rotterdamrealty.com

Issued by R3

About this certificate

This digital certificate with serial number 04:38:2b:85:95:37:38:d6:de:26:f7:69:fc:f3:fa:7f:4a:18 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rotterdamrealty.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:38:2b:85:95:37:38:d6:de:26:f7:69:fc:f3:fa:7f:4a:18
Serial Number (int): 367562806680368647857197022406777776327192
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:12:60:b3:0b:dc:50:14:18:5d:4a:0e:84:d6:3b:5e:be:06:50:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:96:17:b8:cc:67:f0:ca:6a:61:8f:e9:f9:33:c4:45:3f:f8:4d:24
Fingerprint (sha256): ea:97:16:c9:ee:40:be:e1:f4:ae:30:2a:6d:a2:49:5f:69:8e:1c:e3:17:0f:58:be:f3:c7:fc:43:0a:2c:25:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rotterdamrealty.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rotterdamrealty.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rotterdamrealty.com
www.rotterdamrealty.com

Other certificates including the domain name rotterdamrealty.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for rotterdamrealty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgISBDgrhZU3ONbeJvdp/PP6f0oYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTAwNzAyNTJaFw0yNDA0MDkwNzAyNTFaMB4xHDAaBgNVBAMT
E3JvdHRlcmRhbXJlYWx0eS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDs5Py4K5b1OAuNMn9z+Luz61k24/OJL3/zH+9ZzFMbp29ze7GkOH799EKa
VObllYrzRzGzfcM6ximXxY8KlKDkhnVONH1rYkHtWD6+cCw8PnOQekrzBe3mUywk
pXq1n/kMEwd70V+2SGIEws8PwxDWFdGEmWMVdWHLZL9pj5M3GtOJ+RiToJ+pM1gI
c+xaLKIxIGunQaVnB5IPNeBizSDWZ9CVKXm/2gJdPpLIW/7wnEz0A+eM8UMODi5e
ECQBkR4XOokqa6GReOQcyJKfgmq/zolIBrao6pUsy56oBX4GUD1+zcsWLrePvTGi
rCNUR35zJwCjPdY/vRh1ep/d5mD0vQQwDBOYx29lJm8/YZJNVJFmAFEX5mYh8BZm
cykB3AbLefdN1AjYcF0J6mpf5nVjO3xZH+hqnC4s5dglWnpbtjONBQGAh6OJ4rtH
cpB9nHNj8Verc/qY9xgof4+t6NHDj2Dzs3HbAoEVEzXTCpDEnAEN5N4s5gECpq7n
u5mRdxMZjEsvydppfNtTdmtpiUc8e8Xias2Jdj4GhztK/J78UCvxB0eyduyzi4ma
CpLckWt9rXRfD9LY5cZnign9A4Q9E8+Lx5XgV4eAlSNUnj8V0O5IOrEogow5i1P8
MpmZhswgJCSyIwzWACH+A9yyzJWXgVxkJL2aFWFDZPjwg3uUXwIDAQABo4ICLTCC
AikwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRHEmCzC9xQFBhdSg6E1jtevgZQ2TAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzA3BgNVHREEMDAughNyb3R0ZXJkYW1yZWFs
dHkuY29tghd3d3cucm90dGVyZGFtcmVhbHR5LmNvbTATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0D+VqAvqdMOsc
UgHLVt0sgdm7v6s52IRzAAABjPJlRqkAAAQDAEcwRQIgOdeY7PGBfoJ2bKwlQAjF
FSVJDdnBVS4fC7ZEHdNfAyMCIQCwbnc4S1aIzqN3mD5/ASzzpx5rJRiVp/ti7rzJ
9B1uywB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjPJlRucA
AAQDAEYwRAIgR/UUQanzNvIUbbxM19oOlBaIduO1bU8APXsn7nbhHxsCIH6VMrtd
y7aL59rqGt1pYW+kbVy0pmS9V+/d7cLCtmwnMA0GCSqGSIb3DQEBCwUAA4IBAQAg
iVDm12beyZjPrEpn5tOh/f6TzYP8zynJfaQIo3g51aW87glR6655Z721eyPbt3oB
hJEaVM+gAhWqIpi5iHOneNNdSrZKPrSD0NFJtGjcofUpcTbxULWsj788eGHCS0Y8
I38zi+ri94ks8A2hQ3y/J0R6Mk3/73hRdZ4ZCJDk87JIw9sZb/pn7ofjbUNT4Qtl
sc/8Dcsu9RJP95YrFlyTZPnXn+eMX+93TmwPvx7SHF2IpCagjNTdRdGIcsEMzJmG
RXkwt1uhbxmxteDqFReBkhS1c99GI5DYT//osrHvecikQLWhgxluZ4EQ6OrHfx2S
ZKs9GrAEwii02D9zzymk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367562806680368647857197022406777776327192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 07:02:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 07:02:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rotterdamrealty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966445164942657650435985094200836283865424824089445436733996961959073970171585193834327540653106764751707503980844171382116152317306126454073928354702133544425022480468153887390402670683017078733754481761799525010615843955291215055158547190936218914799056702698542023177673588387767611910257140828508569121203087481369660729754373913564916472241749445244922140773342948784334374284145151949473494234849552156091688293108612688036903798816413515559333844029870318556635904774921842938615968512064023108812577156584447099207223351165389949181845880982957011960531012950595740411218283628513327664703077758783658686594065907119555540300079406022191965275752162499202407011395921142231037985388784489597312622776433243121083024403920347338438734671824726288407682851451598111229091479810173766272773368355232483157396291901670607879590832856288085474503903294307532268984106398061891361865739434897237030131442555600666811968333149640644994569698017727151808159851281724421482882191603439317977167392535588823271961003086806798807491785242714286402608792709306925496074375037397935819606257392331999120956536992778104121743908272788047343680990047857093337901730425562423752962413721619044885089044139805946788014797093601958887285298271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:7|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotterdamrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotterdamrealty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf26546a90000040300473045022039d798ecf1817e82766cac254008c51525490dd9c1552e1f0bb6441dd35f0323022100b06e77384b5688cea377983e7f012cf3a71e6b251895a7fb62eebcc9f41d6ecb007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf26546e70000040300463044022047f51441a9f336f2146dbc4cd7da0e94168876e3b56d4f003d7b27ee76e11f1b02207e9532bb5dcbb68be7daea1add69616fa46d5cb4a664bd57efddedc2c2b66c27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00208950e6d766dec998cfac4a67e6d3a1fdfe93cd83fccf29c97da408a37839d5a5bcee0951ebae7967bdb57b23dbb77a0184911a54cfa00215aa2298b98873a778d35d4ab64a3eb483d0d149b468dca1f5297136f150b5ac8fbf3c7861c24b463c237f338beae2f7892cf00da1437cbf27447a324dffef7851759e190890e4f3b248c3db196ffa67ee87e36d4353e10b65b1cffc0dcb2ef5124ff7962b165c9364f9d79fe78c5fef774e6c0fbf1ed21c5d88a426a08cd4dd45d18872c10ccc9986457930b75ba16f19b1b5e0ea1517819214b573df462390d84fffe8b2b1ef79c8a440b5a183196e678110e8eac77f1d9264ab3d1ab004c228b4d83f73cf29a4