cc87fa0000040300473045022041b4c4f3510013acc4113ed44febe1c1d623a726970bf428263fb9beb68c4a27022100cd8bc93df742a856043c12ee34727ca39c91add3a211919edb40193f767a882900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ba8cc88b0000004030048304602210089558795fad909b4f4f475b37d9dd9295e53c35cf307eead42195c2e25b6bed4022100935d95fc433f1c4b11abbd79b1106c60022f2f4a2d9cf665cb9a4248996678e8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a5bc91c97e2ddb553bda6615db90c10ab803e31e6d5b6d3ac0c74d8ec52acf602130f7c33badcbf6aa170d29a06a91aeed3fba18a24ee49a866c58eda38438e28d2191a549de68c0bef16e7b7ca471b13d8498d60c2f391ccf496d073397035df3690900c9d517275c7d9cd5d074aa59497eebb02169798f4557bb55b1fb22e986412c54555fa9952547449dd4e191b63cdf1e489e73a004c414f09c36ba4a35492bc28c5a74fc53ef33c7173f9d914a37b5b3191f6a04b73c26c0f4908fd95c49bec59f4d3dbd197e07d8ef53ace074e2d126132a6ae36c29e4d7c7f2f16cd82324a74cbd2ec4fd5017e69f373f60b12fa72f0fbeec89cd2ce32a8369c8a0f6