nds-vcs-e1.network-data.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:4c:bc:d5:bc:01:c1:a6:2a:5e:85:5b:7d:9b:6e:17:52 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nds-vcs-e1.network-data.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:4c:bc:d5:bc:01:c1:a6:2a:5e:85:5b:7d:9b:6e:17:52
Serial Number (int): 317585450151773328288138274898644581619538
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:96:96:43:09:f7:3d:48:11:60:c6:28:64:aa:63:aa:30:95:49:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:90:67:82:cd:0e:2a:07:86:24:0c:cb:0a:82:4f:8a:fa:88:ee:ab
Fingerprint (sha256): 38:8a:35:76:ba:e5:8b:96:4e:3d:6d:68:a6:d0:fe:8f:e5:67:f8:8c:1d:45:d0:b2:64:1f:ea:31:d9:d6:fb:c4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nds-vcs-e1.network-data.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nds-vcs-e1.network-data.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nds-vcs-e1.network-data.com
network-data.com

Other certificates including the domain name network-data.com

(limited to 100 certificates)
monitor.network-data.com
ncompass.network-data.com
wlc01chi.network-data.com
webfocus.network-data.com
nds-uccx1-p.network-data.com
monitor.network-data.com
wlc01chi.network-data.com
expe.network-data.com
ndsone.network-data.com
nds-vcs-e1.network-data.com
monitor.network-data.com
ncompass.network-data.com
adfs01chi.network-data.com
nds-vcs-e2.network-data.com
ncompass.network-data.com
ndsone.network-data.com
*.network-data.com
ncompass.network-data.com
ndsone.network-data.com
nds-vcs-e1.network-data.com
ncompass.network-data.com
sp01chi.network-data.com
cumpas01chi.network-data.com
wlc01chi.network-data.com
ncompass.network-data.com
exch01chi.network-data.com
nds-vcs-e2.network-data.com
nds-vcs-e2.network-data.com
wlc01chi.network-data.com
nds-vcs-e2.network-data.com
ndsone.network-data.com
nds-vcs-e1.network-data.com
sp01chi.network-data.com
*.network-data.com
ncompassapi.network-data.com
nds-vcs-e1.network-data.com
monitor.network-data.com
nds-vcs-e1.network-data.com
*.network-data.com
*.network-data.com
asa01md.network-data.com
nds-uccx1-s.network-data.com
*.network-data.com
ndsone.network-data.com
cms.network-data.com
ncompassdev.network-data.com
guest.network-data.com
monitor.network-data.com
ncompass.network-data.com
ncompass.network-data.com
nds-sm-1.network-data.com
nds-vcs-e2.network-data.com
exch01chi.network-data.com
nds-uccx1-p.network-data.com
nds-vcs-e2.network-data.com
expe.network-data.com
wlc01chi.network-data.com
sp01chi.network-data.com
ncompass.network-data.com
expe.network-data.com
webfocus.network-data.com
ncompass.network-data.com
ncompass.network-data.com
nds-vcs-e2.network-data.com
ncompassdev.network-data.com
adfs01chi.network-data.com
nds-vcs-e1.network-data.com
nds-vcs-e2.network-data.com
sp01chi.network-data.com
*.network-data.com
monitor.network-data.com
monitor.network-data.com
cumpas01chi.network-data.com
ndsone.network-data.com
asa01chi.network-data.com
nds-vcs-e1.network-data.com
expe.network-data.com
ndsone.network-data.com
nds-vcs-e2.network-data.com
nds-uccx1-s.network-data.com
wlc01chi.network-data.com
monitor.network-data.com
nds-vcs-e1.network-data.com
awlc01chi.network-data.com
wlc01chi.network-data.com
ncompass.network-data.com
ndsone.network-data.com
sp01chi.network-data.com

Certificate

The complete raw certificate details for nds-vcs-e1.network-data.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317585450151773328288138274898644581619538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 14:47:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-02 14:47:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nds-vcs-e1.network-data.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666720051170003337780558247962045784211744014627618880252199785595642950855293329727975486788361069684704849855548761075104109690562130422755486265092529323041646959862067081927763124623336245019426886381115717756373942966878425482457568909665816399281530135039308843394081310183225893633584918124927947574633348817436863637129060644806985738216757830516548721858313913871035927315616605333421056943048324357649616769491380785039658759752809255871446725684767316007091761369666148011608375774705372676303430912049920860640048385613351968509817288143020797863195668400339482391612354734193729638378047207008439726495388025210789304760695128861410927803821794287311024221306825407382533318291904135189181261751515081477491576586875538907195134455327233914189415498862911853931724077696041741509464182277584252405907638006149741296151124950354180762494492913204668903967787064612815033696465656191770124998320836302034005223125910630092750211438790184599565278323982507123156821986180335895961201662889219232759769228173589911668376521947626281870287232488301618336026274915852606935522031336886542823815328852586481923691487734157236646239155880963307208145254303693243359696592652986380795557017744754347644282078017894248212361399287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae96964309f73d481160c62864aa63aa3095493e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nds-vcs-e1.network-data.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'network-data.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b232cd08f00000403004630440220183d33d0fddc38bd6ec9d2590a0166428e8cdb6fb32b73fbd6e2bb6c076fc21502202636b55e94d73545a802c196929e1f2503c66b2588074236af24aaef6fcfc2ba00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b232cd094000004030048304602210089d7dc1844aec723edf7e0798bac9e5b1b15678b68d56dbc34bf0722c9b77e5a022100d61d9d6530fb57ff5789c3f6621525418ba4f4d587d27d5c1bf570fa5e07d37c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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