support.pci-nsn.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:31:be:b2:33:b7:09:6e:1c:e5:4b:55:47:e0:66:9f:18:24 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.pci-nsn.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:31:be:b2:33:b7:09:6e:1c:e5:4b:55:47:e0:66:9f:18:24
Serial Number (int): 365376458303111486521100664897027794999332
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6a:ef:45:d3:ba:00:e0:87:01:0d:8a:08:ce:6c:11:87:6b:93:bc:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:1c:8e:ab:d3:53:e2:56:87:24:d7:ff:66:42:28:f3:3b:43:b2:2f
Fingerprint (sha256): 42:ea:68:12:7b:3a:78:25:42:ab:6d:d2:95:04:16:f3:8a:7b:d1:40:09:bf:96:d0:b6:40:1f:77:0a:07:4b:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.pci-nsn.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.pci-nsn.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.pci-nsn.gov

Other certificates including the domain name pci-nsn.gov

(limited to 100 certificates)
poarchcreekindians.org
support.pci-nsn.gov
pci-nsn.gov
remote.pci-nsn.gov
poarchcreekindians.org
pci-nsn.gov
pci-nsn.gov
pci-nsn.gov
remote.pci-nsn.gov
remote.pci-nsn.gov
support.pci-nsn.gov
poarchcreekindians.org
pci-nsn.gov
support.pci-nsn.gov
poarchcreekindians.org
poarch-band.pci-nsn.gov
poarch-band.pci-nsn.gov
poarch-band.pci-nsn.gov
remote.pci-nsn.gov
salesstatus.cmsonline.com
pci-nsn.gov
salesstatus.cmsonline.com
payment.pci-nsn.gov
support.pci-nsn.gov
status.pci-nsn.gov
pci-nsn.gov
pci-nsn.gov
pci-nsn.gov
poarchcreekindians.org
pci-nsn.gov
poarch-band.pci-nsn.gov
status.pci-nsn.gov
pci-nsn.gov
status.pci-nsn.gov
*.pci-nsn.gov
support.pci-nsn.gov
*.pci-nsn.gov
poarchcreekindians.org
poarch-band.pci-nsn.gov
status-eu-gtassurancetool.gtil.gt.com
poarch-band.pci-nsn.gov
pci-nsn.gov
payment.pci-nsn.gov
*.pci-nsn.gov
payment.pci-nsn.gov

Certificate

The complete raw certificate details for support.pci-nsn.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365376458303111486521100664897027794999332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-22 02:02:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 02:02:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.pci-nsn.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1010278747575376788783596117791069443171452933157916859747683089313828078524799413978828532189846809387129702760513226176896613574516126396085407699024226890307915511708142741125138276856850300019331532361670318371289222290116909919169445140544848895715042190045852344844033808664386128392977584212530675059567987345889446165403345250364700642816183126087954231992827442929374997861831298753406770672570856989658656754252442911410851807402590620261998350079388578252791583097180271178287279562344886311651315801331724108252194405382496987536167369805384928424612258922116449430968167436841676404416486430796755622149045316011910202499416458995324572634480331878677106769365111815663216159931595961782882987277159465415756895368850066933500919214308465011751501667910926718970583615597438160188759834305533963185672113350555901168540891280959756723047473265826727272452360684730868304538210337676825817037766737296682024176827449621357921049878398087573505594486799196522708700203887508999622701686828855150299420605473485097984046785763352487698859769530173806863135775692959855608104644742455143532393963513388864897047553545387790474887361682724204371569678101653496856075163416462835870283579479260939378677319532228805992314448431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6aef45d3ba00e087010d8a08ce6c11876b93bc8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pci-nsn.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187a6e985360000040300473045022100eb345cd526103afa14c58733b12dfa6bdfd04e83c457fcf422e87a86caa31ec502204a776571cc1fcf94e6b713a4fe85aec70f06c36a296484d96fbe09e98a03037d007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187a6e9854e0000040300483046022100cacac4e364a0e568ec0ca97640d08112cc0584f9f0b04ac985fee3eed1431c8c022100d37464b2e05ec8b62ad0026924fe3355c3596cea5ae54293c2ba2df4f6b0a433
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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