www.nukco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:8c:f2:81:09:25:0c:70:05:c5:d8:4d:30:b2:84:c6:16:49 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nukco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8c:f2:81:09:25:0c:70:05:c5:d8:4d:30:b2:84:c6:16:49Serial Number (int): 396411018262724049798338739243268859893321
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6d:11:cc:d4:14:fd:7f:79:b5:f1:9f:e7:77:17:43:b8:00:8b:69:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d7:94:fd:b4:7e:bb:28:44:d7:00:7f:4f:b9:1c:df:93:bb:ee:a0:d2
Fingerprint (sha256): 09:e7:2d:34:4a:90:bc:8d:41:67:af:29:13:d3:f9:98:52:e9:f0:98:ec:13:6a:e0:7d:6e:fa:eb:57:ea:65:18
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.nukco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nukco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.nukco.com
Other certificates including the domain name nukco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.nukco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISBIzygQklDHAFxdhNMLKExhZJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTAxMjM1NDNaFw0y MDA1MTAxMjM1NDNaMBgxFjAUBgNVBAMTDXd3dy5udWtjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDOyYs+mqYgXTD2yBQEZJURGgqryf7Hyn9B oWMiLKVHYNQPsBkKGR4/jq28u/5lrD/lHQQ7WX3CaDs652mCpDeRc753mz4iW8uj Y53ncGAZXYSUs8Wdk1FkI4fVBrtt0uFbr3lI96PaxdISbmFaS360+6A69PbYbmQE /SZOeNi31IY31MHCROElVLzg/wyDUa5pTc3PBhuYSaZI0tHeTHSnaET+EVmcaGkw eq5JcblKonZ50pDC63vKSQ1k5lkdwk1cTEE16REM440lKpISs/wnnYJMEciVyXPm wFAMkFy/ayX+Kyo9bQHz0NQ4tBupbQBcifwo6bfqd4m22xY3JNWaZQLv843pcYfm TuvtPCV0m54eQrK+z8oRjykbNGXf6kUwtkh9eq2g/+Fm58MRIO2DmkkZfuzMcO2K v5+FAQGrAKowyb8kjGohieLCI1DB4GCzmURfo5waS644X0l09oSjgW86KxuOpnLS rMf7NxGR9/Pq0fusN1+Sq9uaBZazniDkprypd2eD8dj0rcEOL5YpKmXW1+uXSwBz /8hbdwtIA7rlRZO+65Ql5OUkxxajd0g10g5JWnvaBrBqG6Q9tkDc8cnDWUuSF2Za 5SlU0upE3NiKOF+slr/WysStJ9ZJtqXkDSOu4l1qNJqFUNlvQR+d3GHdVYsNS0HB ebapb6xInwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRtEczU FP1/ebXxn+d3F0O4AItpXzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5udWtjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXAvUBorAAAE AwBHMEUCIQD78+MUEv1tqPGPgDWj7AIqrQ9hPW7KZF0ZJHok4kyOhAIgB8csIGTB 7cmLg56xXSwgqgfEP/1IbdsxuHpnELI0gSEAdQCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAXAvUBoiAAAEAwBGMEQCIHxELDaERNYSxEYAIXMacOnn 1xQn1W6Hqob6WaN76A5/AiAURabc1jkcGZ6/BcQMJcpNr5/pXX8oeWvq/Dw3PvKn iTANBgkqhkiG9w0BAQsFAAOCAQEAImwU8fOw+2dkcs3MRlz90Rh0wNqUatH2yI24 PyX1cymwa8pebljz2FJEgDCqw0yQ7KObtmBq3vHcdQjVjSteIqPh40HWNsQd1zLK yL6te31EPOstSeawLpgXDhdMtXfxLWS64MTQaHS627HGN9K4V64eN7IrohrKW/xw uLV8rS15VXu7YsTYBwu0WY4ZPq7shsWoWF1EB/oLTWsJyvDR+6BTT9ml93juvYBB YFNIjH8X46L+VHLYrAdjVq2gw7+mittmIrKh3faenxSEsGLkXeY0Y9AZr+vfhZDN ADDF6rzvLwL4ffGRsAk/k3wzZK+TmgyHhNT3RuiIn+nTY3dJRg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzsmLPpqmIF0w9sgUBGSV ERoKq8n+x8p/QaFjIiylR2DUD7AZChkeP46tvLv+Zaw/5R0EO1l9wmg7OudpgqQ3 kXO+d5s+IlvLo2Od53BgGV2ElLPFnZNRZCOH1Qa7bdLhW695SPej2sXSEm5hWkt+ tPugOvT22G5kBP0mTnjYt9SGN9TBwkThJVS84P8Mg1GuaU3NzwYbmEmmSNLR3kx0 p2hE/hFZnGhpMHquSXG5SqJ2edKQwut7ykkNZOZZHcJNXExBNekRDOONJSqSErP8 J52CTBHIlclz5sBQDJBcv2sl/isqPW0B89DUOLQbqW0AXIn8KOm36neJttsWNyTV mmUC7/ON6XGH5k7r7TwldJueHkKyvs/KEY8pGzRl3+pFMLZIfXqtoP/hZufDESDt g5pJGX7szHDtir+fhQEBqwCqMMm/JIxqIYniwiNQweBgs5lEX6OcGkuuOF9JdPaE o4FvOisbjqZy0qzH+zcRkffz6tH7rDdfkqvbmgWWs54g5Ka8qXdng/HY9K3BDi+W KSpl1tfrl0sAc//IW3cLSAO65UWTvuuUJeTlJMcWo3dINdIOSVp72gawahukPbZA 3PHJw1lLkhdmWuUpVNLqRNzYijhfrJa/1srErSfWSbal5A0jruJdajSahVDZb0Ef ndxh3VWLDUtBwXm2qW+sSJ8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 396411018262724049798338739243268859893321 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 12:35:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 12:35:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nukco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843618504082630447041889727205390963138134418240286610471179232697578031453450088687900562356636578930479313123296176831375366732523721581461013013763976310787603827310119668073978750458845994397644436155421589443363239822865404638437819391068476718672323649828718853484323955060592813891135502927779628596579015035287784905273420647366027090188540559686298812525755948477381359366012055906901485713313252466862687787656013864736207944931664645420828698004206909934393193093296154433810829590621799793961951023688007778557090863840198267867436785092926373341518534338751794653949789566335805429285749156554568559962334884442385694889519271476251901719955371392926507450148878051254724345125895221611518110576761660557929583248944479213846027952891665408844811708481708909011011906447784254574913879377938295808331339919810652024253134648983710651890806594212977215384013469494720481224432639762883222957642307655917251045499843742492175576155634169591722178799074621020154186580554444394028819600895709479264712612139578864904777053101962371750630486363669985243994780024236565670796114617399230251608515119626600530944510788094515043896846419412385887138703998281027169377579194256096050271728321169333463503702993383738107142883487 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6d11ccd414fd7f79b5f19fe7771743b8008b695f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nukco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001702f501a2b0000040300473045022100fbf3e31412fd6da8f18f8035a3ec022aad0f613d6eca645d19247a24e24c8e84022007c72c2064c1edc98b839eb15d2c20aa07c43ffd486ddb31b87a6710b2348121007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702f501a22000004030046304402207c442c368444d612c4460021731a70e9e7d71427d56e87aa86fa59a37be80e7f02201445a6dcd6391c199ebf05c40c25ca4daf9fe95d7f28796beafc3c373ef2a789 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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