jotronics.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:49:96:b8:d6:19:10:64:23:d6:8a:a7:b3:0c:30:4e:7e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jotronics.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:fa:49:96:b8:d6:19:10:64:23:d6:8a:a7:b3:0c:30:4e:7e
Serial Number (int): 433617551694422632326121824752622810189438
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0f:f9:7f:a6:93:14:24:b4:bd:fb:ac:64:c4:0d:84:c8:43:97:bb:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:41:64:6d:30:10:84:70:49:2a:f8:56:3a:43:f6:0f:93:63:e2:3a
Fingerprint (sha256): f5:9b:74:f4:6b:ea:68:63:3c:16:12:70:70:52:9b:4b:db:c6:5e:3e:a9:bc:9a:b9:67:83:3d:b5:b5:ef:e1:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jotronics.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jotronics.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jotronics.nl
jotronics.nl

Other certificates including the domain name jotronics.nl

(limited to 100 certificates)
support.jotronics.nl
support.ovvdistributie.nl
jotronics.nl
jotronics.nl
jotronics.nl
support.ovvdistributie.nl
www.jotronics.nl
jotronics.nl
helpdesk.jotronics.nl
jotronics.nl
jotronics.nl
jotronics.nl
www.jotronics.nl
helpdesk.velocate.com
jotronics.nl
jotronics.nl
www.jotronics.nl
support.ovvdistributie.nl
jotronics.nl
support.ovvdistributie.nl
support.ovvdistributie.nl
www.jotronics.nl
radioplayeritalia.xdevel.com
support.bigmarketplace.eu
support.ovvdistributie.nl
jotronics.nl
jotronics.nl
client.trakeen.com
help.cxinsights.io
jotronics.nl
jotronics.nl
jotronics.nl
support.ovvdistributie.nl

Certificate

The complete raw certificate details for jotronics.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LFogTZdiodLq9DQVGI0
L0AQHjxOlPOhHX/30qGpN2R721CVB7Gb/ihYP6YkNaIzyG5ngpSwof3I3ycGK465
ZujbjieY6o3uuk7QWBE6lwVycu2Y8bcxFONRWIryI/Q/ddesxOOaswziaBhrKYCX
0N0dCGdACZFC+KuI1V8dyJvlSh2JDTG/Bde/VZN1ZItyZDg6t4nEMx9S6H7zloLJ
2aRkha4iWopiEXFEW1/DU3ywGBPKat2lPfY61HTLkQZyjo+U0HVkMsD0c3P8PmQt
NX5dTFFjh6/pdkk7u3gVZOTZvEMnm+8elCbbpWh47LS32Dy17Jv4aremsc44maV1
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433617551694422632326121824752622810189438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 11:36:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 11:36:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jotronics.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26850003907432882176145836295322096787151541517141733181594280835443876442349101552617347704353744830224812061266277891360505064781082665269638505379034800935884630296880447081379206711768485725844856627038208540487722196092647089819314701979383423300587684715917271501553639587496330724281318023099338690829996715539622511884774359171184161913740564997563247412202006971034409609541086855003394888189782486351718897585246815665502215877509189209502097539522629039268743402370335809405265594094164799965729107772721007044855646301514719886608913549878378291161842604847024804981089426299261401954497642771690958452011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ff97fa6931424b4bdfbac64c40d84c84397bbb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jotronics.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jotronics.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018efb81cda0000004030047304502204cb1ed04ba2e411f23127ff83347cc02369664649d9cd862102e8a659d842d41022100e0e462446fbba747e34ffc0455ae8d187c8c685765e58b934e5cf8fb83fef9c100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018efb81cdac0000040300473045022100d64cd71c94c91c1282e1f9ba3267f910cd712f352ce2a0cd9d08b96fe7325b8702207f44cbcbc024326797c418f7016b3e135a82522d0a711305c868bffc754caeee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00afdf3c81449c902fbc5b9142df003d2a718f2d1afd77fa106f510bebba38ee311cc9b80ebad1ca8fe517e2f6a5a5428d1a8202da3813cee05708f03f9f095b5b24725c672441447403510606cf924675d6b1d645c267444ff045223b9f2bd744e28e53b9394353aecfa969a4a435d085d5861dbc0751391c9e9f1f7f6ee73a786ad96733e3b6346093f89d91e0617811dff8ae9d9d9b606abf6d920c6e44560335ab2b43ee945393b3cdad39f52794aa0f828d0a673696204d2669a50757e3d19c764da2bcaa8363ff729344ef0a9d0c3c9388b095a0d38bfd0279dceaf7b3d75f597e3e10c44049676a2994b2fa3c675841c2b6fb49d15ebbf8ff0a0f29258c