*.bluefieldsmartaccess.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:eb:7b:20:33:dd:b5:01:08:5a:07:bd:22:13:16:49:f6:00 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bluefieldsmartaccess.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:7b:20:33:dd:b5:01:08:5a:07:bd:22:13:16:49:f6:00
Serial Number (int): 428579162202410875004270701771429843170816
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:ed:b7:b5:42:96:c4:ad:ec:2c:44:dc:d4:8e:8c:18:25:7c:d6:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:1a:cf:6f:98:af:7c:4b:25:7e:f2:c2:bf:bc:8f:b3:c6:1b:0e:b6
Fingerprint (sha256): e5:c0:df:32:90:15:b8:83:35:04:0c:9c:f6:57:ed:3b:f0:b4:e8:19:29:f5:36:ff:24:2a:60:40:28:9d:bd:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.bluefieldsmartaccess.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bluefieldsmartaccess.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bluefieldsmartaccess.nl
bluefieldsmartaccess.nl

Other certificates including the domain name bluefieldsmartaccess.nl

(limited to 100 certificates)
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
www.bluefieldsmartaccess.nl
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
*.bluefieldsmartaccess.nl
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
status.servada.com
www.bluefieldsmartaccess.nl
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
*.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
bluefieldsmartaccess.nl
*.bluefieldsmartaccess.nl
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com
hoogvliet.bluefieldsmartaccess.nl
status.servada.com
bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
www.bluefieldsmartaccess.nl
*.bluefieldsmartaccess.nl
status.servada.com
status.servada.com
status.servada.com
status.servada.com
status.servada.com

Certificate

The complete raw certificate details for *.bluefieldsmartaccess.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvvwMrEi5YLE2KPILq8u
Kij2oUao9aS8qygfLQXHbdbtGzPAKAwqSxV/WTJnw0Q5PvcxdQsax0FVxTP/d12N
dQGFdB8d3eswomMSOTSTZCEcM+Tte4qkFEbJV+y+dTaRaybi+LuNIJF+jh6evEF2
/1FzP2j9kGWKtnaFpaMvCz4Xz9QJWRhCQty+9w2Cei9O+sloJa938VNxFjHgaBsc
DOOFlde24/7v1ATAQrkOgzbzaoQjtCkmJRpXJfZhMON3lv41qykgc9DO6ZZmp0DY
CqxlXOaBaPcNhudkKPmf4kW2/zeKoInjWKuQ/DQLDg0CBngUDACYXo84AE4oEpZi
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428579162202410875004270701771429843170816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 09:57:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 09:57:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bluefieldsmartaccess.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22594653676936607977150106012546488057971863044738558006484111659404251003701605355891996673498568952596928980970050793362325565552831183619555705971037752566061021002445091507712215454124295626677227659620989658130249427497165030995004841836011512320405338504312066797372853483523130893743988038130792439150302424710320135293301363719189397822691790140609021715761509860610970715440965787834175580265793682706990598988528366556703019681018141785532145953216449550197571496799813620730259387093585466444913683738237114364290515195712794881935386014028020050299564840140125800000353697943116291727985940008890021601949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80edb7b54296c4adec2c44dcd48e8c18257cd6f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluefieldsmartaccess.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluefieldsmartaccess.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017120ca335e0000040300483046022100eaf37bff9187d3275553f18b9472f7e57a9b106e4102da451f54911204f5995e02210082592bcc1e7152cbe534e483f3005cf33a3aa0e69b9d5cf2ce27fc22c91faf6e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017120ca3389000004030046304402200fb195f82bad49bd61a7170a43f65fa08f3337c2a53899349ae0753a03c75c260220187e15b51aa791495345d6304351c51cebd1d2fea1fd91af799ce57f23ff887e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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