beta.nitestar.kred

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:7a:03:6c:88:55:34:75:93:78:d1:00:4e:bc:47:6a:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beta.nitestar.kred

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:7a:03:6c:88:55:34:75:93:78:d1:00:4e:bc:47:6a:3d
Serial Number (int): 278853442101926573859015999144521806342717
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:28:e1:aa:d2:bf:67:41:1f:de:97:e0:37:59:41:de:ad:6c:a8:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:c2:06:0d:70:0b:e8:e7:47:f6:70:6a:29:15:90:a1:f9:75:e7:1c
Fingerprint (sha256): 1e:e9:1f:23:eb:38:4a:83:7f:74:cc:4d:b8:65:2b:6f:02:89:6e:a2:51:e3:59:1b:e5:fa:73:e4:54:c8:6c:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate beta.nitestar.kred

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta.nitestar.kred

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta.nitestar.kred

Other certificates including the domain name nitestar.kred

(limited to 100 certificates)
nitestar.kred
www.nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
beta.nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
www.nitestar.kred
beta.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
beta.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
beta.nitestar.kred
nitestar.kred
beta.nitestar.kred
www.nitestar.kred
www.nitestar.kred
www.nitestar.kred
beta.nitestar.kred

Certificate

The complete raw certificate details for beta.nitestar.kred in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278853442101926573859015999144521806342717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-28 04:53:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 04:53:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta.nitestar.kred'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 725188163295578348924786395322704953138653178337771519941957123429933434766186596262164701920696179632928484540244310051446598136313933392549313320125620827375806862595451265202418933839028305428737511864998623794009570100381747420029925443273737392544691671415027957941383392317888259250801579220815797712577833261337946276273579627434638940625279784395955448138890583312701448376108470786388202106789101007126202795422681708761087365694697668342893283960524050431960858659451351742612794854302746614373704948851941660971627127983894046451101071183513680766519987765730089244666460737384261611037378532091481886733108048377156185804843115439448226885584086872654404685578241847031339128479190753347450600463058066793797759277165181640727391927457447547853765219616226874432039863972115036945838831710171321068669419422367529480239373001934051591775131412286799867215110538197322581105771113729051350497133817030150725016222251691718449490063588104298149288617358382680209853574037287370775351301875806079596967417320219701294208920703665527577522571255674287687984542302249893592191438517686763871485904824691999477917347162668176883413031587678664300463752249114578190287479740831919721650986996528948984570906955110942352751581153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e28e1aad2bf67411fde97e0375941dead6ca86e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.nitestar.kred'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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