dekunstwinkeldenbosch.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:54:a8:22:50:13:7d:89:aa:3f:9e:ca:4f:bf:82:6f:e2:14 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dekunstwinkeldenbosch.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:a8:22:50:13:7d:89:aa:3f:9e:ca:4f:bf:82:6f:e2:14
Serial Number (int): 377256351013921829001151775335217061945876
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7c:6a:f2:32:6d:fb:22:e1:f7:53:ae:f6:59:7d:58:46:99:62:e6:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:d9:ad:83:72:52:ff:33:d2:14:5f:07:37:12:f7:e1:a7:28:0a:3c
Fingerprint (sha256): f0:93:ee:dc:14:68:f5:35:54:39:85:56:e2:24:92:88:2e:ac:69:cf:c4:01:d2:c3:99:9b:f7:c5:48:1c:94:55

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dekunstwinkeldenbosch.nl

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dekunstwinkeldenbosch.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.kolinc.wbkr.nl
dekunstwinkeldenbosch.kolinc.wbkr.nl
dekunstwinkeldenbosch.nl
kaichang.kolinc.wbkr.nl
kaichang.nl
mail.dekunstwinkeldenbosch.nl
mail.kaichang.nl
mail.stuch.nl
stuch.nl
www.admin.kolinc.wbkr.nl
www.dekunstwinkeldenbosch.kolinc.wbkr.nl
www.dekunstwinkeldenbosch.nl
www.kaichang.kolinc.wbkr.nl
www.kaichang.nl
www.stuch.nl

Other certificates including the domain name dekunstwinkeldenbosch.nl

(limited to 100 certificates)
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
www.ko-soof.kolinc.wbkr.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
mail.dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
mail.stuch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl
dekunstwinkeldenbosch.nl

Certificate

The complete raw certificate details for dekunstwinkeldenbosch.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aygnMgjD74xRp0DL3fo
fmCM8giWY86XZfNNgbfXSt3qASxW1CAMOEVHlFppstJGf92bwx+IBNKlmukZvnEL
HaBtg4pFsd0rEsbJVlxHaOruKH3K23dMhCURpnJ3f1MjeQW6CgfpTF5u1KbL5Aa+
3EpdP4Ofr7nAYRdfQ4/gsQ6aDk0v9j+VnmqwYIbqvg1NgHiXJxlH8Av7XkTzzPfA
nwRnAE0IGFAnRYGoVb0bybRhpy+IEdNBJXZUkryCmOaoxJrUm0pHWnkHtcsR9v8W
0qnlvlLlIEfzioNFMwxuucScBes1iqgazeoR2jD3qESxVQN4MVz7yKA40oggEG7a
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377256351013921829001151775335217061945876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 18:07:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 18:07:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dekunstwinkeldenbosch.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28488744357186183496253841638477534529163773176162221266079551862601683325780360668280550547206865518387183387328315807429461530568193449101778034200424720925885013403521855617147239703354970589280510772205757275585091811756888227935265190322145195007585444273379381510486748139566457772668410359599555733628629869133099925814035840537158413132328125091642436135691299267764414449466444241749614169324386742025853975964461677616136697537314953775023090566041055702170024437078295742686245945580237654917526250318943136458041723290889306622615705693271303774129992243415559625348198802783599098769961045504039150607047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c6af2326dfb22e1f753aef6597d58469962e6e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kolinc.wbkr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekunstwinkeldenbosch.kolinc.wbkr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekunstwinkeldenbosch.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaichang.kolinc.wbkr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaichang.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dekunstwinkeldenbosch.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kaichang.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stuch.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuch.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admin.kolinc.wbkr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dekunstwinkeldenbosch.kolinc.wbkr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dekunstwinkeldenbosch.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaichang.kolinc.wbkr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaichang.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuch.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e814f751400000403004730450221008766dacbd20762c53b2d3603c12cda75ae1da9e317a0c6ae9952a145e0e6256602205c9cdb126ea226b9bdfb40ac10f15fa8d1a9dfe4312e3a8189fc739d6eea297b007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e814f75140000040300463044022044e18bb7f2d2c248c81f89306fd05089ff0e98d58cdd1e735d2791703036131302201f508d0e77be290d57b3a36db8f27e80ebe2682fc585abd852d29c46c1dada60
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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