ix004.dnsnic.in

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:44:f6:65:f9:d4:5a:a2:b4:29:df:04:99:14:26:b0:82:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ix004.dnsnic.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:f6:65:f9:d4:5a:a2:b4:29:df:04:99:14:26:b0:82:05
Serial Number (int): 284803578321994768887661017249965283508741
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:29:bf:c5:55:40:21:79:db:d9:5c:0c:a8:07:e1:2d:59:af:7c:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:5f:2c:b1:45:c5:1c:a0:e7:f9:1b:65:c2:62:45:1c:35:19:95:1e
Fingerprint (sha256): 20:2b:0e:3a:88:c2:0f:13:6d:b4:66:0e:cf:7d:0b:35:61:e6:d9:60:7f:8e:37:a6:15:49:02:a4:49:04:22:c8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ix004.dnsnic.in

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ix004.dnsnic.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ix004.dnsnic.in

Other certificates including the domain name dnsnic.in

(limited to 100 certificates)
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix008.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ny1002.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
ny1001.dnsnic.in
sni157161.cloudflaressl.com
ix011.dnsnic.in
ix004.dnsnic.in
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
ix025.dnsnic.in
ix004.dnsnic.in
icd4.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ny1001.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix018.dnsnic.in
sni157161.cloudflaressl.com
ix006.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
results.unigoa.ac.in
sni34771.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix003.dnsnic.in
tata-dr01.dnsnic.in
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix005.dnsnic.in
sni157161.cloudflaressl.com
sni34771.cloudflaressl.com
ix004.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix007.dnsnic.in
ix007.dnsnic.in
ix006.dnsnic.in
ix018.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix002.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
apps-lin.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
akash.dnsnic.in
sni157161.cloudflaressl.com
sni157161.cloudflaressl.com
ix011.dnsnic.in
results.unigoa.ac.in
sni157161.cloudflaressl.com

Certificate

The complete raw certificate details for ix004.dnsnic.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qZu7kWQG1U5ayO2VlHL
QZeDZ/T2Dqqfi+txoGLygQpJOIBUJ0mJuZVMYPQD5dSL+7zfYkIy536suG4sxFhy
kV7kh/3qW1CbSVmv6y8PfahRfLMGWIiuwZD8WW8r8RM99nZqZlEpDZ7QXxyD58nm
POFWrPehJAOHOeOPufkTBAeBVIRqax/2owuz1CLnGRQTdNS5EXyoXETm2jULS3kd
dEPuIzqADCJ8tla0FLPhp8WXKd/JcRNRlqiXoVZCuaI2T/x70nyCCBa3Mp1c64S+
pai/t/IbjdLBpI7t2/wBezliOC0HoE62tefiRb8oxINbAtUdD7L/sWK6KCqh1xMh
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284803578321994768887661017249965283508741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 23:24:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 23:24:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ix004.dnsnic.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28106975032994084734674001940005968098648762856527545976948684555992809689226049136279508740153560991114179941234987792929768206732595530174384336298945175655673207608826552735729173506958445316161597554726197449595647760651089186087042060886556248617120861805646462615714623090089586112640602662495292950156978100339256512965629321094000406461121133331190556494446794573327770942279952823933084765353197867679766335406735374857188471318797431443907523179780563322139833853356421944450611075411999800548578776601015439913205212828313569910708109170975496422522256719708666184044616845171692228801216286535675540611349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0329bfc555402179dbd95c0ca807e12d59af7cdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ix004.dnsnic.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e9acb98300000040300473045022060e4d189f76fe48f2e1d7a394720c18578955fbec608b82e343f6e1b14b78f23022100f48c64c73568a411ed542a227df769c71f1210de45897d06cba47496a6eed2580076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e9acb9a130000040300473045022100abec576c3b9a1bdeae780520878d20b18dbbf5209968cca82c038529461d5d1f02201f9b1191afc6230de3c238c18a10a471a27c6c98d8fc9aae6b0cc83afeeea3dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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