niec.so

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:49:ff:38:21:c9:26:91:84:fe:67:85:bf:d7:63:04:87:3a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=niec.so

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:ff:38:21:c9:26:91:84:fe:67:85:bf:d7:63:04:87:3a
Serial Number (int): 373629001105075039855794232254024156219194
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:a2:1e:05:a3:41:8b:50:b8:bc:16:39:a2:9b:2b:30:d7:6a:1f:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:28:f5:84:c0:ae:fe:fb:7e:84:93:6e:62:f8:b7:0f:92:a0:ed:de
Fingerprint (sha256): 31:e9:4f:49:b8:ff:c2:d8:4e:fc:9e:02:64:30:73:51:1a:26:af:44:37:5b:c6:c6:4f:3a:89:03:80:3e:43:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate niec.so

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for niec.so

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

niec.so
www.niec.so

Other certificates including the domain name niec.so

(limited to 100 certificates)
sni70241.cloudflaressl.com
operation.niec.so
navdaanghari.enrichapps.com
wellifesales.hooliitracker.com
portal.printium.uk
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
kirsal.unfpahumtr.org
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
autodiscover.niec.so
apply.goldenretrievers.org
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
demo.gkdatalink.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
content.thependits.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
niec.so
app.testp.co.il
niec.so
mychurch.dupletech.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
academy.unete.org
niec.so
sni70241.cloudflaressl.com
chequeapruebas.scalatech.co
portal.printium.uk
sni70241.cloudflaressl.com
hs.reelanalytics.net
sni70241.cloudflaressl.com
apply.goldenretrievers.org
lyres.mccannbespoke.co.uk
niec.so
sni70241.cloudflaressl.com
guardmetrics.hyperionportal.com
sni70241.cloudflaressl.com
niec.so
niec.so
sni70241.cloudflaressl.com
webdisk.niec.so
app.blueskyaccounting.us
sni70241.cloudflaressl.com
portal.printium.uk
platform.sourcehubai.com
sni70241.cloudflaressl.com
niec.so
guardmetrics.hyperionportal.com
sni70241.cloudflaressl.com
portal.printium.uk
apply.goldenretrievers.org
sni70241.cloudflaressl.com
legacy.niec.so
portal.printium.uk
app-pared.rednbluepty.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
saudeservice.contabio.com.br
apply.goldenretrievers.org
legacy.niec.so
sni70241.cloudflaressl.com
19972.softpme.cl
sni70241.cloudflaressl.com
niec.so
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
navkaunlaran.enrichapps.com
niec.so
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
app.exdec.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
niec.so
cye.envisagera.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
portal.printium.uk
legacy.niec.so
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com

Certificate

The complete raw certificate details for niec.so in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373629001105075039855794232254024156219194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 01:06:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 01:06:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'niec.so'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 649693627936444036400248647639438697161900263341216354272360568218542222228245593118385523876143572879528866745232487191426329015962693472729963932594201162933141224292277694488790475233777397096454184339479020613287484762832793380744594737891063091392784772899703041531684172540035384049159511135474033214125943266597996874754649138795592592650396402411122481162411665994123445418834363276068619123879636659038493395140502176905489895639583347442977731759037069500374810957507765226145133872952611336880664635766266520083203646692065789797243350834867009012347465717231906149655703883098762421734637489108124222453043403608264064772683446035012265718339248616748081649999084213814162108397007540760607734807860057909138701874884191245024539951623434951716148953009169988198226560653956254437783019806895188275346840086780993755101488293145161397561175424240296279559504392604734292350453507984131945629472613944274617481774190315336202686275240607571252533554103306098359850341740180873118856552709668722433011030708629965228780026095965557703989526273945787374754110175265171799673627504037245670925219563227686168700946801539076670718344335168671556452383867359882695131966114354395213606407756502539965013025637864372994150319313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89a21e05a3418b50b8bc1639a29b2b30d76a1ff1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niec.so'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niec.so'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a1471fbb500000403004630440220681f07ab87fc157f90cec23d953341b333af4f82069b0f878402dc47b3bb13bb022027f2a3619d863b40235901e1d4ced9d99d1c9f81412799d93bca7d12bd1daa9d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a1471fbc00000040300483046022100e2453231cb17680950dd0c861484cba262a901a48d31f2fa9d7dae50d904e1df022100d366ac484b0e84dba53a48492aebc4c6a0505ce02089542b376cb57bf8d3b79b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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