SSL certificate
TLSv1.3mail.jonaz.nl · 169.50.134.82:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- CN=mail.jonaz.nl
- Issuer
- C=US O=Let's Encrypt CN=YR1
- Valid from
- 2026-10-22T03:26:52+00:00
- Expires
- 2027-01-20T03:26:51+00:00
- Days remaining
- 76
- Serial (hex)
- 05F55B0E7E3D57A3457548AC6A162DDD2555
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
DNS:autoconfig.jonaz.nl, DNS:autodiscover.jonaz.nl, DNS:imap.jonaz.nl, DNS:mail.jonaz.nl, DNS:pop.jonaz.nl, DNS:smtp.jonaz.nl
SHA-256 fingerprint
62:03:89:22:82:D8:FC:31:2A:C8:C9:4B:04:4F:17:A0:52:ED:87:EE:65:94:9C:F1:90:FD:45:80:DA:7C:4C:29
Certificate extensions & PEM
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:FALSE
- subjectKeyIdentifier
- F5:4E:3C:BC:2E:E1:2C:74:39:F1:4E:76:01:F5:6F:1D:89:A5:53:81
- authorityKeyIdentifier
- 1F:2F:35:BE:46:14:82:CD:40:B1:AE:79:2C:55:78:FA:F7:D4:68:FB
- authorityInfoAccess
- CA Issuers - URI:http://yr1.i.lencr.org/
- subjectAltName
- DNS:autoconfig.jonaz.nl, DNS:autodiscover.jonaz.nl, DNS:imap.jonaz.nl, DNS:mail.jonaz.nl, DNS:pop.jonaz.nl, DNS:smtp.jonaz.nl
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://yr1.c.lencr.org/86.crl
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 00:1A:5D:1A:1C:2D:93:75:B6:48:55:78:F8:2F:71:A1: AE:6E:EF:39:7D:29:7C:8A:E3:15:7B:CA:DE:E1:A0:1E Timestamp : Oct 22 04:25:22.136 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:57:99:67:9B:A9:1F:AC:D0:D3:D0:0D:21: 85:CF:DC:8B:0F:AB:97:5D:84:08:E4:25:73:25:3B:83: EB:2D:27:62:02:21:00:E4:4F:32:DF:48:BB:86:16:D5: F3:44:FA:3A:75:8D:5F:0D:87:F5:56:62:2E:8A:67:C4: 7A:39:D5:90:46:CB:6F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 8E:CA:47:0B:AC:DE:6A:F3:A2:06:B0:A4:7A:84:B7:46: FE:1F:C6:BF:95:3E:25:E6:9B:4E:E4:02:48:F3:C6:E8 Timestamp : Oct 22 04:25:22.972 2026 GMT Extensions: 00:00:05:00:2A:E9:85:8A Signature : ecdsa-with-SHA256 30:45:02:20:2F:1A:F8:FF:2C:C3:26:00:09:8F:18:AA: 2F:CD:0B:8C:C5:2B:7F:13:A6:CB:43:E2:20:04:CB:5C: B2:D1:A0:C5:02:21:00:E4:AA:B6:65:71:83:D9:94:2C: 6A:C0:B6:F9:E5:27:B9:FD:37:F2:8D:2D:F8:3E:57:3E: 96:C7:62:E4:DE:8E:41
-----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISBfVbDn49V6NFdUisahYt3SVVMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNZUjEwHhcNMjYxMDIyMDMyNjUyWhcNMjcwMTIwMDMyNjUxWjAYMRYwFAYDVQQD Ew1tYWlsLmpvbmF6Lm5sMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA zlNYjv2KKC2a79xDiVk1qO1skC1x8vkDGmgZ0AtzuJjYyHoHzIPJc8liAHiAM5t5 uYCsKIjZRHgOQNSj3n52M+QTr8j7X29pj8s/a7fNbuOsg3co5YxuMRhUlnyUE36y EjGfRndW+TfWEoTKdUWbH6WmgqfJMvYJ+9NM0Oa8AjvYB7OhGyIAsf3vpL/Jrev7 p8jGxFedOyo7lsxgIV5x68QTCwY5NoeXpub6FFV19CiSC0EwdinbddNoznVJlDPP WbB2iftnkWMnTAI1cm5W9qCAzVuXHarpougmAIHuukUOKmsdwTTtYZz2+G4ZKEs7 TPcK32SpYU882Pfg+0R6FT/vDk95b3tfRbwXYDIZx0OuGejlH6h2Wy/PEOIyAgNb gad0FDPPW0XQsCnoUR0Sf4bPDVxmqVsdwtB6W8yVEjUEIddpJyMIfSLqj7wpf3Bh /1C7iuRmgSha8O8+bJdCrD/dKFdcNwVK+0P2WaH8Wcrx//Ccu+oSIP13uKrUrLQ+ j2+de4K/UobiIqJJty0uPHEfUC5QbNAuyb2Kb8dfzgHWmmlanfBQM39EAR1Qkg8W pZ8qTMeKp5ylYftYwEi6j/+Va6/Zj2/ABE4cyIashW5N280nqog/DfwWSzfqbyQU ovc8xuFCOpwVanBfjAPmgf0lsoe/o9dMqszqtDq7Ms0CAwEAAaOCAnMwggJvMA4G A1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBT1Tjy8LuEsdDnxTnYB9W8diaVTgTAfBgNVHSMEGDAWgBQfLzW+ RhSCzUCxrnksVXj699Ro+zAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAKGF2h0 dHA6Ly95cjEuaS5sZW5jci5vcmcvMHAGA1UdEQRpMGeCE2F1dG9jb25maWcuam9u YXoubmyCFWF1dG9kaXNjb3Zlci5qb25hei5ubIINaW1hcC5qb25hei5ubIINbWFp bC5qb25hei5ubIIMcG9wLmpvbmF6Lm5sgg1zbXRwLmpvbmF6Lm5sMBMGA1UdIAQM MAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly95cjEuYy5sZW5j ci5vcmcvODYuY3JsMIIBDAYKKwYBBAHWeQIEAgSB/QSB+gD4AHYAABpdGhwtk3W2 SFV4+C9xoa5u7zl9KXyK4xV7yt7hoB4AAAGhYdtD2AAABAMARzBFAiBXmWebqR+s 0NPQDSGFz9yLD6uXXYQI5CVzJTuD6y0nYgIhAORPMt9Iu4YW1fNE+jp1jV8Nh/VW Yi6KZ8R6OdWQRstvAH4AjspHC6zeavOiBrCkeoS3Rv4fxr+VPiXmm07kAkjzxugA AAGhYdtHHAAIAAAFACrphYoEAwBHMEUCIC8a+P8swyYACY8Yqi/NC4zFK38TpstD 4iAEy1yy0aDFAiEA5Kq2ZXGD2ZQsasC2+eUnuf038o0t+D5XPpbHYuTejkEwDQYJ KoZIhvcNAQELBQADggEBADYYsxTQAakSoMeWDZJMUzQ/vg3ft1F+upuFF1uEIcIU pRGAi+44B+T6r5oz9Q2dfvwV/ycwmmiBikIs2cMZjyQUZqV1S+8i8jiC7lzwNxXt THRUeMC6aqdMKLxXdLRQsq9k49M32S80nf+6rDz0iUfW88mbJew50UqQaO/wm+aI zjEEQjLX7y8aHmE1ESmg5CyNTCYe9l3Goq1HZSXhs/BUsLdB9PQvp5IGxEa/rnVV NWoJRMYSOoekd3bkm3uA6MraEiUt+OF/wXnKNPpqt/f5O2wtiTG1YbxXc1bGL1L9 D4cDOjJeB8Z01YW7CdCx4BntbR/PXLoGlxqAMPilEGA= -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-11-05T03:16:28+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=US O=Let's Encrypt CN=YR1
- Issuer
- C=US O=ISRG CN=Root YR
- Valid from
- 2025-09-03T00:00:00+00:00
- Expires
- 2028-09-02T23:59:59+00:00
- Days remaining
- 667
- Serial (hex)
- A20253F15F2691C05DC1CE13B9BCCA4E
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
13:94:96:34:D9:9C:D6:FD:6A:A8:0B:C0:34:FE:FA:CC:EB:19:69:FE:EF:98:65:86:71:3E:CD:BB:05:75:8D:3F
Certificate extensions & PEM
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- subjectKeyIdentifier
- 1F:2F:35:BE:46:14:82:CD:40:B1:AE:79:2C:55:78:FA:F7:D4:68:FB
- authorityKeyIdentifier
- DE:E7:5B:60:D0:22:6D:40:28:7D:3F:0D:01:FE:A4:B5:52:B4:51:94
- authorityInfoAccess
- CA Issuers - URI:http://yr.i.lencr.org/
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://yr.c.lencr.org/
-----BEGIN CERTIFICATE----- MIIE2zCCAsOgAwIBAgIRAKICU/FfJpHAXcHOE7m8yk4wDQYJKoZIhvcNAQELBQAw LjELMAkGA1UEBhMCVVMxDTALBgNVBAoTBElTUkcxEDAOBgNVBAMTB1Jvb3QgWVIw HhcNMjUwOTAzMDAwMDAwWhcNMjgwOTAyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEW MBQGA1UEChMNTGV0J3MgRW5jcnlwdDEMMAoGA1UEAxMDWVIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVi8X2xCYgMXvJxNPKp/oF13UMgmPABB07VC LNDtoXmt9luEZNJSBV10VyT1Pz6LD8Zq1d2gc43WNl1AdRrj4sEnazbOiz0nPpmG Bp2hui49oZtDIY6wdKeZAi5BbNU20CH6RSBBMLSQ9cXrH8dxdv4PAJ45ssGML68U SE3BsjC2a6cAN9L5CgXVIQi5tfNiTPoFZZ3S0OlXqLmmtdV95udWAb5b6e/F49Di CsH0Y00Ag72BVIb1hzynmKe+X0mERBTtsb3BwmpV9ipeBjMLoR/D9cHxHQCWoi5l TmXwY015J5rGelz1nZjJuxc2kioaX29XJBnhMkP531rSdG5uMwIDAQABo4HuMIHr MA4GA1UdDwEB/wQEAwIBhjATBgNVHSUEDDAKBggrBgEFBQcDATASBgNVHRMBAf8E CDAGAQH/AgEAMB0GA1UdDgQWBBQfLzW+RhSCzUCxrnksVXj699Ro+zAfBgNVHSME GDAWgBTe51tg0CJtQCh9Pw0B/qS1UrRRlDAyBggrBgEFBQcBAQQmMCQwIgYIKwYB BQUHMAKGFmh0dHA6Ly95ci5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwB AgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3lyLmMubGVuY3Iub3JnLzANBgkq hkiG9w0BAQsFAAOCAgEA0+zvMq3kHig1ddTmmm+RibTr9/RpX7k4buanMMRqbV/y IvP82zAHN3mvaw+cASuVsdpd0ikjhr4hnhJQLQOzOp2ccKrsdGOAgo0vddeISFAq EWEV4lmUM3vFF796up+bSgmJ1u6RupDCMxDgF8M3eLvGuj6L0lu3zkQ0KuQLnKxL tB0oQqn1Idg5CuuGpMvQzk29Pa3D/qHurc0EIM9SxukQuJqq63lxsYyRQFU8yMBO hq1w5LbfaWNRrz1uklOfI/pYkAb2E2MTZrAMQkBIE2S8Jt1F8gRc96o/xOsrgvSk a84AisX6xq1lz1Z7jGvrnXc4TMcjxZTjiTaihcYI1JIXZiLtEMSCa5l3cu8YWd6z dLRQlqRdclVjuQfNHawRJ6GWlkK0QJosivTKwdBw3KxEtzGo8yMHERbsy57gP1UX HOMcmZYQC0gtyR3SxfenIM/MxC3Ia2Ypab/kQ/CTnlIn2KQ5JUC6NYrGCbhFN9bp 5lKJStEwCUnLpntcrXk5XVDCNv/5RyWpRThkGOV7GetKkQ0qAY8hCzWK6oqnAhDZ cjlYVdWfqOw3DIOX6EDNBgAqHarRVxyF9QZdOaXSyPJ0ueD2BYJEBgaCGQ8rAaU/ Qc123V5LTXDZW4CcsPBDyhy4v+c8hClAyw/IkJlfBqxB9D+/wvIMHgECZ4ptP6o= -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=US O=ISRG CN=Root YR
- Issuer
- C=US O=Internet Security Research Group CN=ISRG Root X1
- Valid from
- 2026-05-13T00:00:00+00:00
- Expires
- 2032-09-02T23:59:59+00:00
- Days remaining
- 2128
- Serial (hex)
- F24B6D17F9D9AD7CB1C9FEA78782699F
- Signature
- RSA-SHA256
- Public key
- RSA 4096
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
07:26:39:D0:B1:40:D5:BF:FA:E1:6A:D9:C3:F6:CC:60:86:04:06:21:F5:1E:E6:1A:6D:46:A8:91:5C:07:CF:76
Certificate extensions & PEM
- keyUsage
- Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- DE:E7:5B:60:D0:22:6D:40:28:7D:3F:0D:01:FE:A4:B5:52:B4:51:94
- authorityKeyIdentifier
- 79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E
- authorityInfoAccess
- CA Issuers - URI:http://x1.i.lencr.org/
- certificatePolicies
- Policy: 2.23.140.1.2.1
- crlDistributionPoints
- Full Name: URI:http://x1.c.lencr.org/
-----BEGIN CERTIFICATE----- MIIF9DCCA9ygAwIBAgIRAPJLbRf52a18scn+p4eCaZ8wDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjYwNTEzMDAwMDAw WhcNMzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQ MA4GA1UEAxMHUm9vdCBZUjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ANvGJnN78CTJdWL3+eGfsLN5TrNBJs+VH9hRXqRbwxu9sGNiB0BD1fcOxbSUQCJI M1xE13Db+5Cw1w0s0EBYsvuIP/6joF0w8cuImbgR1OGgYbSQ4OpzI+DG8SGuTlcE 873OCS+kh3srlo6vl43M5OJg4Aeo1sfHp6kTJDoIiFBNJAY+OKfX/FUvYKuhjT+n o49lmqmupSBI5PkBQiqrEGtWU5uxU/cQWHGu8jSjFBznZqvbNPLMXMLFxCb3WTfr JBXXjqvWG+v4bjzxjjeAtOlU7qarRDvNOyAuQYLln904M+faKx8hnLCpJ15ZqaEg cNlY+9MMWcC5yvL2A2j3l9+2buggZX+dOE91zYmIdawTvSZuVvlbRrAlLxIB6pwM BjneXCjYQ8+3BCCjssbSNpZU3hTcBDdhfAlEDlYr6pEatnMdmDT5BqnKC92bd0Eh M1fbLHioLccLCuievT8ZkPhZrq7Mii7gNXAcUEAR8+lzYal+9zTg7C5DALyVOeG/ CqfRAMn1KSHCR0NSA6P8tn/mGRlnCct5rtVCLnVySVpU6H1qGg3DgTOuskf8eahT MiYbI5ezPJmO5ertalskQ1utp74+eDy92PI4ftHKTbq9IWhH4YZKh3WnJEIt+oQv lYZbY8tpEroKrFB6PFGzrJIDRyts4HqvuH52RFj2zv/BAgMBAAGjgeswgegwDgYD VR0PAQH/BAQDAgEGMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN7nW2DQIm1AKH0/DQH+pLVStFGUMB8GA1UdIwQYMBaAFHm0 WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAoYW aHR0cDovL3gxLmkubGVuY3Iub3JnLzATBgNVHSAEDDAKMAgGBmeBDAECATAnBgNV HR8EIDAeMBygGqAYhhZodHRwOi8veDEuYy5sZW5jci5vcmcvMA0GCSqGSIb3DQEB CwUAA4ICAQA8spSI95KKfn2W6GMmDpHBJSPaLbsS3W93cijJCRCYAc1fsJgL1FIL 7C0C9ecPOdcwB2fi0Dk2p94j9iTJCxmt5CFSKLRWwnXT2MMSXexVxqoVB79BdWPx VXETkVme/qYSAuKVHh5Ps+5BixgmwS1JkjSAc+MfrUbNssVEEnH0aEiAh+rotXAV JSP/Ye7LJPEwD9DWG72vVWbhAcuOf5OLjz57Ctk7MgQHynZ7+PlHJtajroCaIbtC r6tcZZaAwUQm+jQyeWdV+2hv9deOYFmKeQyjjcSrN5Nadrw+L9DZJLbA1HqeNvLh BgqpP0fvJq2N6EtD574N6eMI7uMsJTnji2UDz9el5XLSv9fqJMuDQtYVb2oTNoKp oUqhxPVC0aq4eG5MESaIdn8b5ZGSSeAJLMHXljEdlNza+ncfkviXk1POLnnFdvx8 /gk6M374WbLWFXw8N141B/Rl/tINGfl1TxOIiqtiMYkL02RSGb1kq34BL9NPP27z RGMuHGnzS3hFIrRTfKxrzUZ9RzQWzEG3K6fJ3r2nqSltkeytis9DIBoFY9VmVyjL M71DMi+y1+TRSJVClEMwvA4yL++7q9XZx5r5wBRWB4kQTKH5qyoZnDw7iiuh1lID yDFx8r7i9vIJU5HS3moZLkYWAOilMaV9N56A9Bgb6dNcHkvg3NoaYA== -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.