DV SSL/TLS Certificate for www.koenders-partners.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.koenders-partners.nl DV SSL/TLS Certificate

This certificate with serial number 05:8d:84:df:e0:a2:a9:51:1a:8f:9b:c8:ad:de:a6:22:47:4b for www.koenders-partners.nl was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.koenders-partners.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:8d:84:df:e0:a2:a9:51:1a:8f:9b:c8:ad:de:a6:22:47:4b
Serial Number (int): 483717863928443733303606614119491341272907
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 30:0b:12:75:08:32:63:f7:9e:24:41:bd:5b:11:d6:1f:10:d7:51:90
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 90:a9:84:fc:24:1d:38:92:fd:55:29:0a:dc:44:75:54:c4:b2:1c:7d
Fingerprint (SHA-256): 43:23:d0:37:61:87:85:fb:2c:94:dd:28:12:88:06:c5:9f:0d:24:79:52:49:5d:6b:4b:c0:c3:61:48:7e:86:90

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

OCSP Server: http://r11.o.lencr.org
CRL Distribution Point: http://r11.c.lencr.org/76.crl

Check the revocation status for certificate www.koenders-partners.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.koenders-partners.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.koenders-partners.nl

X.509 Certificate

The complete raw X.509 certificate details for www.koenders-partners.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISBY2E3+CiqVEaj5vIrd6mIkdLMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjUwNTA1MDM0OTAwWhcNMjUwODAzMDM0ODU5WjAjMSEwHwYDVQQD
Exh3d3cua29lbmRlcnMtcGFydG5lcnMubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqZK029WdZOwvgWDWlPzaFeE8k942jIG/PbDlAQYQNEedYzIbC
U8hvmdFT+k3ZIu6LYBg0KI+6MONvMXCknuGMoJrKjimeuH6tT2lxr6eVFv7S5w9r
YghUH8G9n8HPQBfWdr3N0j9iP0FOdtD+UphLEcXkVLUej3sVFfkXVuO/XtU0xg31
hh436SFbQpUfbPnnMvZVlIeN2HDPJqVUqSsbhGQVRXMs1IM0sTPESm3yQ9EL/MPa
YEcAMiq/OHwFOTHgjobVt7jAUz90cAto23brVTDToq3KKbqlGghpsnu57N+oHcda
EjaaGxQ5p0BJSBRtUd6XYu1rjnLlxdb8oHTtAgMBAAGjggJNMIICSTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFDALEnUIMmP3niRBvVsR1h8Q11GQMB8GA1UdIwQYMBaA
FMXPRqTq9MPAemyVxC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcw
AYYWaHR0cDovL3IxMS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3Ix
MS5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYd3d3LmtvZW5kZXJzLXBhcnRuZXJz
Lm5sMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6
Ly9yMTEuYy5sZW5jci5vcmcvNzYuY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx
AHcAzPsPaoVxCWX+lZtTzumyfCLphVwNl422qX5UwP5MDbAAAAGWnsVEowAABAMA
SDBGAiEApIj+epXFTq2nQMNd3tEq8fl3w1i3wIx9b2zjsxBpIMECIQCRDhqtNpDO
kJaIAAxJZa+Zf4+dMDcpJEL3mDZoYNRD9AB2AO08S9boBsKkogBX28sk4jgB31Ev
7cSGxXAPIN23Pj/gAAABlp7FRJAAAAQDAEcwRQIgAklAZDRRWiTF/q2VqUTOQ8Ak
uablIySr+mpqJKfowb4CIQCITCwt7BOoNBivYQaaTnhUllWqtLVi0Pwt/nTk9FXO
MjANBgkqhkiG9w0BAQsFAAOCAQEAZSN96KMhvJUovEmmC3Jum95qw/nuaMeCVsZK
kB+kaYpszxqmXkbUzpJjxWUG+A1vx6b8YaMTJuM5ltwgWDslcBeDEGvbItTaluKi
NErZvlizFknEFphGLIRcO+o5PpmtgJjkO6u5fSQPu/Fd8KAhjvYDkKX3YozOZOup
OEaXv3Y1XTgnZp8YJdLlJT5CmRWUZINEmZH5R1tkyW9NWAgI6cvwRCObfD+PHWUo
d/QvYJhrJBy6oXa7jpADdqXaRUJSeUyWp48gv/H80mUWfreQs8OWmFsy+14+wzLE
ReJmAFpgtau6OkEVPllnoUBtg3fzsvPGD3L31rwj5yuXgwZcNQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmStNvVnWTsL4Fg1pT82
hXhPJPeNoyBvz2w5QEGEDRHnWMyGwlPIb5nRU/pN2SLui2AYNCiPujDjbzFwpJ7h
jKCayo4pnrh+rU9pca+nlRb+0ucPa2IIVB/BvZ/Bz0AX1na9zdI/Yj9BTnbQ/lKY
SxHF5FS1Ho97FRX5F1bjv17VNMYN9YYeN+khW0KVH2z55zL2VZSHjdhwzyalVKkr
G4RkFUVzLNSDNLEzxEpt8kPRC/zD2mBHADIqvzh8BTkx4I6G1be4wFM/dHALaNt2
61Uw06Ktyim6pRoIabJ7uezfqB3HWhI2mhsUOadASUgUbVHel2Lta45y5cXW/KB0
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 483717863928443733303606614119491341272907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-05 03:49:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-03 03:48:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.koenders-partners.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21510157335791703088276118575128959693831653415407857014897992638939891741534394742309089992759524632668585948081022687671952837982919409469544625344421019657884376412530553725114094915653968062375449143484759558698997654579590755494308352085417617960275716949750911193645359043268822364466730295653037087462014512426455567915957509310884295496298052082888607796936199239821153177971147195275400618349675039503508886978063464674531094004585760707087840710012885404299205340498533243719528228622896657022476407237485899095119345589037187445090003506625859120695126569160991568725022749173681228696651564088975566075117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							300b1275083263f79e2441bd5b11d61f10d75190
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koenders-partners.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/76.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001969ec544a30000040300483046022100a488fe7a95c54eada740c35dded12af1f977c358b7c08c7d6f6ce3b3106920c1022100910e1aad3690ce909688000c4965af997f8f9d3037292442f798366860d443f4007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001969ec54490000004030047304502200249406434515a24c5fead95a944ce43c024b9a6e52324abfa6a6a24a7e8c1be022100884c2c2dec13a83418af61069a4e78549655aab4b562d0fc2dfe74e4f455ce32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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