DV SSL/TLS Certificate for oqapi.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the oqapi.nl DV SSL/TLS Certificate

This certificate with serial number 06:d5:9d:17:47:77:cc:23:da:d7:ce:ff:bb:a0:c5:d0:71:f6 for oqapi.nl was issued on by Let's Encrypt.

With 3 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for oqapi.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:d5:9d:17:47:77:cc:23:da:d7:ce:ff:bb:a0:c5:d0:71:f6
Serial Number (int): 595362669412429762176853698576190001934838
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: ab:c8:f2:61:c3:f2:ce:6c:40:76:66:11:37:4a:63:b4:11:fd:dc:ce
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 71:a9:4a:53:19:d9:97:19:2c:14:41:d0:a2:f9:06:b4:6e:77:95:48
Fingerprint (SHA-256): 3b:b9:8b:70:fe:fc:ed:57:40:58:08:a4:5c:62:08:a1:e7:46:db:ec:53:9b:43:a4:ed:1a:a4:8c:c6:3d:21:7c

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/119.crl

Check the revocation status for certificate oqapi.nl
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for oqapi.nl

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for oqapi.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvseXaJF57hc7b/z0Vs+9
cFz4RZU0Q4yozVx5DCrTPf1au+VfSBMmdtd1O15161pR/FGw1KeEkLKPX1D8gGha
d+T0IXjAyKvQ5UT3vsGTPUfcEgehpq5Sl48m4BaqY3MBU+f/cqh9/Ob6PHly2wuI
+4tdlQZJ5ZCpC1sXVYUfBRKwrGklgrfKuuN+gQz+Y/DRdCpivBfHWZtpcG6YrFSS
KeglK5IhpbvWIP12POXeAlUSfrdHqYeaD2s4SDCvHekHl6PB2pz6MhWscyCuirug
i9J7VhR1bmto732CJ+MDY2/NqU+zhOd2KN+/SfBQ21aTxzI29R9xpfqwBtR0/R0a
yFdcgmHs/AXTYAk8I5alOWPTsTF0uYTSb8Q2wjZH54CfxTEYxlGc9hSkCN/JiRlK
1iRZPfR6Qwgs8hhwkGxZlULLxw+Rz3f2hkklVr9Eiasq6O40YosWCtS1Di7ro6up
5pCcQTLXNcipdKc5LWnPF58gIyVib6fgFL0cKlxrHlYjSqCHHGdLeHEl2iyHMQuN
3jBsloCsdtAT6U0SPw0ffT/7VppRY9eGP+SwxuDRJIWUekjlRU+IkqmQjvx3Afgg
qYTWy6AORi1pFmUj+HK0lb+0lOcQk4CKD0Q3yF8pfJpdFtDyssN+V3LGYXazEK4f
YPs9PdMdPcXOfUiv62jBHxMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 595362669412429762176853698576190001934838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-13 07:54:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-11 07:54:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oqapi.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778313083984414524172791738267300244196763115504904407562009647514121372267068516029128025459452295062830967533003928768073281570633014716403231648965824487892689656958551239784629700392766007126020645795204823696316748949381124166859324113566125100559220303587183908156403922956502712609380791083696377131631225967018749680161898886331607400461595395047530404672312384720717985948756022435760639292316794505270725063558319919052156629004918926628443623518942524227084150387759716779521042059247690990274420379469798684104640964750751927861735814696124509153178261538869291926945101850789250353803956694591955798606442493592785785314273034730694063873518956624975871674815048148533359457483308413357440105314661747350480852812855099785920792197245860250064384529159108286916972685817600079968935099103787522076322476293603310150255714756350600540992263066312732291988673950917372482806603541001886822959104982961743334654024078226943458711643827120305279553647690331763164536824235128997099685029551206786921499223339066567921178857407991819052826225799463473598319002172294219258114949456085662461345789164400420148106771454020902368638316509510779193255272894078235659288114490616488408681179950370719130180841955890019962957405971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abc8f261c3f2ce6c40766611374a63b411fddcce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqapi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqapin.site.transip.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oqapi.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/119.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa3400000197687e00350000040300483046022100e15456c986974e035684971951b249814406e594591b47dbaf841af25dd86f23022100b57faa058d98b90d929e98081f2cbe9c37652fbc8aff16d8d3e419a1fe40da5000750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197687e003e0000040300463044022006e0850d5ba7cc63e7f398f54a0149a73670a68083a704f295e5b4a95227438102205c946ecae30b8e87370d415556efeae171af295c2459d90bc0f7f6d4592fca51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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