marjankolmeijer.nl

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:38:c5:6e:cc:d0:f9:b0:3f:00:5e:cd:ba:24:e7:20:d8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marjankolmeijer.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c7:38:c5:6e:cc:d0:f9:b0:3f:00:5e:cd:ba:24:e7:20:d8
Serial Number (int): 416240796641845103757096846458993378795736
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:d1:83:66:c9:ab:2b:88:29:c7:89:6e:da:d8:1a:2d:9d:5f:59:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:3d:bc:e9:3f:d7:d3:39:0a:1f:6c:2a:0a:9f:96:bb:84:42:8a:28
Fingerprint (sha256): ff:26:0a:1d:45:7e:1b:8e:b2:c8:25:cf:34:b0:66:7f:cf:19:fa:13:fa:f0:7c:af:bd:72:86:94:58:fb:46:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marjankolmeijer.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marjankolmeijer.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marjankolmeijer.nl

Other certificates including the domain name marjankolmeijer.nl

(limited to 100 certificates)

Certificate

The complete raw certificate details for marjankolmeijer.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQDq9EmyJVKSTU3i3iQ7
DILszNwsb3WvArQkeYrgH6IA/rpLwCwA8FrzymWgtvI0w1dXvQV+xMD6H5Q7y3rK
8dipQf2AGZ+vjDtQLUAyCm4vZSlezVXNIOOQOz49Zvg94vHonAgLhVXbpKbipJ5X
4iMPz3uXoxroKA85DCUZWxPaCsUpCuDk2sU/htBe45nvhmh88+SPuAW2TAZjPRUa
I1u7+letZlsJzviU0IF2F9KoLRwOXnIkoUa6Fqhlhj2vWDC80NaTFG8qq9HpgAOH
5ZMIFFHiHxqTTNdgluBYVExm9pJPA/kj+lyADq5pfMGtXBrYkCb1kSj+iXb2Kg8C
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416240796641845103757096846458993378795736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 09:20:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 09:20:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marjankolmeijer.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20829772898534845777298899770381743112597610628726428625547327143234114290429143247404491701019716325783254615883241009053508289632904019118383897415100369515144773438940713329726834505893933023001381490289383448060890398878866317179739084965213424188218897553206696979063963184065467404712482824296994486985940528367730372646206524459627807080796848327227421717660057949602096259604848289771212351426343086306881629746295949496277638426949076724690958698896370481799235301628026115987666506386028048182450248148035193464583760582431460546116247828924597527847816509880697414892213865838649037162259549280090452853487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8d18366c9ab2b8829c7896edad81a2d9d5f59be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marjankolmeijer.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a7e9b65eb00000403004730450220481483157a1398e3dd722f1165100360998081df198a2ad3c2947611a33e78820221008f7f45167305e2db94fedf56a0b7f9c4b70ed5cfd30906e6b376db9ded8a3185007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a7e9b6624000004030046304402200c71641380ce6e06f876372690cdee06d41687b8e55141a27e790992ea12de3702201e5e56206a719c41c258ac0a048390c89ebb566e0ae1d459f5d3e74d1dad675b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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