niovis.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:fd:b7:a6:73:2d:8a:9a:91:1a:51:44:1f:53:3c:c1:15 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=niovis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:fd:b7:a6:73:2d:8a:9a:91:1a:51:44:1f:53:3c:c1:15
Serial Number (int): 272563141786014793642444239382346414735637
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:0d:04:a4:86:1f:4c:ab:8f:0e:36:1a:bd:a5:5e:e9:6d:4b:75:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 59:ed:50:50:ea:5f:b2:3c:27:b7:65:57:f7:05:07:2d:f1:56:7b:30
Fingerprint (sha256): 22:e8:cc:9a:c7:b3:7c:7a:66:3f:fd:91:c4:60:fd:7a:89:dc:84:ea:b7:45:81:c0:32:9f:97:cb:d7:db:ba:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate niovis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for niovis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

niovis.com
www.niovis.com

Other certificates including the domain name niovis.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for niovis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvC9QeI2qiCrtpzWw/OY2
zKk7N4Mu0klMebLSfRXYOcWBocyZethc453hr+jMAlnsc6rmYrQP1MNwxT6EPh6z
kddDuhNgQtJ9kfKX7Ltowgl0AQT/88mRWK6KDAM7Vy+Den6YP17hQhojwSQVESAZ
PQFKApdaNN9HWDeDBOCKRAimyQ7AdvNrfx/9kLv/++HL21ZihPRKMLDewcCkOFpj
FhUntYiprszwYcEtCJK3Hpnn/Ip9e3HKXsioWMT/fAQlBWtqPpgKx0FLrdyq4CiN
m2GTEkCLhHPeFhq1KXCrDjwrCTDX4MLDqirwJSsr+n1NluKsTbHhHQ8dATxXm8/L
D2SB2NMfWshax9V4qrwgQcSK3JFlvydxDUzqJbCfyy/B1JvjmMFGCiYD5gxxS4Ay
9N8ZYeH5O3N7X+4MGFVjxp4fwfuLnLkK7LsmBd/oGNvONxuRhvxmuMNnbQ/qw/P9
j8CNf2PMJoxo5cyCwggam+xyt1HlavCocZMIo/Ax9MWV+wJU1e1wFhXbiMrkwQVV
EzGXUHeDSzBhRU51UMZiCErcq6tJsTeqrl6AEFZc+6V+zI110BuA4WAi+Ck0GTst
K0GX6kZIuEmyOUtYLdZ/NZvY4isKJIJ7Y2QNC8rfRYjjsdiFZFgTDkystQNzHalQ
6grR7YRO97cLR30D2Mw92JMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272563141786014793642444239382346414735637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 14:31:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 14:31:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'niovis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767727091289611792123765178154571502791079353903626603823662502294638516732063177836533438841026243331401053451566264020343538314024640090883032697730707567770170191422977781949160300011274852319800769950718527603642129250221231293395776660857985547472333601763480952825440744109773626963549433140106360641497686985126099130132400206178087988765149645717164748283383777239785629967209980656725966851463022237246694799706335128445758954591374605517183687242830915291658179919245187862268988635983312279612116628776962650317335968949431717189473192374066128307107872686714390705734734447860066728296202405927430965117426842507370380912636742667520594814492346781520948698582767288383501584706866919277201603088550019242296581013676356032410509971911159193214780332365836485388298514855596317394933875784550731912899994077248461592963472324435552770690611811912011405422917856607918893748692527241988489034212508810425857023533158522291941597900326753726383629574170833361580437664006487495718469922233924537524131946913071157682931014325219367871712031830448169935836754756924256939207565977485906829197290497751068855032937426866930410980557161988298369586442758209432028334244959275261986232091192700159196376256701646874632148342931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a0d04a4861f4cab8f0e361abda55ee96d4b75c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niovis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niovis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165247741a3000004030047304502204a4a2c6414e1ca1a6ff58319f686930fd71e14ee0e6b6cee2976136ae3418d8b022100facf713deeff620155e2aa69e6666ca25fb554c3d2d284f64456752ad8feb0f1007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165247741b0000004030046304402205ba7cc37139edf602afbd595e03f951478d2b19c9dd75cf97f3012f12620d4b5022007a083311de2ab2e2c4745a7bdd2fa0e4c87de220d8ecdd9cad2bfeb444e49a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f1422d0750d187378ec7ac79e8b6e3487a903c763aa8ab3a32d7dff3474ad4da812d6d99016c0338ab07c3f46b57019ee4a106f824333a57212ed0557b5d37f90a526630fc295654dbdd610e22ca1ad939c09c96b3a8ee033e02ea92b1cdbca36db41be4a4ec6b517042345e5aac9b8289f8d489867cc2e08824a3b20be3c2b21e0df7d7ce521b3770f96ba4077b0e767472707ff01d4a0456aa4ebfbd15361ea59b784678d0bb0481183e48bb939954d7991fc203cc8d104de68fd9f1b9c395b74c5383c6d8f495a0a3863ad7add2dec374bc8bceb89e8ec77f779624e99070ce7edf05e9453f39b2cf1d1a1600cb86550b9479dacc1fead2429c0e04ff2a3