www.nukco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8c:f2:81:09:25:0c:70:05:c5:d8:4d:30:b2:84:c6:16:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nukco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8c:f2:81:09:25:0c:70:05:c5:d8:4d:30:b2:84:c6:16:49
Serial Number (int): 396411018262724049798338739243268859893321
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:11:cc:d4:14:fd:7f:79:b5:f1:9f:e7:77:17:43:b8:00:8b:69:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:94:fd:b4:7e:bb:28:44:d7:00:7f:4f:b9:1c:df:93:bb:ee:a0:d2
Fingerprint (sha256): 09:e7:2d:34:4a:90:bc:8d:41:67:af:29:13:d3:f9:98:52:e9:f0:98:ec:13:6a:e0:7d:6e:fa:eb:57:ea:65:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nukco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nukco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nukco.com

Other certificates including the domain name nukco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nukco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzsmLPpqmIF0w9sgUBGSV
ERoKq8n+x8p/QaFjIiylR2DUD7AZChkeP46tvLv+Zaw/5R0EO1l9wmg7OudpgqQ3
kXO+d5s+IlvLo2Od53BgGV2ElLPFnZNRZCOH1Qa7bdLhW695SPej2sXSEm5hWkt+
tPugOvT22G5kBP0mTnjYt9SGN9TBwkThJVS84P8Mg1GuaU3NzwYbmEmmSNLR3kx0
p2hE/hFZnGhpMHquSXG5SqJ2edKQwut7ykkNZOZZHcJNXExBNekRDOONJSqSErP8
J52CTBHIlclz5sBQDJBcv2sl/isqPW0B89DUOLQbqW0AXIn8KOm36neJttsWNyTV
mmUC7/ON6XGH5k7r7TwldJueHkKyvs/KEY8pGzRl3+pFMLZIfXqtoP/hZufDESDt
g5pJGX7szHDtir+fhQEBqwCqMMm/JIxqIYniwiNQweBgs5lEX6OcGkuuOF9JdPaE
o4FvOisbjqZy0qzH+zcRkffz6tH7rDdfkqvbmgWWs54g5Ka8qXdng/HY9K3BDi+W
KSpl1tfrl0sAc//IW3cLSAO65UWTvuuUJeTlJMcWo3dINdIOSVp72gawahukPbZA
3PHJw1lLkhdmWuUpVNLqRNzYijhfrJa/1srErSfWSbal5A0jruJdajSahVDZb0Ef
ndxh3VWLDUtBwXm2qW+sSJ8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396411018262724049798338739243268859893321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 12:35:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 12:35:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nukco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843618504082630447041889727205390963138134418240286610471179232697578031453450088687900562356636578930479313123296176831375366732523721581461013013763976310787603827310119668073978750458845994397644436155421589443363239822865404638437819391068476718672323649828718853484323955060592813891135502927779628596579015035287784905273420647366027090188540559686298812525755948477381359366012055906901485713313252466862687787656013864736207944931664645420828698004206909934393193093296154433810829590621799793961951023688007778557090863840198267867436785092926373341518534338751794653949789566335805429285749156554568559962334884442385694889519271476251901719955371392926507450148878051254724345125895221611518110576761660557929583248944479213846027952891665408844811708481708909011011906447784254574913879377938295808331339919810652024253134648983710651890806594212977215384013469494720481224432639762883222957642307655917251045499843742492175576155634169591722178799074621020154186580554444394028819600895709479264712612139578864904777053101962371750630486363669985243994780024236565670796114617399230251608515119626600530944510788094515043896846419412385887138703998281027169377579194256096050271728321169333463503702993383738107142883487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d11ccd414fd7f79b5f19fe7771743b8008b695f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nukco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001702f501a2b0000040300473045022100fbf3e31412fd6da8f18f8035a3ec022aad0f613d6eca645d19247a24e24c8e84022007c72c2064c1edc98b839eb15d2c20aa07c43ffd486ddb31b87a6710b2348121007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702f501a22000004030046304402207c442c368444d612c4460021731a70e9e7d71427d56e87aa86fa59a37be80e7f02201445a6dcd6391c199ebf05c40c25ca4daf9fe95d7f28796beafc3c373ef2a789
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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