rinf.testprorail.nl

- ProRail B.V. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this X.509 Certificate

This digital certificate with serial number 0c:16:21:66:4c:ff:91:fd:cb:8f:d4:8c:fa:be:a0:09 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser. It's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ProRail B.V.

Organization: ProRail B.V.
State / Province: Utrecht
Locality: Utrecht
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 0c:16:21:66:4c:ff:91:fd:cb:8f:d4:8c:fa:be:a0:09
Serial Number (int): 16065643904926079898018179066424631305
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 2e:23:eb:64:6b:40:1a:7c:9d:d1:dd:99:28:c0:fd:54:48:e5:2d:1f
Authority Key Identifier: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (SHA-1): 08:61:58:6e:b6:8c:09:b2:8e:3b:b0:c6:44:23:15:5f:a4:35:36:9b
Fingerprint (SHA-256): ff:47:aa:76:cd:09:47:a1:17:5e:cd:44:ff:1f:a0:32:37:cc:fd:d5:d8:c7:97:52:c7:42:9b:cf:2b:ee:35:f3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate rinf.testprorail.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for rinf.testprorail.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

rinf.testprorail.nl

Other certificates including the domain name testprorail.nl

(limited to 100 certificates)
rdp.testprorail.nl
k2runtime.testprorail.nl
piadddev.testprorail.nl
appstst.testprorail.nl
btd-planner-o.testprorail.nl
monitoring.testprorail.nl
btd-planner.testprorail.nl
idm.testprorail.nl
digitalsignage.testprorail.nl
sts.testprorail.nl
sts-ab.testprorail.nl
rinf.testprorail.nl
railmaps-dev.testprorail.nl
vdi.testprorail.nl
railmaps-dev.testprorail.nl
rdg.testprorail.nl
geoweb-dev.testprorail.nl
btd-planner.testprorail.nl
k2runtime.testprorail.nl
lcm-rt-ot.testprorail.nl
idm.testprorail.nl
auth.testprorail.nl
sts.testprorail.nl
spoorwerkinmijnbuurt.dev.testprorail.nl
appsont.testprorail.nl
vdi.testprorail.nl
authl.testprorail.nl
btd-planner.testprorail.nl
lcm-rt-ot.testprorail.nl
piadddev.testprorail.nl
monitoring.testprorail.nl
rinf.testprorail.nl
authl.testprorail.nl
monitoring.testprorail.nl
naiade.testprorail.nl
auth.testprorail.nl
spoorwerkinmijnbuurt.testprorail.nl
btd-planner.testprorail.nl
rdp.testprorail.nl
meap-ot.testprorail.nl
appsont.testprorail.nl
k2designer.testprorail.nl
railmaps.testprorail.nl
k2runtime.testprorail.nl
sts-ab.testprorail.nl
appstst.testprorail.nl
btd-planner-o.testprorail.nl
vdi.testprorail.nl
appstst.testprorail.nl
apipoc.testprorail.nl
sts-ab.testprorail.nl
naiade-dev.testprorail.nl
rdp.testprorail.nl
appsont2.testprorail.nl
rdg.testprorail.nl
rinf.testprorail.nl
k2runtime.testprorail.nl
rdp.testprorail.nl
railmaps-dev.testprorail.nl
appstst.testprorail.nl
storingswbi.testprorail.nl
fmis.testprorail.nl
loaonline-ontwikkel.testprorail.nl
rdg.testprorail.nl
piadddev.testprorail.nl
sts.testprorail.nl
sts.testprorail.nl
rdg.testprorail.nl
k2designer.testprorail.nl
provat.testprorail.nl
appstst.testprorail.nl
meap-ot.testprorail.nl
k2runtime.testprorail.nl
meap-ot.testprorail.nl
railmaps.testprorail.nl
spoorwerkinmijnbuurt.dev.testprorail.nl
appstore-ot.testprorail.nl
monitoring.testprorail.nl
k2workspace.testprorail.nl
sts.testprorail.nl
rinf.testprorail.nl
sts.testprorail.nl
appstst.testprorail.nl
piadddev.testprorail.nl
storingswbi.testprorail.nl
monitoring.testprorail.nl
spoorwerkinmijnbuurt.testprorail.nl
spoorwerkinmijnbuurt.dev.testprorail.nl
rdg.testprorail.nl
StoringsWBI.testprorail.nl
authl.testprorail.nl
spoorwerkinmijnbuurt.testprorail.nl
rinf.testprorail.nl
k2designer.testprorail.nl
idm.testprorail.nl
appsont.testprorail.nl
appsont.testprorail.nl
rinf.testprorail.nl
spoorwerkinmijnbuurt.testprorail.nl
rinf.testprorail.nl

X.509 Certificate

The complete raw X.509 certificate details for rinf.testprorail.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQ7O+Rs8E0hequhBrgd
vs9WySR6ZCd6asxKuTnEx3oXvbmg3x/TFqotk9yKfrTpxuTCehZaqB1+aHUVA76r
Hc7sqDg160wpuu2DRUdcNJQLNuYjzNDaBNDvc4LKBNR0ebGgH1OOtkTwii1iQLes
1FHTjhj+BTPSayv4BIvm6w7Iu8IPb7YAHjVXXigCaQCSHwnWZLn8wQi/uQcuGr6E
nbGRHikX6eqf1psQtngRfpGGOuIdIFEuzC9wOUkDB6LzteKYDJKjiTsR6RmZ2DG0
ZOK6I14gktHA4hF2SWAkVqoUp7Mz+Lh76ZYJT6jX0atYMBpBFB3TpzGNDL9E0V+Y
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16065643904926079898018179066424631305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utrecht'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ProRail B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rinf.testprorail.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23782227270525632603712085106538195116686329379812638878105017612396055693656813811121483417580809010677978617549970788881903222298800822312445890465361393456088845193867519642478612019886818708516433794174111499625884058181348798883967036945097072105401068865578732775490999232711618500005738573224077931304747457506958763475940087553948079562605728613541371436420268645903212059483355964898117412217127408425502317221208931345646991497422515671471206463927679250282770145331283322415514767448030132541986129712407569437886394104466781291917888023004955996393342065998211780973534707181076871869479193077269808519329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e23eb646b401a7c9dd1dd9928c0fd5448e52d1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinf.testprorail.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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