nava.app

Issued by R3

About this certificate

This digital certificate with serial number 04:37:e5:83:22:72:5a:ee:96:ae:a5:e0:87:e5:d9:1f:a4:30 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nava.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:37:e5:83:22:72:5a:ee:96:ae:a5:e0:87:e5:d9:1f:a4:30
Serial Number (int): 367469748008277895011884087570605136651312
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: af:d8:c1:00:09:30:3d:75:e7:3b:ec:74:12:fd:29:a8:9a:09:3f:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:8b:f3:18:2e:08:26:94:ed:8c:5f:ce:af:e8:64:36:65:aa:13:6d
Fingerprint (sha256): 20:0d:67:9e:71:54:71:0a:79:3e:00:5c:49:39:47:9f:47:84:a7:5f:f2:85:56:20:94:24:6a:9a:eb:df:09:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nava.app

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nava.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nava.app
nava.mettenmeier.de
www.nava.app

Other certificates including the domain name nava.app

(limited to 100 certificates)
static.ges.digital
app.reelertech.com
www.anthonyharm.com
crystofab.com
centrident.com.mx
appian.app
www.burgas.app
hilfe.nava.app
www.receitasdarute.pt
nava.app
hi.nava.app
api-reward.riraku-sys.jp
martbhiadmin.estore.business
staging.nava.app
bia-app.noldor.co.za
nava.app
sunilphanimanne.com
marmope.ml
admin.sweetupsell.com
nava.app
www.redact.at
member.busybilby.com.au
www.carpiomusic.com
archive.nava.app
character-images.othellonia.com
nava.app
www.sthlmbcl.se
hilfe.nava.app
www.nava.app
www.blissretreat.co.nz
www.erkangunaydin.com
admin.beta.badge.app
dope.stage.drivebuddyai.xyz
voters.topescaperoomsproject.com
runnercounter.escape30.com
go.kollekt.dk
www.andremyers.dev
dentologicom.smartcom.mx
firebase.gregmoy.com
greetings.beckyphan.com
www.ngoan-streetfood.de
www.cobrellon.com
api-dev.nava.app
www.lanbonindia.com
pictures.akily.app
hilfe.nava.app
calebra.cf
carcat.app
gestures.studiomoniker.com
thegscapp.com
pro.link-dev.sikkaapp.in
account.cryptopoli.mplus.fun
www.cabanadavid.ro
yoshikiyarlagadda.com
formlessfunction.com
rossneilson.dev
d3mix.a-zeroproduce.net
www.nickdesisto.com
twitpile.com
nava.app
nava.app
rimechengineering.au
nava.app
www.thefeedbackapp.xyz
nava.app
cyclum.cc
link.azicloud.com
www.tdtt.de
greendroptaxi.in
examainer.audeering.com
pr.unzip.events
dev.nasheedstation.com
simple-ng-chat.tk
docs.parkzenapp.com
www.burgas.app
voters.topescaperoomsproject.com
www.kindlesaleno1.com
nava.app
link.dentacarts.com
dev.defimath.ca
listsmaker.com
www.carinaundmarcel.de
nava.app
nava.app
www.avionics.one
www.isaiaheaso.com
hi.nava.app
hilfe.nava.app
stagingweb.midtown.id
api.nava.app
nava.app
hilfe.nava.app
sistema.inlifestyle.com.br
hilfe.nava.app
mesbro-refurbished.mesbro.in
nava.app
api-dev.nava.app
chrisasfour.com
bia-app.noldor.co.za
ampgular.com

Certificate

The complete raw certificate details for nava.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367469748008277895011884087570605136651312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 09:35:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-28 09:35:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nava.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858102628847889878941982772478137152996167615641351027509328658833240178491559425232657968808528008188592081371035366487498028402329761999613701658138988370430031406324298908224151514698950057466975160867346629612452009681189055409679569455050951796117156826210547394878467083289502266569197947838426061018886880609031749465725372661966046259862559019824516542042994252189307658746277047211563899486574667147999367352368841488109793057371354341605690073455841554144221731670694049713485757326596370625576841772009721076398714703529256295132760915449284200671003507902763369075771084135330530226185573942391377336475456765379429428289435377202991703066942566095299920312203827965952962551845276628966555635549877325707096452278812209017067510657652758745740348950053310488240684254435677964524260694905871932547309900337465417727582865284066971266522808061335079742037294194929792755964674800520083472770375849557092510293271383443396922600417935058215844396825972893706751687156996088603150671081711252589262484055819612412017654030607639932467607568499235220276052752887164820248777282013929483232245165539635003508232656144322292946561538582519040731233720982117252354710892136753070074508267340353773656152996138390970096589758449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afd8c10009303d75e73bec7412fd29a89a093fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nava.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nava.mettenmeier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nava.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000177489036b3000004030047304502202cd0f9cdee5413b2842c87690a3209d838c704b37547c21836f09cd18d331df1022100c17ec78d8348743eed7f7c7c0d8427bb67af4a8ae3897d8a776369aa3dd809b7007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000177489036a3000004030046304402201e89dfa17f7d4039ac50a71f337563927091ef3097bf807f13fe57c8f0429a1a02200bac1d1c6e90b6a7676965b61c9221eada2d43063cf6f6173358d73383b921fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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