nervo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f0:55:46:79:12:de:2c:28:2e:9a:68:0f:2d:56:3a:c4:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nervo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f0:55:46:79:12:de:2c:28:2e:9a:68:0f:2d:56:3a:c4:ec
Serial Number (int): 430230262084154461126615941253606940525804
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3c:2c:69:52:e0:9a:d0:d0:08:6f:e1:6c:60:f6:65:ca:f9:e5:d5:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:19:2b:88:2e:96:a9:9c:ae:73:27:eb:46:5a:1a:33:d3:51:dd:43
Fingerprint (sha256): 02:16:d8:4a:b7:56:1d:9f:1f:89:96:9b:7e:a2:5c:ff:35:48:c5:67:1c:33:27:85:45:7e:d8:33:f5:ae:90:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nervo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nervo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nervo.com

Other certificates including the domain name nervo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nervo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430230262084154461126615941253606940525804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 10:10:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 10:10:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nervo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691199298523564630871847248010577556312100268914668022441918886877971736027195204024110806824576778360109734462421386704260510895487155949263200994725536220113722280222396981946754392992797323322792447889915066013874264235267655649049100521897403202719277128196101084994119872720153291763029912104033659722497781838178003868461826790744871430101599523896659394463046633834359884824081181695664973820565704939822911338483941941981246533238197444109389545317001950879204600796266130444178211162200555430509335333087575655123705746658717578059702232314669259441741515856629617718604322420690805525877400954550254524524237898989626177003450357353524108126346277541215734455444215513775887357885588003491950629220925409039663332685423909159513006822970149400172579267825680187358379046169546098025514458765824188000838455784926829219812174475147673339028917170750490215641844233710330227202250141233419732481825982169940591833491949645718589021004042244320135575145250996722826722256523137840449009611768896226304441842448296622065542880705099054588544871676336653382263665557127526758928342963294474930636093857437615433534192347622282222849705020830488823154969313708637818446170361357048913159158604545288746893987706542632894737893419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c2c6952e09ad0d0086fe16c60f665caf9e5d51d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nervo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b1421ea70000004030047304502207354bc3dbe68285283a9604a9660465c1b63ca2904c5d3c2c20df0448a754e3d022100ef502cb47eab1acecd7b4ad49a4ffac123528ec1a079374b9c32add0b22f8be90075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b1421ec57000004030046304402206a31102c6d60102b3056ba3a5e1b4cabc10c05ac3706e373d570b891cfaefad802201fedb87bbd2cc28f5ecb4734b7714f26e64f243ce81c3082790beb2edbe541b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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