oos.adrz.nl

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:dd:07:3e:7f:2e:1c:bb:fd:9a:a2:8b:f7:1f:d9:88 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oos.adrz.nl

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:dd:07:3e:7f:2e:1c:bb:fd:9a:a2:8b:f7:1f:d9:88
Serial Number (int): 2476872529894756753980801143397144968
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 95:b7:5d:52:b8:ef:5c:97:64:37:00:0f:32:62:9c:63:20:f5:a3:0b
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): d9:90:7c:21:ef:d2:46:f5:50:9d:ea:86:ab:1a:0d:a6:8b:df:d5:f9
Fingerprint (sha256): f7:54:f0:e6:a4:97:34:94:4b:62:17:ba:b8:dd:d2:34:20:42:47:ff:af:a6:25:ab:1a:b7:c2:3f:c7:4b:9f:07

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate oos.adrz.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oos.adrz.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oos.adrz.nl

Other certificates including the domain name adrz.nl

(limited to 100 certificates)
portal.adrz.nl
veiligmailen.adrz.nl
rooster.adrz.nl
mijnacc.adrz.nl
*.adrz.nl
access01.adrz.nl
rooster.adrz.nl
zorgdomein.adrz.nl
sign-zorgplatform.adrz.nl
sip.adrz.nl
adrz.nl
mijn.adrz.nl
ml.adrz.nl
roostertest.adrz.nl
zorgplatform.adrz.nl
*.adrz.nl
*.adrz.nl
*.adrz.nl
zorgportaal.adrz.nl
siamacc.adrz.nl
webmail.adrz.nl
*.adrz.nl
*.adrz.nl
mail.adrz.nl
webmail.adrz.nl
*.adrz.nl
rooster.adrz.nl
roostertest.adrz.nl
www.adrz.nl
*.adrz.nl
webmail.adrz.nl
zorgportaal.adrz.nl
webmail.adrz.nl
webmail.adrz.nl
www.adrz.nl
webmail.adrz.nl
www.adrz.nl
www.adrz.nl
mail.adrz.nl
www.adrz.nl
acceptatie-sign-zorgplatform.adrz.nl
www.adrz.nl
www.adrz.nl
webmail.adrz.nl
zorgportaalacc.adrz.nl
token.adrz.nl
webmail.adrz.nl
webmail.adrz.nl
oos.adrz.nl
veiligmailen.adrz.nl
acceptatie-zorgplatform.adrz.nl

Certificate

The complete raw certificate details for oos.adrz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2476872529894756753980801143397144968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oos.adrz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854590130234383099510636446229922386590275274051513920673478759300578313927566886368953530726398291603168101001960916186973858087878881798743460778399753976824456839695738513806362570184294234556392059316616501913147509491711110535334111201151947482224439582367685218203375454142753318596878163384716265742242461179453803368991576096660301076004260530395548238474887613952965102896666628722417114311887163329143711496342636462626340198241875368857470234618522515266799874291659460007852351142979594383760473933227865201868522172970221933419343691413979170592174945594357609135410400655094559763118725869856710440393297935099852893685138004981831039171883138430288040334324575071418049154098510534677684085225292420591944452774505413414960281082511540055508953590126275976623202140978364476879881749099569943296187652229509530223253762482453700148036717396972365450329425175663141604335921586582686624122729877111206616247070114700804622549394225973327153861499135638085994941424247081938450056366383899443705451050393244478093658660394826263788443737950058777483776710241216378355788062052792630570359485324343619867292273247000152994826755286302341818191596096370893082838898544182489682704479185100133831628592258547977988510059677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95b75d52b8ef5c976437000f32629c6320f5a30b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.adrz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044fed64e97c9661dda9fcbbca8ead36373150764cb9b9fc58621459cd49910337b72a8badc10536e8ce779b16bbc3c5b809916263f0027c5d94d812a91a85b971bd7ea4a6a44c29ddc604fc83c30a342f9e6872fbe640970fb24aad3ab083a156d020ce2551d3790aded95a587569fc2b0be8365a0d0fb0a805f7cf937d38a9fea59636a4caffd53ac21ddb391dc45f705952259282545736159b23d0c06e6bdb9e03b707e6988515dec3c8ff198f6277037b940d16ee288a56a699608680ccbc836602eac04c7ae70a115c85eef56718fa669c0c6d97d8bf3513c68aa2ac94f0afe81176e286d6d6a31b35d6595fcbb64057d5ef90ed37197eb68f20ac633b6