dgljuridischadvies.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:12:ec:fe:0f:e7:38:14:a7:b2:4c:4d:ae:df:bf:70:0f:9e was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dgljuridischadvies.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:12:ec:fe:0f:e7:38:14:a7:b2:4c:4d:ae:df:bf:70:0f:9eSerial Number (int): 354889243304580392647620013443292916092830
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 4a:e7:c1:51:4f:48:c9:5c:b7:de:e1:66:63:a2:b6:4a:fa:be:e4:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 47:fa:6f:47:1d:a3:d7:8f:37:cd:9a:d4:df:7d:30:98:30:c3:08:a2
Fingerprint (sha256): ee:f6:37:0f:83:6e:bf:f1:8f:71:62:85:c6:9b:a7:ac:cb:e0:bd:e4:7a:c1:92:f2:6f:0a:89:29:1f:5d:45:c3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dgljuridischadvies.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dgljuridischadvies.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dgljuridischadvies.nl
www.dgljuridischadvies.nl
www.dgljuridischadvies.nl
Other certificates including the domain name dgljuridischadvies.nl
(limited to 100 certificates)
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
dgljuridischadvies.nl
Certificate
The complete raw certificate details for dgljuridischadvies.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgISBBLs/g/nOBSnskxNrt+/cA+eMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMDYyMjE4MDRaFw0x ODA0MDYyMjE4MDRaMCAxHjAcBgNVBAMTFWRnbGp1cmlkaXNjaGFkdmllcy5ubDCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM0GSzJInrFyHfPFl32ju7wx /+Hv/A3LJUv93ohgGMgWxoKr+UIO92LB7UH4XvvivvLM8F+Gltt88P4VhnqxU5bI jpIeDZ8+RlckEndPV8Dqp5gBl3rt4dkyYBuqeRso8Vtbc+kwKxTL96XZGwEPH8R+ 0+GqbQLxByD/+VzX3d0dvRpm6aicerU1+4Y9CJypkK4aTnNbnsaf67b5vIGVh7ve vKeLyUXaLixzNaTGdfKSklvw/KUhWXq8uP9qZ8dITnYEP/Elep+9x0VkPfKpzLkE 5DNdFkmLSUWAOPW7ZLdKzCaXLn5MuD+CJoY0MV93AwO+2Tgp0/Zso10ybwHJTYic +K5c6a+0+xVyxVF/jMjKccBwdBWt3eQAy1893k5r75UvIJEztvFdN9ZhFaeXnq/E Vy1OzBmcucGITSZ8nfK5p51P0VxcIS6gapcfnWMGeXCXfIUwRtsDYpOkl3hVEh+H PF1jWoMaxdQCKDcq0dzkYYohVZTQfOsIDc6LO5m40t2tP4R0itvTm4HAI/Vfe0Vg 7fm4Dn4QxI3FBBE3PY5kq4Rk7EzkkAQJEqUcWY9yw0I4HFE6vWOe+BAEwCIei4r1 pkDmkAYRoDgyjqjBMmqpXXMYYrM8OMXUUr+wjm36vfTvhR+sC/pswDAxDcxsQThQ 8/NV+XtCVUeLc5BQnOOfAgMBAAGjggIwMIICLDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFErnwVFPSMlct97hZmOitkr6vuSEMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIVZGdsanVyaWRp c2NoYWR2aWVzLm5sghl3d3cuZGdsanVyaWRpc2NoYWR2aWVzLm5sMIH+BgNVHSAE gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAC1/rMQ+eYCBCID+xRoPX/JiQcJ7 3Fjubw9rdoC66IKUJ6XMirV4x3YSNl+C/JfFB9mxeYRddsBiLE0fZdP7JCzvu86W djumDHbreLj4iEhsNFoeji5Pg4f9a4+Yfsw4MDN09f4ndlK7VEaa73bZxMRs9F96 YKRR4f3/HA5VazosoqYTjQzl0vkiAzZDkWaPiHXsc1rnerKns550yiWhqP9JrX2Z dgqEORGxIq5d0c7vT+32G7DAsdGYrwMFRszyVCEjbqszFwyQNwN0XPNC5GbNcowd lwxlp7XIJz9I/lpJBU2yqtsB0l3yq5igxIixZ/ROzpim8iin3IFoNokxslI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzQZLMkiesXId88WXfaO7 vDH/4e/8DcslS/3eiGAYyBbGgqv5Qg73YsHtQfhe++K+8szwX4aW23zw/hWGerFT lsiOkh4Nnz5GVyQSd09XwOqnmAGXeu3h2TJgG6p5GyjxW1tz6TArFMv3pdkbAQ8f xH7T4aptAvEHIP/5XNfd3R29GmbpqJx6tTX7hj0InKmQrhpOc1uexp/rtvm8gZWH u968p4vJRdouLHM1pMZ18pKSW/D8pSFZery4/2pnx0hOdgQ/8SV6n73HRWQ98qnM uQTkM10WSYtJRYA49btkt0rMJpcufky4P4ImhjQxX3cDA77ZOCnT9myjXTJvAclN iJz4rlzpr7T7FXLFUX+MyMpxwHB0Fa3d5ADLXz3eTmvvlS8gkTO28V031mEVp5ee r8RXLU7MGZy5wYhNJnyd8rmnnU/RXFwhLqBqlx+dYwZ5cJd8hTBG2wNik6SXeFUS H4c8XWNagxrF1AIoNyrR3ORhiiFVlNB86wgNzos7mbjS3a0/hHSK29ObgcAj9V97 RWDt+bgOfhDEjcUEETc9jmSrhGTsTOSQBAkSpRxZj3LDQjgcUTq9Y574EATAIh6L ivWmQOaQBhGgODKOqMEyaqldcxhiszw4xdRSv7CObfq99O+FH6wL+mzAMDENzGxB OFDz81X5e0JVR4tzkFCc458CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 354889243304580392647620013443292916092830 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-06 22:18:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-06 22:18:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dgljuridischadvies.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836427331611357507069594504692846477848716136091462643647601538951229393693640458177066536745131162021768104085711137763236916194534350273458953598372344270357111972476318723722838508311407292431566593015173277026904407023783163065082529289125056807288537122241608851726678613701393775619027508886106863308001012188218658039688084569092773521043938604119799852029899133148308711612635975302369534423082594684258649023371967112224254204275999046207233787954345906215009271931865302848265006203709483798398895895768652021075399333096163759437859517165344247078780150604354462125484950975165608726056037804508511151769251587614918156101265533152231961512568217851126077242760920952127039516732421423342651238500434888397781887554180995831348706663690626719791235867702701211005659256231870757222090501865718966853717665938024813953568607128627075973157559043472945868876938517027181501533369926515190220515405459617213226750085928403779177593212293676076822376814597337457270676357542996195216800239433664276471543174515909976218997382380276935769858214316870298042812724984704671314927357149189205227079237032580111907321337927918846076092279648197603138555509928586726458563671501813432461079798172275942380909586513634812915546383263 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ae7c1514f48c95cb7dee16663a2b64afabee484 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgljuridischadvies.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dgljuridischadvies.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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