ams1p2.hostingprovider.nu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:62:5c:08:83:53:e6:fb:78:38:64:66:5b:9f:7f:15:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ams1p2.hostingprovider.nu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:62:5c:08:83:53:e6:fb:78:38:64:66:5b:9f:7f:15:6e
Serial Number (int): 312850237407904487497394996723544949200238
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:c7:a8:7d:92:0b:b9:e9:05:40:b3:58:23:5d:ea:87:11:8b:de:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:e0:d6:b5:57:55:d3:20:2f:46:11:f4:9e:36:b3:9d:d4:c3:0f:55
Fingerprint (sha256): 26:de:f1:dc:db:8b:4b:6b:c4:41:5b:97:81:83:7b:e0:5e:87:69:dd:73:05:45:83:d7:fa:4c:27:73:15:23:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ams1p2.hostingprovider.nu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ams1p2.hostingprovider.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ams1p2.hostingprovider.nu

Other certificates including the domain name hostingprovider.nu

(limited to 100 certificates)
ams1p1.hostingprovider.nu
ams1p1.hostingprovider.nu
cdn.hostingprovider.nu
hostingprovider.nu
support.akzenta.ch
rtm1p5.hostingprovider.nu
support.vpurple.com
rtm1s2.hostingprovider.nu
support.akzenta.ch
ams1p2.hostingprovider.nu
faq.liverpoolfc.com
support.reflektis.nl
rtm1p4.hostingprovider.nu
ams1p2.hostingprovider.nu
help.riaki.com
cdn.hostingprovider.nu
rtm2b3.hostingprovider.nu
support.smartservices.farm
ams1p1.hostingprovider.nu
ams1p2.hostingprovider.nu
faq.lfcstage.com
rtm2b3.hostingprovider.nu
support.akzenta.ch
ams1s1.hostingprovider.nu
rtm2b3.hostingprovider.nu
ams1s1.hostingprovider.nu
sni.cloudflaressl.com
ams1p2.hostingprovider.nu
rtm2b3.hostingprovider.nu
help.pingproxies.com
ams1s1.hostingprovider.nu
ams1s1.hostingprovider.nu
ams1p1.hostingprovider.nu
ams1s1.hostingprovider.nu
supportocobo.digi.it
rtm1s2.hostingprovider.nu
support.akzenta.ch
ams1p2.hostingprovider.nu
account.hostingprovider.nu
ams1p1.hostingprovider.nu
ams1p2.hostingprovider.nu
account.hostingprovider.nu
support.akzenta.ch
ams1p1.hostingprovider.nu
support.setupservices.dev
support.autochecksystems.nl
soporte.tresmastres.com
desk.hmpartners.fr
support.hostingprovider.nu
ams1p1.hostingprovider.nu
rtm1s2.hostingprovider.nu
rtm2b3.hostingprovider.nu
helpdesk.bwap.ch
ams1s1.hostingprovider.nu

Certificate

The complete raw certificate details for ams1p2.hostingprovider.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312850237407904487497394996723544949200238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 14:05:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 14:05:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ams1p2.hostingprovider.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640509054261647910556426870604019817159086831317783653239836401598592556939647680996303287541248791825815517274042587007592620036501867729617949382005484730822647076139245718159621947036058678456120150759784325952270488448479690299317916975182852948675901473465384620546217799491747414975538078292464663050983311187346157862018279344304374853493195644322789943440585098276159358496191880036341828601276500221434249167560210068874793453114344961596173313795218187985681661162203553250671519930978943079072564745883258960381280721718599392158949017585068688647542667247691055799042859840937716365561971600745555692614975972771082818936420493498801784437144819238080068263624097630010178745464150637960535279210419760249965093516213304195071404564061847650627752640621541764971274359607130006858642463619243127584276471166147903502237089438029367800462421990546098381272941842894918836626207092179740241113716279851436445912254371828954161282634909915936298937746976723926676660216172283892401243307594145318605708023817863140733540486408452760859434741641763726938445659649322139966017546837420135892523523907910347706623750069984268923211688736138930295023520607935140537543228952273317172610934371281167913570209572229030339034730581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64c7a87d920bb9e90540b358235dea87118bdec7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams1p2.hostingprovider.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a8dae00c60000040300473045022047abfae38ee75190fa0090e981b8d8ecddf1ecfd2a9eeaf72c438bc42ac63cab022100db2114cfe8c00231442fbeb491728c99a2e8896f288c9cd5af8e9b2f9ed3da2700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a8dadfe11000004030047304502200b7e830972291ab5c50bca83941be0d205b1395a1f53b775f4de42de180d4b180221008759da96ac8bf3c48e0f17651613de9032bde2183e252a633e31c0b7a0829578
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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