rondombaaz.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:90:ab:7a:75:8b:d8:71:6a:7c:11:bf:86:e8:d7:8f:f2:b1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rondombaaz.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:90:ab:7a:75:8b:d8:71:6a:7c:11:bf:86:e8:d7:8f:f2:b1
Serial Number (int): 310565452463513464632161605559381197320881
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:09:4c:34:ec:26:f1:15:22:72:db:3b:65:a3:0a:e9:bf:41:0f:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:b0:76:6a:14:b8:16:61:09:83:a8:8e:ce:db:f2:50:4a:e8:30:0d
Fingerprint (sha256): db:87:a3:2f:01:7c:82:a0:66:e7:9d:55:86:b4:7e:88:de:14:fb:82:dc:9b:4b:ee:e1:c6:8c:01:bf:17:a5:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rondombaaz.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rondombaaz.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rondombaaz.nl
www.rondombaaz.nl

Other certificates including the domain name rondombaaz.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for rondombaaz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310565452463513464632161605559381197320881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 01:45:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 01:45:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rondombaaz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665573598162864804984076193520177890402158762707637361754215934606786437875700932294466715969486117161902114909587245718987001864217040034029817632402912007478900378583374564353591685587260618297664160450570036547573088455402618250994308973326292007079320991341862118618494260362177300455272090254741224951748678920230466062163981956057863262955209450772179009216516968252928319981637084016583752659883902865810139350699824100934858533550299733565087815741368136214721595201757006984177889385679697283850425928408256278242348782774026649274067790320773036894592671095197082193609582375961440004425312460769505976641427776127378722353966839710787323005313405009242538573310015538513118846076781489403346598542973248149036245770668951497289334889728014873204017107464118056003570700931906412496433146861537361054034897797822024954342072761248927107464394055976217481798754057114940206683498754418375677009846199280714712137388648030807075237904927056426702318586232689274889598674677334445638219609414316671395346474146103027615912084677830139631303213423503062160286450696865778695501246552362089474954302140930130629736298407370519493851624154569898226341792213417024395913133830072698677205344142118703187055085768768244267073672863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71094c34ec26f1152272db3b65a30ae9bf410ff0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rondombaaz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rondombaaz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ceab67f54000004030046304402200fcb02e857b8292f4a658ede517cf4f73bf8bfb7ba66f2337693ab532b62e655022013dc0388349cbedd0defd5a8f15936f46f418ce64067230932b948b3870911a5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ceab67f700000040300473045022100d80ff955655a290c8bc244b7adc00d3d424f8469c352d1866b0a76c18c1784ff0220222b1ccc609fba6450180946a775ba73cd3b0e24a99320bc191e428bb275dc38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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