www.studiope.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:3c:11:5c:d9:9d:4d:17:c7:76:38:51:67:f6:96:bd:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.studiope.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:3c:11:5c:d9:9d:4d:17:c7:76:38:51:67:f6:96:bd:6e
Serial Number (int): 274347431570292968743596798620114166922606
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:5b:9c:0b:3b:27:3c:c8:9b:89:88:46:c6:64:15:71:b8:94:27:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:bc:ff:7c:70:89:b5:99:75:8a:67:27:50:93:76:ab:00:1d:6e:fd
Fingerprint (sha256): ec:a6:a8:42:e4:44:a7:dd:41:2c:d6:3d:95:9f:8a:ad:c9:45:1b:a2:4f:df:06:7c:57:1d:7c:69:a5:99:df:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.studiope.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.studiope.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.studiope.nl

Other certificates including the domain name studiope.nl

(limited to 100 certificates)
www.studiope.nl
www.studiope.nl
www.studiope.nl
www.studiope.nl
www.studiope.nl
www.studiope.nl
www.studiope.nl
www.studiope.nl
www.studiope.nl

Certificate

The complete raw certificate details for www.studiope.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISAyY8EVzZnU0Xx3Y4UWf2lr1uMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMjkyMTI1NDRaFw0x
ODA0MjkyMTI1NDRaMBoxGDAWBgNVBAMTD3d3dy5zdHVkaW9wZS5ubDCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANq4qEQlM8WSH5nJPINRMhYpELHabL2k
9u1A8spt3sUiWznGWqnpd77VOScVahapsLINQqolaPpVmriEOnfPLMIiVWc35G2/
uhw1+EvgR1qJpZLZUi4x9GGmoKC92F2niTOr29NgSXNk25An0oQp+KvYSi9741z4
0JzDP4fzA4yT/wMKj6f8CNIiivd2wlyJJRp0pjywmV2LuyROkc240cWAEkD74aL/
b+1F4t9cQ25qY67UynWiHYcxmIrdG/waor8OIDlU2UfuIRooSGnm+14/VZIrZP63
mdLhHKNmBEf3WWBzF9/ygdbCF78voCgh80tkHAczjf8rv02ZTQILjrYXVka8MrVF
JZ6RWapPHSVWDxCtQMa/H9CQ3mh1cxTTrZ7ccvNO+joZCXl4rvJxKa8Edhrru6Vl
wNoPH+xmq33vPC/Ebg+fuqN2djXKDqN9Mbs/N4Ygv5ZkI1McNQ39vHWY4+N5WV0m
fi1SXF6PJWHmLQB4MFqi5h43h5PdTXDvp1RpzJvMZ1uZ0iPIyU2oj+NV5eT/+IYC
oYatqA76TJLOMqrmr31GU7PJvElytEN5wS12j28p1y/Qni8blmTvaSBdN7QjaLOI
i0SaXHgPDvN5YZi9BlGBB2Yb1/GKsG96MSvxMX0eC/L5g7dBU+Pq21Ih4IL2bm+a
txvbCaUPgwvZAgMBAAGjggIPMIICCzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEZb
nAs7JzzIm4mIRsZkFXG4lCeGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LnN0dWRpb3BlLm5s
MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwIC
MIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBi
eSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRo
ZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlw
dC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBACwrSuM77i31aJ2p
eHP21bfVQrg6xJB5OLh9zRw2/1HWY6toWNo83RxYXfBUTEyTmSaMiG+9xxz5flEO
sEmpyr0Va8qSyfWyX+LRyqFiYi3H1K2VUV6HkgglMxmZEZuWLQe2kik/qv4bfkOD
KeeYSfzx4uBkPYwR4S4f6sWKWktjMYmnvJKiAnVyosbtf7BMHZmtCiqoA4C5qqoi
fJzrDqVV6/ABz6WYzd0nk0p0FM5JQzbPPcnhiOYmP2fZcQbQuxUOGg2urO1QwQwt
HxPvCXrxPLcy6q99LP4oo/0pOiwUNjKtbHhXmiN1RyBKxm/iDhbO1J5kKhWxRWVo
duGnQeY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274347431570292968743596798620114166922606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-29 21:25:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 21:25:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.studiope.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892305125644836014842101311521838552420252023012898327627743270382674398748595546637395138522747380849587305674819621847009230275581084461680773494127539801397573517052195123409941970400708416914947546437690000140261463378465146342848292904612408583984438623476771897010788376102696748288139527359240979264303022411024184517323761949474192575677048819092638350306742243852971148845323433437631085766313154915063234804227731281686464434609383070156552206631379265609551849469942588723588997129778635426157093173203172916643503531573822397162278991514842865982186513878872367523084975191669792411790329291686098747208536481909843597775444415399910046951512421361588223899306513415731069765334758578374556243209206756928621778690743317919695236766444059939036225052388690487903444050423821292689082367191786550763043571780725957212015394037730856249694417602913770960999254133521658873183534262192363075359512589795894912456764512491181611650023336256873813014972109248749508823509866988777440765048690152983501965205110862319974037155903667887239853548251376931698440368757738745617295150171474498689136856364871902945750700459096892404302571390777627465596480554426252627042200960618359595713071091857297866331323734065573967241087961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							465b9c0b3b273cc89b898846c6641571b8942786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studiope.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c2b4ae33bee2df5689da97873f6d5b7d542b83ac4907938b87dcd1c36ff51d663ab6858da3cdd1c585df0544c4c9399268c886fbdc71cf97e510eb049a9cabd156bca92c9f5b25fe2d1caa162622dc7d4ad95515e87920825331999119b962d07b692293faafe1b7e438329e79849fcf1e2e0643d8c11e12e1feac58a5a4b633189a7bc92a2027572a2c6ed7fb04c1d99ad0a2aa80380b9aaaa227c9ceb0ea555ebf001cfa598cddd27934a7414ce494336cf3dc9e188e6263f67d97106d0bb150e1a0daeaced50c10c2d1f13ef097af13cb732eaaf7d2cfe28a3fd293a2c143632ad6c78579a237547204ac66fe20e16ced49e642a15b145656876e1a741e6