fed-id.nuv.la

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:61:a2:b1:7d:c8:84:77:d8:79:11:45:a0:b5:c5:c5:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fed-id.nuv.la

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:61:a2:b1:7d:c8:84:77:d8:79:11:45:a0:b5:c5:c5:78
Serial Number (int): 298557415657297329245883019337484521031032
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:be:d7:44:ad:5f:5a:16:14:91:28:66:86:82:32:ef:e7:28:48:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:4b:44:22:70:c5:a9:1d:c6:9d:37:f7:d5:5d:f6:77:b7:05:e0:de
Fingerprint (sha256): 07:c8:c0:1d:26:a1:62:a4:65:b4:a2:a5:34:10:16:a8:1c:b0:21:ec:c6:72:ea:be:1d:7e:ca:7a:9d:6a:5f:a1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fed-id.nuv.la

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fed-id.nuv.la

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fed-id.nuv.la

Other certificates including the domain name nuv.la

(limited to 100 certificates)

Certificate

The complete raw certificate details for fed-id.nuv.la in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298557415657297329245883019337484521031032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-07 11:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-05 11:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fed-id.nuv.la'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697063025472845438387994818873759425199926250206653245856576500272373721916895447373395306110332044119895908169372679353523513433328668735982709756455221541159327146814753853815641615020215897517996182712380780868150783487474840961551730799039226799343786446760274252118984817055705989784176522099320182399539388083193086074087440592980339990464644862834707023077112122494930331005113669058270128174719207020932616602955278987401426370424084512643118554879628479377328206616416465523473660785901006684529669449609862469716659071046245804509629484886584947082777339115648574585988528334622871982533998241415927872133794585826523852788616418073097638969984818087959391215894159665660364165870597377344077858113577046505754501518250895964401756481384541005977625634110930576726453477645819455866316257192943175255597443670755973015521392624530826079075818271531482006109528302247838843857261796638241376813053737826852970021495302164055355368496648599414550163410052762142868988797750230030183190127806863560450258998395465158978985988254464507137521049837422926934761537963016387354724696113603308966749564150948863215655735376093530378826978970506786892815580958767307507801023226797930236760756330433522496967491503703897465916964713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4abed744ad5f5a1614912866868232efe7284889
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fed-id.nuv.la'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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