SSL certificate
TLSv1.3duocast.nl · 89.188.18.17:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=*.duocast.nl
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
- Valid from
- 2025-12-30T00:00:00+00:00
- Expires
- 2027-01-19T23:59:59+00:00
- Days remaining
- 108
- Serial (hex)
- 5BFFE3015C150CF2C39F3356C49F451C
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:*.duocast.nl, DNS:duocast.nl
SHA-256 fingerprint
E0:81:7C:0C:08:75:FE:23:0D:D3:1E:1E:85:CA:0D:A3:E3:8D:0E:E6:B0:18:1A:5F:23:3A:2C:AD:78:E0:68:A0
Certificate extensions & PEM
- authorityKeyIdentifier
- 68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
- subjectKeyIdentifier
- 42:AD:87:15:FC:58:25:BD:16:D4:91:1E:B3:5B:30:CB:F0:D3:7E:14
- keyUsage
- Digital Signature, Key Encipherment
- basicConstraints
- CA:FALSE
- extendedKeyUsage
- TLS Web Server Authentication
- certificatePolicies
- Policy: 1.3.6.1.4.1.6449.1.2.2.7 CPS: https://sectigo.com/CPS Policy: 2.23.140.1.2.1
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationCADVR36.crt OCSP - URI:http://ocsp.sectigo.com
- subjectAltName
- DNS:*.duocast.nl, DNS:duocast.nl
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 60:4C:9A:AF:7A:7F:77:5F:01:D4:06:FC:92:0D:C8:99: EB:0B:1C:7D:F8:C9:52:1B:FA:FA:17:77:3B:97:8B:C9 Timestamp : Dec 30 10:27:16.776 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6C:CE:CE:B8:D5:F7:27:E0:00:C3:7A:2A: 1D:22:25:0E:17:A6:11:CB:63:AC:3B:DA:81:E3:D1:A4: 15:2D:32:66:02:20:78:D5:27:14:AE:BA:9E:68:E8:08: 53:3A:F7:CC:2E:CF:8D:64:78:FA:F9:15:4F:68:53:BE: 17:48:4B:76:05:EF Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Dec 30 10:27:17.186 2025 GMT Extensions: 00:00:05:00:00:E6:E9:A2 Signature : ecdsa-with-SHA256 30:45:02:20:28:A8:E4:2B:53:56:3D:7C:32:3B:5F:32: 78:98:30:4B:7F:A5:24:58:84:E3:A0:46:47:B1:A0:73: 64:6C:30:AE:02:21:00:BD:79:DD:6B:51:51:5A:AD:39: EB:86:EF:6B:6C:92:C2:24:89:D4:AB:0B:92:F9:37:C9: 0D:1C:19:F4:5F:04:3D Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 59:6E:6C:33:86:94:B2:59:72:A2:56:C8:A0:E8:DD:90: 4A:76:E8:08:3D:DA:87:3B:01:08:38:28:14:3C:EE:59 Timestamp : Dec 30 10:27:16.650 2025 GMT Extensions: 00:00:05:00:00:05:64:80 Signature : ecdsa-with-SHA256 30:45:02:21:00:F6:4D:AA:B6:3F:27:76:B2:D2:7C:DF: 01:EB:51:80:01:BE:04:59:AE:00:F8:B6:57:A0:17:91: 90:1B:C5:FF:0D:02:20:0C:B8:58:E9:EF:E3:0F:7E:27: E1:4E:58:62:BD:8D:4C:06:F1:B8:45:91:86:3F:E3:B0: 49:44:29:8C:F4:AF:99
-----BEGIN CERTIFICATE----- MIIHgjCCBeqgAwIBAgIQW//jAVwVDPLDnzNWxJ9FHDANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRFYgUjM2 MB4XDTI1MTIzMDAwMDAwMFoXDTI3MDExOTIzNTk1OVowFzEVMBMGA1UEAwwMKi5k dW9jYXN0Lm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApZKWS9gQ ZDen7GWUTaJ+RvhqA1Gm3NHyG5IIXwpHMFDpA3kk+z2BprL+eeVeItb1mulq8tzL mXOZ5rGgqHi7lmEKsUcd+Xwgtj38frIoxPKzeG1jFE9lWlP1Af/mxUVR+7nDsfSw esRBjQ7fuBmUZWiaW377NfmJAaFO1vIfUgdNOFxcIdRLR6oxt7b1QXUIEekqSh1R bCj1TgTOX0AkQFS6xWyoipeFSzv3XhTeJ/szg60VWOZUk96Ag9W8Ynk+Gnj6HYLm eisqbDfxZ+C+kLQTSQ3PVVh8DbgtS99LaLRQ8jT0h16DrcvBJLJixygbSBxLN1Q2 K0MSd4+1r3T5FLWIFfE4+5P/Tg3hISSGrFAIrG8ltx3pGHi04euuefPZcriLFpLT Z+zbIkMXkgDAYh1kiW/gfoTVsw8HzvCuSfE7mOdbB1spXQ5HyqElBg+55SL+KW+t Av2OXhsA5VpigvABb1/6Lv0Bk7XQTr8IcKnqMsRWNUMbu0F8IxjErViMgiR1EUCn bSMxZG+EQZlZNE+8OwiFUdJBwwIpBc3CKSMcjPdCxHi4S0agqbi307YIVdicsvxF e+PavIZXWEqtOuAy8C/eMBKM8zX4oYMhPFurYoQalUkB5WQXmdCtugOcBvXKwXl5 Ox1JhDM1rQcOIF4KGAj3XAAgMC/mZEW+sYMCAwEAAaOCAv8wggL7MB8GA1UdIwQY MBaAFGjAEhYYDq/O9oemMlejRlFdywcnMB0GA1UdDgQWBBRCrYcV/FglvRbUkR6z WzDL8NN+FDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAK BggrBgEFBQcDATBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUH AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUH AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvbkNBRFZSMzYuY3J0MCMGCCsGAQUF BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAjBgNVHREEHDAaggwqLmR1b2Nh c3QubmyCCmR1b2Nhc3QubmwwggGNBgorBgEEAdZ5AgQCBIIBfQSCAXkBdwB1AGBM mq96f3dfAdQG/JINyJnrCxx9+MlSG/r6F3c7l4vJAAABm27MOqgAAAQDAEYwRAIg bM7OuNX3J+AAw3oqHSIlDhemEctjrDvagePRpBUtMmYCIHjVJxSuup5o6AhTOvfM Ls+NZHj6+RVPaFO+F0hLdgXvAH4AjspHC6zeavOiBrCkeoS3Rv4fxr+VPiXmm07k AkjzxugAAAGbbsw8QgAIAAAFAADm6aIEAwBHMEUCICio5CtTVj18MjtfMniYMEt/ pSRYhOOgRkexoHNkbDCuAiEAvXnda1FRWq0564bva2ySwiSJ1KsLkvk3yQ0cGfRf BD0AfgBZbmwzhpSyWXKiVsig6N2QSnboCD3ahzsBCDgoFDzuWQAAAZtuzDoqAAgA AAUAAAVkgAQDAEcwRQIhAPZNqrY/J3ay0nzfAetRgAG+BFmuAPi2V6AXkZAbxf8N AiAMuFjp7+MPfifhTlhivY1MBvG4RZGGP+OwSUQpjPSvmTANBgkqhkiG9w0BAQsF AAOCAYEAWODUGGNOja2fdtLde5ehxXdTP9JxS4k+f9j3bVLtbEF8BBpSn9mjdpn4 me9FbHgqCXRlWqzFczzVzj4YmTUsfpfxGEhUPOQir9FIEcuP/effn7hSRg1TkYEX KmUN7UMPObhxNODpsiK131EjZgqHlmSD6vlKWstHbtmKTqq6gKAL8clo27toNaIG 6xUjZ5RTZQp6tM4ZoXu9qyLTA6zrCAcWRlw/x6De3BE87x5Qn5dhYNijXfSN5QUR 1Pr7j+US2UYPr+hEp6u6tqhM3HrJzXBVsSL2tQ6xztt6bUT8HWCsWUTmwoS6lbQY RFsAFtAny+CfAWzxQBCLYeu+BMOmL/nDQpoVfU8XJ4wp8HhBWBsFsnD5HJMPSnLC LYLrztBomT1c43XHA8hNlYsUiK1yzK4eDua9lYbzKVhWwWtRTIFZ7BQzpMew4Foj MRf7FwXrfHjBAEEFQCwQNWokmBAOyjS91gHj6i8C2gi0DWQqaUnQTHwaFZaxRd9m h0+8fd1q -----END CERTIFICATE-----
Cipher: TLS_AES_256_GCM_SHA384 · Checked 2026-10-03T18:55:26+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication CA DV R36
- Issuer
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2036-03-21T23:59:59+00:00
- Days remaining
- 3457
- Serial (hex)
- 397A66CC2756362E0DAA87CA6EABE3B1
- Signature
- RSA-SHA384
- Public key
- RSA 3072
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
8C:54:C3:34:B6:6B:A4:E4:26:77:2A:F4:A3:F9:13:6C:19:A1:AE:C7:29:FD:B2:8C:53:5C:07:A5:A4:EF:22:E0
Certificate extensions & PEM
- authorityKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- subjectKeyIdentifier
- 68:C0:12:16:18:0E:AF:CE:F6:87:A6:32:57:A3:46:51:5D:CB:07:27
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE, pathlen:0
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://crl.sectigo.com/SectigoPublicServerAuthenticationRootR46.crl
- authorityInfoAccess
- CA Issuers - URI:http://crt.sectigo.com/SectigoPublicServerAuthenticationRootR46.p7c OCSP - URI:http://ocsp.sectigo.com
-----BEGIN CERTIFICATE----- MIIGTDCCBDSgAwIBAgIQOXpmzCdWNi4NqofKbqvjsTANBgkqhkiG9w0BAQwFADBf MQswCQYDVQQGEwJHQjEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTYwNAYDVQQD Ey1TZWN0aWdvIFB1YmxpYyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gUm9vdCBSNDYw HhcNMjEwMzIyMDAwMDAwWhcNMzYwMzIxMjM1OTU5WjBgMQswCQYDVQQGEwJHQjEY MBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQDEy5TZWN0aWdvIFB1Ymxp YyBTZXJ2ZXIgQXV0aGVudGljYXRpb24gQ0EgRFYgUjM2MIIBojANBgkqhkiG9w0B AQEFAAOCAY8AMIIBigKCAYEAljZf2HIz7+SPUPQCQObZYcrxLTHYdf1ZtMRe7Yeq RPSwygz16qJ9cAWtWNTcuICc++p8Dct7zNGxCpqmEtqifO7NvuB5dEVexXn9RFFH 12Hm+NtPRQgXIFjx6MSJcNWuVO3XGE57L1mHlcQYj+g4hny90aFh2SCZCDEVkAja EMMfYPKuCjHuuF+bzHFb/9gV8P9+ekcHENF2nR1efGWSKwnfG5RawlkaQDpRtZTm M64TIsv/r7cyFO4nSjs1jLdXYdz5q3a4L0NoabZfbdxVb+CUEHfB0bpulZQtH1Rv 38e/lIdP7OTTIlZh6OYL6NhxP8So0/sht/4J9mqIGxRFc0/pC8suja+wcIUna0HB pXKfXTKpzgis+zmXDL06ASJf5E4A2/m+Hp6b84sfPAwQ766rI65mh50S0Di9E3Pn 2WcaJc+PILsBmYpgtmgWTR9eV9otfKRUBfzHUHcVgarub/XluEpRlTtZudU5xbFN xx/DgMrXLUAPaI60fZ6wA+PTAgMBAAGjggGBMIIBfTAfBgNVHSMEGDAWgBRWc1hk lfmSGrASKgRieaFAFYghSTAdBgNVHQ4EFgQUaMASFhgOr872h6YyV6NGUV3LBycw DgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMBsGA1UdIAQUMBIwBgYEVR0gADAIBgZngQwBAgEw VAYDVR0fBE0wSzBJoEegRYZDaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdv UHVibGljU2VydmVyQXV0aGVudGljYXRpb25Sb290UjQ2LmNybDCBhAYIKwYBBQUH AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp Z29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYucDdjMCMGCCsGAQUF BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTANBgkqhkiG9w0BAQwFAAOCAgEA YtOC9Fy+TqECFw40IospI92kLGgoSZGPOSQXMBqmsGWZUQ7rux7cj1du6d9rD6C8 ze1B2eQjkrGkIL/OF1s7vSmgYVafsRoZd/IHUrkoQvX8FZwUsmPu7amgBfaY3g+d q1x0jNGKb6I6Bzdl6LgMD9qxp+3i7GQOnd9J8LFSietY6Z4jUBzVoOoz8iAU84OF h2HhAuiPw1ai0VnY38RTI+8kepGWVfGxfBWzwH9uIjeooIeaosVFvE8cmYUB4TSH 5dUyD0jHct2+8ceKEtIoFU/FfHq/mDaVnvcDCZXtIgitdMFQdMZaVehmObyhRdDD 4NQCs0gaI9AAgFj4L9QtkARzhQLNyRf87Kln+YU0lgCGr9HLg3rGO8q+Y4ppLsOd unQZ6ZxPNGIfOApbPVf5hCe58EZwiWdHIMn9lPP6+F404y8NNugbQixBber+x536 WrZhFZLjEkhp7fFXf9r32rNPfb74X/U90Bdy4lzp3+X1ukh1BuMxA/EEhDoTOS3l 7ABvc7BYSQubQ2490OcdkIzUh3ZwDrakMVrbaTxUM2p24N6dB+ns2zptWCva6jzW r8IWKIMxzxLPv5Kt3ePKcUdvkBU/smqujSczTzzSjIoR5QqQA6lN1ZRSnuHIWCvh JEltkYnTAH41QJ6SAWO66GrrUESwN/cgZzL4JLEqz1Y= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=GB O=Sectigo Limited CN=Sectigo Public Server Authentication Root R46
- Issuer
- C=US ST=New Jersey L=Jersey City O=The USERTRUST Network CN=USERTrust RSA Certification Authority
- Valid from
- 2021-03-22T00:00:00+00:00
- Expires
- 2038-01-18T23:59:59+00:00
- Days remaining
- 4125
- Serial (hex)
- D27FBBC1DE359E5216AD6149586099C4
- Signature
- RSA-SHA384
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
92:F3:51:BF:3D:54:16:4D:FA:8D:D8:F9:E1:13:9D:31:50:34:97:86:48:5D:2B:9E:EC:D0:0E:29:71:C1:E6:C5
Certificate extensions & PEM
- authorityKeyIdentifier
- 53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
- subjectKeyIdentifier
- 56:73:58:64:95:F9:92:1A:B0:12:2A:04:62:79:A1:40:15:88:21:49
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- basicConstraints
- CA:TRUE
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- certificatePolicies
- Policy: X509v3 Any Policy
- crlDistributionPoints
- Full Name: URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.usertrust.com
-----BEGIN CERTIFICATE----- MIIGlTCCBH2gAwIBAgIRANJ/u8HeNZ5SFq1hSVhgmcQwDQYJKoZIhvcNAQEMBQAw gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIx MDMyMjAwMDAwMFoXDTM4MDExODIzNTk1OVowXzELMAkGA1UEBhMCR0IxGDAWBgNV BAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMtU2VjdGlnbyBQdWJsaWMgU2Vy dmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2MIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAk77VNlJ12AEjoBxHQknuY7a3If3EldVIKyZ8FFMQ2nn9K7ct pNQs+uoy3UnCub0PSD17WphUr55dMXRPB/xQId2kz2hPGxJjbSWZTCqZ80gwYfqB fB6nCErcPiscHxhMcao1jK34bug7StnllALWiYQTqm3ITzPMUJY3kjPcX4jnn1TZ SPCYQ9Zm/Z8XOEPFAVEL1+MjDxRdWxTnS77d9MjaAzfR1jmhIVEwg7Bt1zBOlluR 8HAkq79FgWRDDb0hOi886Z4NyyC1QifM2m+b7mQwkDnNk2WBITG1I1AzNyLjOO34 MTDMRf5i+dFdMnlCh99qzFYZQE3Oqrv5tXZJlPEn+JGlg+UGs2MOgNzgElWApjtm tDmHLcjw0NEU6eQNTQ72XVdyxTscR1ad4tX7gWGMzE2AkDRbt9cUddzYBEifwMEo iLTpHMqnsfFWt3tJTFnlIBWohAIp+jiUaZpJBo/NH3kUFxIMg3reH7GX7vmXeCik yESS6X0mBaZYcpt5E9gRX67FOGI0aLKGMI74kGGeMmz1BzbNokxu7Io27fLmmRVE cMN8vJw5wLTha/eDJSNX2RKA5UnwdQ/vjescm1QotCE8/HwK/+97a3X/ix2gGQWr +vgrgULoOLq7+6r9PeDzyt9Ol5cp7fMYVumllqy9w5CYsuD5otSmR0N8bc8CAwEA AaOCASAwggEcMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud DgQWBBRWc1hklfmSGrASKgRieaFAFYghSTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEQYDVR0g BAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRy dXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDA1 BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz dC5jb20wDQYJKoZIhvcNAQEMBQADggIBADpvBIlq7bMU0cFDT/9P9+BsgCkRgQs0 S6Bf7vJSlWMHwby0VGvxCS0hrbi0K2BINZbEbsVsgpQq04431yyoVn3Hldorgq24 RldRDOOipEZDTFB9wC9HYt1thHF00XeG2C8KC1plwoEzKAIhPvefI/C3cT0CfTXJ uFjUbKIgSwjNjw6YHtLgoy/hd5+JLUlLco/gzFX/qWbT7tEquOMYpsNKWZj8TLqP q6zMiG4Na6feEZte6YPXGrMWlTWN341vDedc+yxQqSug79HJUQcOZs7KyDWztmae QxsPE49UV/8XwrfZtZaYyrs4FpD94Z4Q8dzXGL8+qEJjxgcza7W6PROaClubavd1 VKPm8+aCW77u7SxpR2TFGL6kPdxsKyFijpcunR5V79sUyROfNdzjrAcFWZXK8sbb 9FlnwuVG677JLv+ZVTX5AxLvW5OB4zt5uS+zB62wJ/Wv+jXGAttSAcJec4iFgCWH Rvdi/jJoSzRLa3nEzx6pFIzclSCnh0u1xCeLcUBypSiPga8W+6PkuoyQq8U9qs9E oxG5NvrvlyshwUS9yvcZRGw7Ljlx4jJH/BhIPR8kIBCQj1vna9TziZOrw1Of8hDU bHKFG9Pm8Dp2vbjz/2JH39qvxshPKVllGfq+5klPm7yZRUYTiCMAbqwNdL/nsqF2 Rnnyp58XRStJ -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.