nextleap.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:12:98:4c:50:e9:bf:f8:87:29:16:bc:8a:3d:06:ec:a8 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nextleap.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:12:98:4c:50:e9:bf:f8:87:29:16:bc:8a:3d:06:ec:a8
Serial Number (int): 329758330427309721839949977749300101704872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 13:ef:cd:cd:12:31:49:58:ab:4e:9e:aa:df:d4:c7:2b:8e:ec:90:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:06:ee:24:fb:5e:1f:c5:3f:47:22:29:74:88:60:88:f4:34:c5:51
Fingerprint (sha256): 4b:6d:39:20:b7:4d:c8:12:83:43:cd:f4:07:0e:1e:bd:9f:a9:58:9c:d3:6d:39:33:c6:d7:66:fe:12:9e:50:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nextleap.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextleap.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextleap.co
www.nextleap.co

Other certificates including the domain name nextleap.co

(limited to 100 certificates)
nextleap.co
nextleap.co
nextleap.co
nextleap.co
www.cleanstation.co

Certificate

The complete raw certificate details for nextleap.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329758330427309721839949977749300101704872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 00:08:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 00:08:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextleap.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739922581700728136116706703478019034797812116139679249188942786193757644862517949003793780213394295130370152325716022421349644092984396211032558930584699848816550797041777784249361245039542601785550674828560174386852300283479671960738162941449226114103070241232477033129296508042614905150192157730797218414820173813007778053062124250939317582601385372299920390765761652150017855889367583622416584469621512172570896984066198688799696037446127709758534517894396980235658573733808215294274100780429257737024778026444172715032872955364965626005959719285901181284557499942353929918112755347291663954156515205951446968327907243272927634524772947997122085040180704749186849983173141343627736187092781162908941584468406761694621521931101405431118057031449515069732019140461989233007393535822849545731182738277018055823640316320758223294043041337029392935012286786768829237705330801340750639745285328830892047774690834613391458669555588297893768075313004485418704872863197571746932684269407471696557269718299213571400592978919299478656810002725883836548228137355727920766065233158463685444695237701879690469108925393275460901636001292386433579659376949991686984353280448924018776941453509906898729587082945532740167466850800744406530357601011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13efcdcd12314958ab4e9eaadfd4c72b8eec9033
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextleap.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextleap.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fe9b1891100000403004630440220521845f936d31a48bc921737f2105f24fa2b18e3aeff81010829f83c3f2a04a2022047ad9126b02d10180260fcbdc06117c9310166240420c7a80282c0a625537457007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fe9b188dd0000040300473045022055ccd8e8b689ad314f41288a4ddfd6caac17e4c757ae21fd381a80662118487f022100b409138832a7a8f120da214f0f05fc41d4e786b4294794717856cabe378c46c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004409364cd285384a1c35583c13726103fc061f953cab7e6a6c7fae986061b0bfacb716fc3d26c5d280f6735bd6c92146c1e532255b18de74d2a02b0295cb1de94ca5ec0dfc907d4b79a2381ccd32301125229d915879ba04c17dfd2b1a6275fb71c5686ed2c57c3d72cf362676bd8216e94fb849913b4971894be2eccc34c975745251cee361da3eca854b7b9aad1aa49604af2f6eb6680caa20c9b62aa2c7d696165294935b930e10b8e42b27c2590b78ccc4b372275e7aea00107ab6bbb06d23d5c5578dff5aaf437a760fdd5d534b2672fa8f5cbd8c1384e9cdd9b2a21a2ce87e7348eab708104f5b4af3087d21b4f04b673c8bcbca1893e8a4a149e5a7c