DV SSL/TLS Certificate for nanokovrik.ru

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the nanokovrik.ru DV SSL/TLS Certificate

This certificate with serial number 06:b2:20:38:ca:2d:af:b7:0f:3a:b9:01:a1:1c:68:4b:61:80 for nanokovrik.ru was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for nanokovrik.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:b2:20:38:ca:2d:af:b7:0f:3a:b9:01:a1:1c:68:4b:61:80
Serial Number (int): 583286807067644110067345981877829373747584
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: e1:c5:12:76:d9:c3:f1:46:b7:44:5c:f0:79:47:04:0e:39:51:54:c6
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 75:3a:a4:38:87:ea:3a:f5:d8:36:93:c9:58:94:65:f6:b4:bb:dc:a4
Fingerprint (SHA-256): 11:90:6c:d7:c1:41:b4:37:e3:0d:96:53:16:49:56:d4:83:8c:49:ce:3d:38:97:5a:ba:c1:f1:2a:5e:95:01:ca

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/1.crl

Check the revocation status for certificate nanokovrik.ru
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for nanokovrik.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for nanokovrik.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 583286807067644110067345981877829373747584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-20 23:46:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-18 23:46:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nanokovrik.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775793484176879439888718929527477425175030979818238241679310513620863459027877896690223559232484670852009807909100651572069831426453201610010914214116529031646632645784349007045558371841739500051802371688372431018913444536599515375006442089383385286629599852051162741335044097735329263535353046340596368103385816018627287458762323798319412261445526515672172732029304757690282265017747526941917082216209048277988141738784278181661186641707643782839192545754041246017416956093188584315270990659898668639122029504586426636221572267818209648215432680103374508924521581671268137065537082730588243669268383619982374354973843613581781581220876050472424864842257493710858320460381631720260336444790313598903469013734545385191919842013218511356594139937584891737249997902135356656539196666137658051122793560808371488056010402367015370999633198289217600977945958996738222667955786632822950906521464512230567476093240693978893019498432937676878413944463648946771242997570228475421290692393003800894308451436717071622258434543322931721075556701660419650944056391213399722424349134797583634418449010759290694319734922534079860514690838448985139772266516796225954041293573049915110537437069882843284688131035728576429686709845243112135485567028867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1c51276d9c3f146b7445cf07947040e395154c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanokovrik.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000196f04d4f9900000403004730450221008b87dffe7b0b385e6f2f36b6d0270a3ddd27b8b982f7fb5050c28c18152efe3602202cefc90fbf968f6119a7fda35ce6133b440290c2720c7efa7bf023898fd1a64f00750012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000196f04d4fa8000004030046304402201b175755918ca01aace1ef6bf31dace689be79597229612dbc6b89c25cdcfb0e02206910c64b3cdaff80bda481cb42f05d63a71c71c940b636b87f37727064355537
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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