novantaquattro.com

Issued by R3

About this certificate

This digital certificate with serial number 03:76:0b:55:dd:e8:85:55:88:23:50:32:b5:1c:93:45:82:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=novantaquattro.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:0b:55:dd:e8:85:55:88:23:50:32:b5:1c:93:45:82:47
Serial Number (int): 301505244445972809181722921899320467096135
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:d6:3d:eb:fd:83:11:cb:0c:08:8f:57:81:dc:9d:bd:99:d7:e8:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:c1:4d:7c:17:07:69:8f:1e:22:90:f5:a7:58:4c:29:68:70:40:40
Fingerprint (sha256): 4f:d2:93:3f:6a:bd:92:ef:51:26:a5:c0:df:ae:10:09:fc:3a:10:00:0d:69:86:f0:2c:2b:ca:0b:45:b8:b7:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate novantaquattro.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for novantaquattro.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

novantaquattro.com

Other certificates including the domain name novantaquattro.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for novantaquattro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqWsVcytbRJW0PkBF+7AZ
SccREeTZZ/EqqGZBTz9bs4a7qxyzdEKgqgAqUN6TghtT5CAyqt4mV0NOxDg4OL+v
PIT9MieWiKq+MBygo1pHZmlLvvy/4h2NbKxIdPU/vT75FQvRVPv8QVNpBJ2Z+kEB
49U85n4efV2pZjiknw6ptG/u3mC1bekEmV1PIxGbIwlMdB9ImiwY0WyjTX9aQ8cM
qc/6fmt/aJHm4hgbeEJ1uJobTxi7ouj3SudHadT/q/8PpacV1esN0gUSPv8JxKnm
bv5LmcMNZsfTdv7G58VDZZuge6l9mxqTWG+Kz66nzfLCmtwVrOKhEHKrzVKYHxwo
RKHpIo+s0euifnFxPTnGVfbKtrM800qYuZqK7YrKV2gk7UAd43IHf/g7LuzyHyvL
TIK9D1YcjdqapTpmxWXvQzgk2ZsO9ryPppy5f2XfABoz1IfbTTrDG1HyMb2Iu0IS
A89gLIFL3DA5y/gsJQQYBlnEC6McI+vcNkadWURsXmjPOwTRv4OKsdz0XoHLo3La
OQDZlXLhc4a1ae7JiWL+rCSaMhZWQTJI0amatRNQJzXLr47Ym2HxllwAPBkgC/l+
STV03GTRXMs3qmCzlaClH0d0E/+rlJ3TSQVe4h7DJmg16c+PvH4X4709kONHBku2
O7D0bhoIiWGP2nFnCvK5QlkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301505244445972809181722921899320467096135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 05:22:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 05:22:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'novantaquattro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691166346491193178036723093331813558403728220163975254366893639127986901875389467092554490510939058689767759779765095869291143297935848076705843966038742778337598042788689079169743757068422269498505776550240600818173749806060619712795871771300364575644925596650367905030780215110816736964483130965308450123476252472719026324812476224222861330074148955289381341813966289683271057995491546710967560224260891478483429622244290309157155132400577922868133525287674323768478590511244025131101164656331199343174413942269020211178405627239020136283363690908589755866503596272968642978723422362884968823247336514171245055849037481470454685641508643359317170844756611016942276728824864530468313027804560943417775203698130417213888906986954393369262265272290900059837050441824239116589223710013477160625249697976357397305369488330539016715061480366146777682413319985506097204211778632752437728052872645605935074640519420710366623134034943130240332008369225049690415625693179556759827647141781066691244830810844085075469838991750329589420193443614286512010193926820491359215278289610840023365369200052933127781095256296979935968501116135141836721955488394700969887570454024922085251818491144930780609904639475479974456198367171453452831862375001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76d63debfd8311cb0c088f5781dc9dbd99d7e864
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novantaquattro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dca548d2d0000040300473045022100a97590ebc3f663da6cb7d71f37076dd2845bf598800821494c5621e9112cacde02205c87427e7de2a3db43c49086e3ba654035c65328c7ccbc5c939243bd9e588fa6007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dca549142000004030046304402200eac9caa5ea4c9281396762b711174893a74a633fb420e52236e6674ceb02ac002203617fadf26816689db3358eec4c5faf6ea74dcc2c1f0c1f3a50119e30728816b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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