DV SSL/TLS Certificate for server01.freekwebdesign.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the server01.freekwebdesign.nl DV SSL/TLS Certificate

This certificate with serial number 05:e1:14:ce:fe:b9:f9:99:cc:b6:a3:69:fa:de:b3:32:b1:3a for server01.freekwebdesign.nl was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for server01.freekwebdesign.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:e1:14:ce:fe:b9:f9:99:cc:b6:a3:69:fa:de:b3:32:b1:3a
Serial Number (int): 512152621555547441096819288851402137448762
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 69:ef:fa:57:d5:80:f9:87:1f:4c:3d:6f:0c:76:b0:d2:7e:59:9f:49
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 8a:d4:40:0d:33:4a:9b:46:48:0b:8a:54:9e:08:9c:64:32:26:b7:94
Fingerprint (SHA-256): 4c:7b:51:56:f3:d3:1a:9b:f5:76:af:f0:c6:f9:32:93:c1:23:98:fe:6c:a2:b1:d4:18:40:28:8d:37:bf:c5:26

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/59.crl

Check the revocation status for certificate server01.freekwebdesign.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for server01.freekwebdesign.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

server01.freekwebdesign.nl

X.509 Certificate

The complete raw X.509 certificate details for server01.freekwebdesign.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtN1rzViDmZWCKu5TLLc
YSAPKzX1smvRkkpKAqhEXhGC9qfk1t1oXWpsq52bNCWIuDGGImraGcF0Vdq3ZvKw
zIpVf5EB5HBNC0frLhJHMhAeonhGwUppa/goXZ/af7gu7wYoP80J3uccAgdaToeQ
oRzddcakwfTEI2GUm8CrI65oeuMXUJictg0ynlPfSx9tEb/jiL6U734IErVZd4yQ
EjiEvdcGFmcoYpmuyfjEopS1JcGFxf+GNWNa2w4W1IwOgVJTUXxpET44qg3Cw1Yn
FXQeqcyUMKCkzPH9Fuf64vQswdGIrRhDqe7a/AZBp6ibI2PLV8uvmJMnmOxcDiz7
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 512152621555547441096819288851402137448762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-04 03:03:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-02 03:03:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'server01.freekwebdesign.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21564786510997431980390242852912290973561868064318996425046975603716914830533348551273635791497763587812282682017265006999664720488594508439768379018692343515634328556856613404490289229339615981244741981823632344563059470484721219806650929058855245788876350298930806461307314069258836336313549638498499214548032316424929953719814391995773321053238900065137183470791024764005855231717789928454466525684009655163104823568961566588549063527577078144089155911211077981969034210444595633349879505440051680689210597891316047111101583647537889675021184164151818429069744692603390371745922929718048024602829975301093633882977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69effa57d580f9871f4c3d6f0c76b0d27e599f49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server01.freekwebdesign.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/59.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197d39943d70000040300483046022100ef0b08c819d306a27d48ef725d6631f23bc3f98805c1633ab877e51b28653359022100dd9a608a979af4afcf5a335f102f270218b720bcd51922e67c2504420d1ccc160076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b800000197d3994b610000040300473045022100fb03f025ad314900228f191ea19a7410d03ad6708f651df07c01a1c6a65425d9022002326b26e2b6df0f5d717e9cabb491fc6e8f4435bc51333d7d91497174e90fd6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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