nix.vc

Issued by R3

About this certificate

This digital certificate with serial number 04:99:8c:63:97:ea:b6:b1:74:53:aa:3e:3f:c5:29:e4:56:ca was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nix.vc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:99:8c:63:97:ea:b6:b1:74:53:aa:3e:3f:c5:29:e4:56:ca
Serial Number (int): 400698954903983235647269175143110872946378
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:0e:b0:dc:a0:ca:7e:df:60:5f:f1:29:f7:9f:7e:94:60:05:0a:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:05:8b:4c:05:60:ec:d5:4a:fa:a1:a3:a6:bf:3e:b8:1c:f2:66:69
Fingerprint (sha256): 51:a4:7c:a8:37:a4:64:14:22:77:51:c5:1c:15:5a:8f:69:d5:04:f7:9c:69:a7:71:b9:d1:01:1d:16:c0:ce:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nix.vc

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nix.vc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accountingblogs.com
balhomeandcommercialcontracting.com
coolmiami.us
deatsville.com
enhanceddiamond.com
gappstrategies.com
getredapple.com
inhouseipr.com
marywanless.com
nix.vc
personaltailor.com
reddingestateplan.com
sadoctorsguide.com
stj.co.in
tradewith5ers.com
trippywine.com
wheresyoursource.com
xzone.in

Other certificates including the domain name nix.vc

(limited to 100 certificates)

Certificate

The complete raw certificate details for nix.vc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+i0oZK13T0ydW5LvwzJ
xCt2p1D7igwdrAv8IlrmbSbD35/JPFuVGUr2GJnNwjxdYNE600nzSeUM/CLf+JYv
OoauSnrp7t7lLGyZ84N7piYJnpKEy755f+b2vj5+ydBzIOUe0hCnwd6VLoagM01w
4tC8h/fTtZyG/40PWiV21BbJjz4mhoZvxSRIv9njKurIsevjkn+Vdz2hUPxcTcsK
CIH0hqiTWpGUBEocaoMkcH2BWMMbHAgQSjaN7O3TV+DdWAgkZ4UPp4bPcGxViJBW
kLRKSOvNif/6XrL3zA0uo4+piHKMGztO6u7mtb+UgJoR1yq/ia6HYefCCEA+7ju4
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400698954903983235647269175143110872946378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 09:00:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 09:00:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nix.vc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29780753070498157021631403270343156161680622337281005836074402130696771460764975093517039675058290507986861730755579383870181523998430790460370331129311478830640103775373530889616309398460288249698502329737975925250703224969878941777812626715783300531227756954533618945655365819336445672172098481797271464342142562179587192030393853439594884710807380909431199434154276444043910660506448583856071857653772071976369626324484817001417679662790625081316917304455452513954769413161599540395566201816054312604450605142164640003039290980031245796817052354978593553688433046338371977307712941932913143909799913170145130559619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a0eb0dca0ca7edf605ff129f79f7e9460050a6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountingblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balhomeandcommercialcontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolmiami.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deatsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhanceddiamond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gappstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getredapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhouseipr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marywanless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nix.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personaltailor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingestateplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadoctorsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradewith5ers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trippywine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheresyoursource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xzone.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1effc3f8000004030047304502207c6a768356341ac63cac472faa1ad7e768033b1d28a1478679ceec774a14c46b022100d5f13958fd557a50e32b51c43d3a2d6c629714af7680f8a08714130d405269f5007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f1effc4b6000004030047304502201fdc67f187b4017b1df11b7420fb578a866a8c2197829ed9f8cee01f5991ed6f022100ff9d84b2c161096beca317655d4b2ed7d2656f2d310e3c8532ad8e7d5d4fbc54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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