nexglass.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:73:d2:5c:1a:1a:5a:68:8d:dd:62:f0:12:94:f3:37:d3:5a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nexglass.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:d2:5c:1a:1a:5a:68:8d:dd:62:f0:12:94:f3:37:d3:5a
Serial Number (int): 300748946091045042745032401171803425723226
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:ba:84:7d:5f:54:4c:84:d0:10:3e:0b:3c:55:1e:7c:c7:74:9b:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:f0:f0:76:88:e9:db:46:23:a4:f9:26:7c:a0:74:c8:5f:e6:5f:82
Fingerprint (sha256): 3a:ed:ea:6e:ba:b7:8f:ab:e2:3f:52:c1:db:93:f9:b4:cc:ad:15:0b:f8:b3:55:52:74:d8:40:4a:f3:a3:6c:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nexglass.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nexglass.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nexglass.com

Other certificates including the domain name nexglass.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nexglass.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300748946091045042745032401171803425723226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 00:13:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 00:13:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nexglass.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838401501669914777910005154390220486918129085140635912096082251549159812098148958218359643054346065395313769598325728477817238481957943270098059741215797465634064823583328672574403966839918670775152512857728965562409519210661550933484931813991339164686156262826760923751997970272496454382396459618054276922623863449343538665934646514071789039836476754791397796118662389818560258645762163643145086763889419758629259062844715296673872458684283679120017536525606108676277688691863147623990197596701251456374509683174730760096256445033355894289318537659530170106465457597174772071099335832837682301041375457205316694154705970723927013067544034487822188343220493240234689471899289308711807144415088907522747235151203968361308843233680974347184565068837768586834105890156153669339241682379794580666259847940653347541686829384150708329267294050131868643546915634351896839067480029856514407204056588572247473610705172341182823597427234974396934028182402300933270605769830669382907092863371471182523123488324783211673751248203679120592467500370150463009549195868325255351254254501747386919500386405650346794303058531151346179422926038980152380435966751252842050617232697773829598884911744890482893525730811608567754139677987854028617490047649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68ba847d5f544c84d0103e0b3c551e7cc7749b1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexglass.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef28518b70000040300483046022100d1b9239685deedc9fd38ea701ce831eadbe9218e21c9ad330093505c76875962022100d9895289630066773b76536b6dc17ce74db49163e1ec640909e9acef41b0706c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef28518c20000040300473045022100f66b27bca517db51243c118a7e83fd6accdc4e4c783e8824598056034cfdfef4022011fa7a3fa3656d5f3f1630fff4efc227b98e8b893726c172e2511cda81ec53c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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