bureaustof.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:5e:52:e5:8e:bd:26:f1:4d:f8:c6:22:4d:5d:cb:c1:51 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bureaustof.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:5e:52:e5:8e:bd:26:f1:4d:f8:c6:22:4d:5d:cb:c1:51
Serial Number (int): 304678096250166844806462861330241913864529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:2c:ae:62:92:e1:b1:2a:ff:98:8d:cc:9b:08:f8:e3:79:4b:d5:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:14:a7:a8:74:f4:a3:1c:96:55:fb:42:51:35:46:5e:8d:ba:9f:f4
Fingerprint (sha256): cd:eb:b2:52:f1:be:30:76:84:3c:55:73:69:06:1c:53:fa:d5:af:d2:db:b9:32:95:29:b3:fb:78:fd:68:8a:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bureaustof.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bureaustof.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bureaustof.nl
www.bureaustof.nl

Other certificates including the domain name bureaustof.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for bureaustof.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304678096250166844806462861330241913864529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 21:17:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 21:17:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bureaustof.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701832986779295488257031902497651216902558970321327377301826853175563507526839855444464754349727755392913806611115015703685658408849650825109430520300319701245262765854080169575164807377942181843541968158861475359105079593858138986464851340715970095166801023514399936288447828787437102352079528574490021432311565143287364217356443875759140575597405535201555243787516039983377081267179162243735857781467239766383215504311590449085177783741461802261838716033042523946908244416378125230723086784276555460982400609111761923028050527631695467703660977062873812727696363099960237743206707120066722556205582751172533424081896063524099780026318113259631255037528350773929792969296622149855058250925380979338008442531997576028296502185986836701048344596419003351984865646328945186745363847082719035295183212912913401461899535330639402586398072432446692443568719853474557971908989809626878377569778655960675848827111192244201752838701491250359101410448918774801910653483985853656271218256377429999019929827154958355071702995629349227640482748771627045576801954689232792218902952271896012763202193995454324854138969489919383373210680038690339316072902507269026770790016851559646527121202202562971312993246902426209929817407957826624943813097591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa2cae6292e1b12aff988dcc9b08f8e3794bd5ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bureaustof.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bureaustof.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd6a606150000040300473045022029a5751b3dcc52b6f91cdb210a7bda28b37ceba4827778c0a2963cd77be5d190022100f7a47e6ffc4c89aa517ecb7b7528463dddca42ef6f75382e65cdf960f8c21af8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd6a606080000040300473045022100c0037b400626244f579500160a1af1b157ab82c119410ba66250f4054de8853a022008afb143ff6a56afa2772843f6932500ce175d56cc07588a5f5d8dc8032978e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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