www.nckco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2f:83:6a:66:66:9f:cc:40:a6:06:50:0e:45:ad:fc:f3:82 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nckco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2f:83:6a:66:66:9f:cc:40:a6:06:50:0e:45:ad:fc:f3:82Serial Number (int): 364617096300176430232001437743519249527682
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: cc:87:be:25:f0:9a:00:99:94:0a:b0:fc:d3:33:bd:be:a5:84:bf:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 72:55:73:fd:10:65:36:22:08:b6:8d:09:a4:59:2f:c3:9c:85:df:40
Fingerprint (sha256): 50:b3:79:58:37:34:11:49:ad:3c:bd:81:66:c6:71:1e:47:af:df:bd:dd:fe:9c:59:52:01:03:8b:68:65:86:8c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.nckco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nckco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.nckco.com
Other certificates including the domain name nckco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.nckco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISBC+DamZmn8xApgZQDkWt/POCMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwOTM1NTBaFw0y MDAxMTEwOTM1NTBaMBgxFjAUBgNVBAMTDXd3dy5uY2tjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDcYSNCyVSUq2vrvv8t06VbGtTmMgGvt0Sc wUhJDj5qPjT7IFh/5PrTeSXP61Tj83aMKar4pnJ1e6mPH0MG7PXrjDaHeRCgeQHP RVT9fTpVkkt9bPkN2KAE5irI3X9LhFve1N6fAa/8yrs36ej5ciyen4u2Ceh8Hm9T K7o1WSHRqX2w/hwxe7jytaS5pQoBE3746NFEvsXNfyQektjX3xLBEyDX021RNLFH lOn34kJt8FhMnu9tjp4cH7BdrGkne6yv5OMbQrBTF+ijuL7Y2IWlzohFAtRLIcvW WD8mOBtfEnVvHJ+Rv/v9Ob1eysBN6w8YXpXY40x/MlpPIJ1PmmcccBIRq5O/KYu/ 0NDXy3kL2rlcDQITZso6leKvbbw+WoCoIiSbSP7p6UBmv1C1t42+xDevrq/8AUSm /FEew+iE2Yx1RUAs82qJCPApXKooo4BbwWJe3p+ABI3mPRPxouYFBYrPJ+OJaLbY VSOGXEzT5amYFvJo9y5SGcWJZsAge89Kr+Ykmc61QTt6QmaCMmu8c3ZK+woANNU/ /dpRnVX8X5oA8XF07BNo+I5+uvAKIn+b6vdBapZhPXxjfmXUm3HSI62QnTfsmTkT tIpBj/TR0lj/HohEAaYf0Ge8yTTaIfYyZ3yx/RxDLirYa58A6aih2oiGAtw0o7qc npm9EmZFzwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTMh74l 8JoAmZQKsPzTM72+pYS/UDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5uY2tjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW3EsEkoAAAE AwBHMEUCIQDpn/wDNSfqzSbMYlEPnJ7NXcGzXtdQMFLoqorM3v3P2QIgaePTA4Px zlzQR2jIxtk4V4JRPcXHjCtmp0CQHEMMqrgAdgCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAW3EsEkmAAAEAwBHMEUCIBK2F2v3UGP6kTTalOagAIVE rCxqK98aa5wmo0v+ekpeAiEA/Sx2+sbAKpH/Gi4Au+HnbMB7dGHnzIAaA/7MLAH6 wIkwDQYJKoZIhvcNAQELBQADggEBAIpSIB/YnKwAgDyC4n/rnaeMWhR3lln+rss9 cPuFDCh//7h3BHwu5Z4lAJqQLUE3xTsCP0A5GoME/SbE2yK5SDIIAo90WOyfnKLk kAIBVH7gSEC99ZdCkqMmakyXiReMTgfDRBDHOFdp6d3/h1vb/7rLIBLGzeenmIM9 LufN24jmhUfDaNX2LB23t67k9uzDce9+QcRLWAr2zjrOX9GBxTJaevRt7e5bR8cj DTq8I2jbM+d0XB0YYsNwn+hzFJBny866WlIaTt0YS5/JBiMyCHfLmbqsspDIPJ4H Wlpx9Q15QJ78TgxZq6I7t6LBjvALy+hzYnC5fYTGbqjTXCZdwGI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3GEjQslUlKtr677/LdOl WxrU5jIBr7dEnMFISQ4+aj40+yBYf+T603klz+tU4/N2jCmq+KZydXupjx9DBuz1 64w2h3kQoHkBz0VU/X06VZJLfWz5DdigBOYqyN1/S4Rb3tTenwGv/Mq7N+no+XIs np+LtgnofB5vUyu6NVkh0al9sP4cMXu48rWkuaUKARN++OjRRL7FzX8kHpLY198S wRMg19NtUTSxR5Tp9+JCbfBYTJ7vbY6eHB+wXaxpJ3usr+TjG0KwUxfoo7i+2NiF pc6IRQLUSyHL1lg/JjgbXxJ1bxyfkb/7/Tm9XsrATesPGF6V2ONMfzJaTyCdT5pn HHASEauTvymLv9DQ18t5C9q5XA0CE2bKOpXir228PlqAqCIkm0j+6elAZr9QtbeN vsQ3r66v/AFEpvxRHsPohNmMdUVALPNqiQjwKVyqKKOAW8FiXt6fgASN5j0T8aLm BQWKzyfjiWi22FUjhlxM0+WpmBbyaPcuUhnFiWbAIHvPSq/mJJnOtUE7ekJmgjJr vHN2SvsKADTVP/3aUZ1V/F+aAPFxdOwTaPiOfrrwCiJ/m+r3QWqWYT18Y35l1Jtx 0iOtkJ037Jk5E7SKQY/00dJY/x6IRAGmH9BnvMk02iH2Mmd8sf0cQy4q2GufAOmo odqIhgLcNKO6nJ6ZvRJmRc8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 364617096300176430232001437743519249527682 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 09:35:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:35:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nckco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899069692604741595215029637612103729880182207304338772146881998411530208279493930738710732078216841080582326326467404213638491788382585024821834041366100216373995813354277576605791476162960941073909517387632596171197626716173343878815556828323272857081498157106978806437376704004300691413145204885892694309095256522082453454925577363656589032690891913838218962421877526921149700686177731476088388913532061074915407336604695181309104823322176374078060939607945292917014590552303177966787776333544040560345751601690610170085798706066398606367974485030808089366622587875100042669073731630841024900038406515554903509400497598997866176783236845836298052946297947930700439693703654870217675856599107265106565851670878528171090445953710948886978941318938392363424225274830310493537822276147495414438625935928379363253491518661227295275271338402078164279945230740918569256168697361082013340070059332477708154207856032506131035417147418909549329367848091405630457467241081978822700414893021614629840955964977438517960477939320923456409114710795145770151274589851058449584322243636893958879909502631192990098651177300214826456644231553579825169278487060256138446950159189018505457794395261529113615036631786255664850245477416753287836610217423 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cc87be25f09a0099940ab0fcd333bdbea584bf50 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nckco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc4b049280000040300473045022100e99ffc033527eacd26cc62510f9c9ecd5dc1b35ed7503052e8aa8accdefdcfd9022069e3d30383f1ce5cd04768c8c6d9385782513dc5c78c2b66a740901c430caab8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc4b049260000040300473045022012b6176bf75063fa9134da94e6a0008544ac2c6a2bdf1a6b9c26a34bfe7a4a5e022100fd2c76fac6c02a91ff1a2e00bbe1e76cc07b7461e7cc801a03fecc2c01fac089 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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