bosincasso.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:ab:13:37:cf:d3:89:2a:64:32:8c:2f:e2:e6:7a:1b:3c was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bosincasso.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:ab:13:37:cf:d3:89:2a:64:32:8c:2f:e2:e6:7a:1b:3c
Serial Number (int): 270411597108142897767302822626968701901628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:64:59:dc:34:47:de:81:8f:6d:f5:f0:00:8e:b2:56:6f:22:64:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:21:9e:4e:c2:26:21:88:2d:b5:6c:ef:c8:b8:c6:76:94:eb:ab:9d
Fingerprint (sha256): de:a6:40:de:bd:ad:4d:2e:ee:77:07:4d:aa:a5:1d:9f:4e:ef:21:7c:eb:10:c6:69:1c:f1:26:9b:c2:08:e3:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bosincasso.nl

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bosincasso.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

area.bosincasso.nl
biblionet.bosincasso.nl
bibliotheekwaterland.bosincasso.nl
bosincasso.nl
buurtkadoos.bosincasso.nl
cwz.bosincasso.nl
denieuwebibliotheek.bosincasso.nl
engie.bosincasso.nl
erasmus.bosincasso.nl
gelreziekenhuizen.bosincasso.nl
independer.bosincasso.nl
mijnns.bosincasso.nl
mzh.bosincasso.nl
nedasco.bosincasso.nl
ns-spitsreizen.bosincasso.nl
ns-uitchecken.bosincasso.nl
ns-uvb.bosincasso.nl
ns.bosincasso.nl
nsfietskluis.bosincasso.nl
profyte.bosincasso.nl
tele2.bosincasso.nl
www.bosincasso.nl
youvia.bosincasso.nl
ziggo.bosincasso.nl

Other certificates including the domain name bosincasso.nl

(limited to 100 certificates)
redirect.bosincasso.nl
webmail.bosincasso.nl
payportaal.nl
redirect.bosincasso.nl
ns.bosincasso.nl
portal.bosincasso.nl
ns.bosincasso.nl
webmail.bosincasso.nl
transactions.bosincasso.nl
payportaal.nl
bosincasso.nl
bosincasso.nl
bosincasso.nl
payportaal.nl
*.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
mijn.lavg.nl
*.bosincasso.nl
portal.bosincasso.nl
transactions.bosincasso.nl
bosincasso.nl
bosincasso.nl
*.bosincasso.nl
payportaal.nl
support.bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
portal.bosincasso.nl
bosincasso.nl
redirect.bosincasso.nl
portal.bosincasso.nl
mijn.lavg.nl
redirect.bosincasso.nl
payportaal.nl
bosincasso.nl
webmail.bosincasso.nl
bosincasso.nl
bosincasso.nl
webmail.bosincasso.nl
redirect.bosincasso.nl
transactions.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl
redirect.bosincasso.nl

Certificate

The complete raw certificate details for bosincasso.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270411597108142897767302822626968701901628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 22:02:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 22:02:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bosincasso.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712573366744960578443506202162900755592868863461712249718926717537985672313027098901425982410081897918847894438454789524632725112755845872571518143215438663407041261407126841142117496927231134654934678990306380524540065886600515213804904108490356984160543352763420268257851574651268544183297266074817846578155252826742434583609541293423802901310082086614889396420924384240255828865149068462474432373731657893573269130362880771549462843786761097637156691551612318636598031463172922160767706163632627836522017247312426738341432691373468377047558997727833615961685271779106935444653345700247991622987933698946683418354095748666527042199378135000763645332359690638430647918138548444448512937627375492606195063404489963028158677550185855692083524618123296456458375393462249459374011800886791310580611568413163150375888276447118003955277607419147389555354574967650903062426888227648073160547097294157900428236559005393076482153134346657567997749844333477321295269068480920593836970001653881022182754217120704994284987607810742130055838796729729900036366495963320399393045763568182399603004952750098630060878933882784314915933571562481748076451650772178142573869164283249748809830758953672652380428112486886058707397004522208177695981224681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f6459dc3447de818f6df5f0008eb2566f2264a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (581 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblionet.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibliotheekwaterland.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buurtkadoos.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwz.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denieuwebibliotheek.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engie.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erasmus.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelreziekenhuizen.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'independer.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijnns.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzh.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedasco.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-spitsreizen.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uitchecken.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-uvb.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsfietskluis.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profyte.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tele2.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youvia.bosincasso.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziggo.bosincasso.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018daf02181000000403004830460221008afe399352710b99d04d2b6950492d9fb90d2ddfd50e52870af3a881af35d2ae02210086f1648b98b8114f668a087e5669d7816da3017484a0aba7b11cf06c5b25cc4b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018daf02192000000403004730450220461d94b31632b51c025a7ce25d3b96f95c01f6955eee5050418150a6662f640b022100e419254c056179ffeda4867848739f45093c4be59580cc2eb61cb40fad1fdd2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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