payroll.norkisgroup.net
Issued by R3
About this certificate
This digital certificate with serial number 04:6f:1b:c8:8d:6c:fd:bb:8d:1c:57:a8:be:51:31:a4:09:6d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=payroll.norkisgroup.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:6f:1b:c8:8d:6c:fd:bb:8d:1c:57:a8:be:51:31:a4:09:6dSerial Number (int): 386257416938977977834439934226075715111277
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ed:93:5c:e8:c3:a4:bc:d5:a6:98:dc:0b:ab:0d:a8:0d:34:5f:4c:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ce:0f:80:57:94:23:73:15:cb:39:13:28:45:4b:af:7c:43:5c:6b:4c
Fingerprint (sha256): 07:52:3e:fb:eb:b9:4b:86:87:73:1a:33:6e:56:42:ba:4c:32:8a:9b:85:63:05:17:e7:1d:df:e7:44:27:51:ec
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate payroll.norkisgroup.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for payroll.norkisgroup.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
payroll.norkisgroup.net
Other certificates including the domain name norkisgroup.net
(limited to 100 certificates)
gate2.norkisgroup.net
payroll.norkisgroup.net
gate2.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
sni.cloudflaressl.com
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
sni.cloudflaressl.com
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
gate2.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
sni.cloudflaressl.com
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
sni.cloudflaressl.com
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
payroll.norkisgroup.net
Certificate
The complete raw certificate details for payroll.norkisgroup.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISBG8byI1s/buNHFeovlExpAltMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA5MzAxNzM2MDBaFw0yMjEyMjkxNzM1NTlaMCIxIDAeBgNVBAMT F3BheXJvbGwubm9ya2lzZ3JvdXAubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA3fE4K9SuG7AbiOK2dk5PhKsmdtd5rA75TZ22K8g+IlfqArqhv/XS 4oDN1R+f4bN6LSzcc9I5yCu9P4vVFyrduJxAOKf55INmRCus7iWS/17zsVFCgSPD jVvSSBYKwuTwLRdz9ik4E0rzbXgaKOcKgxcXvgz4WLAx7NqdQ0SZhpCCq1zJNH72 8C8KJGMTH0XfPC14umVRvp+j5cYYIreg5ZkVJJ2Ntov4ur/N27QXD14o382mXnBk JLuJqI5bvF0qYly9J0rMiQRRCI/sS82D+1Tbv+ub/pypifVQcG53486Z2QdxKVub 5mpI9Dn2Qf3mUl/A6xYPA3/+Q8iuxTTraQIDAQABo4ICUzCCAk8wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBTtk1zow6S81aaY3AurDagNNF9MejAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzAiBgNVHREEGzAZghdwYXlyb2xsLm5vcmtpc2dyb3VwLm5ldDBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABg4+vGR8A AAQDAEcwRQIhAJv1KE8PSx8P0P56VlpTinbNhIy2DfihI1XczPUIErUoAiBtNG9O xXvuzmk2tPxf+fW9/e7fH0WZq3MINg46xOiTLAB3ACl5vvCeOTkh8FZzn2Old+W+ V32cYAr4+U1dJlwlXceEAAABg4+vGN8AAAQDAEgwRgIhAMubKWsdaTV27pRMKz9a 5yz0HMshTnc9/ARiOeGQkngfAiEA015EAwb+ViK8zXlIAmxQDKJbtJYZVlAP29cf 1oz9nlIwDQYJKoZIhvcNAQELBQADggEBABtgxCocS0SAG4W3A7lfJlhErtcRgtII Mm/I27Pu/FKpNtyMZLOiPSbpV3w9KTG4SHrQ8NwULNcYyJv40GFSk/7pkIZb8z1G DGm2HghbXUZkeTfGn+GJUK+qSlX1CPwxVR2fyBmkCw95+F+SrwkOzzOQTQHgcDvL eBBh8QFBaAycyqZz0SMeCOKznoI3VnfXVbAu6+dVIcxarp7FftWlJ6xPRPhg0qK+ 07eGj5XZJapTL8vMiGb5PzdTBXbzUW18KCoWCyOz5mhi8GL00AcnQ360MSP6bxEI URhKCAK1dAgJY3K7d8gIjdv0s08AncmLWMCqk7KCAo0FiwZJPer9q7s= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fE4K9SuG7AbiOK2dk5P hKsmdtd5rA75TZ22K8g+IlfqArqhv/XS4oDN1R+f4bN6LSzcc9I5yCu9P4vVFyrd uJxAOKf55INmRCus7iWS/17zsVFCgSPDjVvSSBYKwuTwLRdz9ik4E0rzbXgaKOcK gxcXvgz4WLAx7NqdQ0SZhpCCq1zJNH728C8KJGMTH0XfPC14umVRvp+j5cYYIreg 5ZkVJJ2Ntov4ur/N27QXD14o382mXnBkJLuJqI5bvF0qYly9J0rMiQRRCI/sS82D +1Tbv+ub/pypifVQcG53486Z2QdxKVub5mpI9Dn2Qf3mUl/A6xYPA3/+Q8iuxTTr aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 386257416938977977834439934226075715111277 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-30 17:36:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 17:35:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'payroll.norkisgroup.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28017615126228631642563222565907298209288018574956337495440283398577714882877773389807694430975316191573396414380479157331878022903471154377861314399461727081903656200778132436819235715785186278731079575961107732115477028739962188263630873529005851970767546624391367250003187772359577871365673984287760043786509278080800452331637766844920134023640692245546875615891180759042924647462135109264016650642292268211050891235844538024344155497597484460631050225067068294141537396619197597434864927647748469664966096958591588788483917099237049206063883578411561711023802508254592130718423473214883364323135276177087165426537 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ed935ce8c3a4bcd5a698dc0bab0da80d345f4c7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payroll.norkisgroup.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001838faf191f00000403004730450221009bf5284f0f4b1f0fd0fe7a565a538a76cd848cb60df8a12355dcccf50812b52802206d346f4ec57beece6936b4fc5ff9f5bdfdeedf1f4599ab7308360e3ac4e8932c0077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001838faf18df0000040300483046022100cb9b296b1d693576ee944c2b3f5ae72cf41ccb214e773dfc046239e19092781f022100d35e440306fe5622bccd7948026c500ca25bb4961956500fdbd71fd68cfd9e52 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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