DV SSL/TLS Certificate for prestatiegeneratie.nl

Certificate is witin its validity period

Issued by Google Trust Services (WR1)

About the prestatiegeneratie.nl DV SSL/TLS Certificate

This certificate with serial number f0:e2:d7:86:2b:a6:bd:34:0d:16:d4:a9:57:8a:89:a8 for prestatiegeneratie.nl was issued on by Google Trust Services.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for prestatiegeneratie.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Google Trust Services

Organization: Google Trust Services
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): f0:e2:d7:86:2b:a6:bd:34:0d:16:d4:a9:57:8a:89:a8
Serial Number (int): 320192549426556673157336968421375117736
Serial Number Length: 128 bits, 16 octets

Subject Key Identifier: d9:56:9f:42:71:5f:f3:33:f9:70:0a:3e:ff:50:bb:70:8c:6c:14:aa
Authority Key Identifier: 66:69:49:d4:de:2a:9c:91:03:cf:89:0e:24:b8:0e:30:03:6e:88:2e

Fingerprint (SHA-1): 9b:fd:38:2e:13:4e:d9:74:ca:1e:e0:0c:2d:78:06:ed:fd:8f:37:12
Fingerprint (SHA-256): 81:ca:2f:e6:96:c3:fa:28:3f:fb:c2:07:1a:3c:0a:56:be:55:10:da:80:3e:fe:c6:11:87:b0:7a:d7:65:f0:5f

Issuing Certificate URL: http://i.pki.goog/wr1.crt

Revocation Information

OCSP Server: http://o.pki.goog/s/wr1/8OI
CRL Distribution Point: http://c.pki.goog/wr1/nbMIullTy10.crl

Check the revocation status for certificate prestatiegeneratie.nl
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for prestatiegeneratie.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for prestatiegeneratie.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlzG0XN5xkSqinORICdL
zsvKyXQkaWj7wq3j4bmjLNSBrlXDOnXWD3xL2Y6y8C/XoOh23HgWanUerZ3mzK9u
eAJTDPkbG3Ud0N2+VMhJjZXTzqlvjFXRIlv+yKyv7KKv0L6tWH9MQWhwl1Xz7fX8
UWo07SPfxQ3MzqV+CYvF4li1odC69Upw6Six55TmEKzls5eTLLhk/VzVdGDHbWad
BOynpOV0IIFXKwLJ0GXT/qvlXhkXSIRF8T//1TYKUtrZqPmNkB7aB6vlGgl7Q6xR
HsRDYNjB0JxviMYEsrzuQ1SiYBnc3NXYD6PIJWYkVKFJ503ID0sP8QRJetMIzMSx
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320192549426556673157336968421375117736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WR1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-20 10:12:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-18 10:12:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prestatiegeneratie.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24535981026500079695274683328634145083377947894987252244522654828980547652040030524888533919530634308199333662322765664131176532761730337989794606536214990281651371645367402436904337035980493564880156056470453979721196560630806762673293900271601493920652753066923157749690209722649292117847601945377789719173561201896820939253486003192426814922025068301701065357267872123153310181193486549370359253052537341847119195119390310372237092735905555199599224039540236910746478172068572270298918956875854202658972835717987479179407524188193840964665090432357942883623135584872511776460183348505326138372445875735099338961291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9569f42715ff333f9700a3eff50bb708c6c14aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 666949d4de2a9c9103cf890e24b80e30036e882e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://o.pki.goog/s/wr1/8OI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://i.pki.goog/wr1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestatiegeneratie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prestatiegeneratie.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://c.pki.goog/wr1/nbMIullTy10.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000196ed65803f000004030047304502200ce74a082814967a7fc7c5a066b40df957e73d624c01d9a03b88ac56584a7001022100dd18cb84fe6de5b0bd4b43f8b9e7188018d48fbe1cb953aa3cebed12c16edbf3007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196ed6580800000040300463044022008fe8b8aca04a67eddf90a2f65c774383a334b598dceb2043e082041b446e912022074000f9b0c1a1abf2af465b4580846bfac6e248adf83d5acb222bb81f9f4602e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ca2c6c78afe80eaf77dafa0c3198d197ff35de4f896b271de38a2f6804bf1297a670bd7d01a758e8f04a57a0841e315f704e688a9834ced991c0d95aa597db2764392f5b2427eac12ba0962574df5ce4b4e6210424e71ace516f97b9bd26bf9cebcdbb9723f24ed2811ece7b321097a5e56ab5b283d107bc27a9599459bb7c6bd7e528133d395d655ec09a2dc44201ed2a134c1036dc28899d9a64cee38ad716992cf160473a23ddf32ba5038eafe1dca0b397e3fa79ab7353486d28c1cde9701130b5f24b63333da13fb43902ede7352cec10c227dfebac9f8716aeca7b1b8a4a5c6dda44cdcdc6734857100b1850740d3d3548b6ef7de519be8a9355bd1d2