nkfco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:fa:3b:07:a8:68:9f:0a:af:d1:07:0a:f5:86:55:fd:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nkfco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:fa:3b:07:a8:68:9f:0a:af:d1:07:0a:f5:86:55:fd:79
Serial Number (int): 313392391067043846148012421259236587470201
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:05:43:43:5d:d3:0e:d6:a9:04:54:b7:bc:3d:ac:be:0e:b2:ef:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:6e:25:c8:5f:c4:c2:a7:5f:6e:75:61:f0:18:37:c5:e0:dc:91:75
Fingerprint (sha256): 34:46:59:aa:12:b6:a2:26:af:85:93:06:ca:37:e4:3a:23:41:5b:b1:09:94:26:70:d8:7e:82:02:d4:c4:f2:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nkfco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nkfco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nkfco.com

Other certificates including the domain name nkfco.com

(limited to 100 certificates)
www.girlboards.com
taggia.org
nkfco.com
calalzodicadore.com
atlantajointpain.com
nkfco.com
insutherm.com
www.jointpainlubbock.com
www.nkfco.com
www.armacar.com
nkfco.com
www.nkfco.com
nkfco.com
substance--abuse.com
printermd.com

Certificate

The complete raw certificate details for nkfco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313392391067043846148012421259236587470201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 18:59:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 18:59:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nkfco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851611939517173638117020870972425823688170500268276118632914338554474168029333471244155988497117683328053636413631889513567296997604748766018717117401693526684084073008896885100434278610284756394091139412235161066878950899510481337124210144105600323235660484641584703690928589801390361512330864199663739917420849452594320212362756290132685049902296788675412799241141176979836371549984484567052034388949920796855308584166321988492845461737697633520239856796286725063273363989574455464150945369761629210195522781502827632889140689396349287912175845316395944903965651933563012659434702012594963857231962610781960751618953509751186262924522479602445538376457883414230194885538912307133500300465896478676107142801185595141019318458768134348617721450124608992820368309766438056178198113083572570775921653519504277489442664752156450783558059618186799194499828482889794110257130934638069208919820651271406470171523386004979908575219043826819773036528526901562094411858485522038547780136551220060221469973844606938894445780816534143017744927025514781292313595883725118714687131049202411294007923628378179821288146880185851873902008592280312661354278318580021285699549402808115905150825831454461317022418189605505404919359246906636710192305893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f90543435dd30ed6a90454b7bc3dacbe0eb2efcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkfco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f62b15799000004030046304402200eabc2273bd649146f4140e2c69f6977628ae0e919d1dea2bddf6b68e8f4ed25022014557662f076ef7dee4a2ebfde7da693cbcad0ca744581966702931ff06e0c970076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f62b1582b000004030047304502210085abaf8d861c1db43c8de60cba080e7844dc79d4fbb27ca80869d7aa3cf44b450220267e54a2675c0e501fbd2f03b3ea9890e8d2d659d36003db58cf9e9a6ed0a41f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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