www.nupax.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:25:fe:ae:9c:dd:45:90:f3:8d:6e:3c:60:f2:3b:f2:b2:52 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nupax.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:fe:ae:9c:dd:45:90:f3:8d:6e:3c:60:f2:3b:f2:b2:52
Serial Number (int): 361378121855285315212818081427219257930322
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:45:c9:33:78:c5:45:65:af:5a:28:77:e7:a9:9d:b0:66:f9:02:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:6c:b5:c5:2c:51:d1:8a:1f:9e:b2:02:0f:00:33:c5:ae:2e:d6:7a
Fingerprint (sha256): 31:53:1c:40:f3:1c:87:d8:59:9d:8c:b8:0a:c7:c8:06:59:fa:8a:9d:7f:a4:e2:bf:37:3c:3a:df:d5:7e:01:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nupax.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nupax.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nupax.com

Other certificates including the domain name nupax.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nupax.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361378121855285315212818081427219257930322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 11:00:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-19 11:00:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nupax.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822783145282754369572630740446655347224606213095151313583771405619161404165305645249619982222838315584892664251367834621779822349331453932633333073900238737796488279905111586900883797439357212814941263387777052887147085185324324349424167373241274628670401498405752903253001953451011054670723123751085032996114505505841930054268473449238723966081472247703105560920039977261019695594497857212776811197067138771951832285908027506322852859274381948408936494828516537393008733716877228375821916439005036433716462537053016345889403321928765463581720124250246695309882994097964641871227292374656240457111287008922917426115975229758032798615100650916937061431472202161128857475965668890057212989577835934085112576413237402550727376968938180518215052151399769309512248689320123855229208106622228591849609784577325888849586492509663067950162524678582317592518760760916238617200350690763080769589480275205040149237186309733691685088803492529741652500102328065374901179909659946651197925721808838652660292902569590662273668762401561904392039091471860425444809012315189107393199881964208485198360008057471996420457089217934902127495315444009055653105710204507435767986172896432100979906895216326678457263777994018892938179936281668513387619827153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad45c93378c54565af5a2877e7a99db066f902d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nupax.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001705d52826f00000403004730450220532b150306d79faa0cebebb42ca54fed2bc7e67185e4391c7bbf886f30c0f01b0221008a8c4f336196272c5c9908b1487b4942bb136949f70a266d3982762b9974fdc9007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705d528453000004030046304402202735cf3ff92f54a235d473801802c525991e98ee4bff30baaa9ba676f85ef8d102201c409297a4ca7cb1212717afb21c96e0883868c1bd76330f6f4916faa3a2bd7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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