nico-lab.com
Issued by R3
About this certificate
This digital certificate with serial number 03:13:35:1c:4f:aa:1b:68:38:91:b1:1c:49:03:f2:41:14:5a was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nico-lab.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:13:35:1c:4f:aa:1b:68:38:91:b1:1c:49:03:f2:41:14:5aSerial Number (int): 267872818850654838668710696885032096699482
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:09:3f:ca:c3:f8:37:1f:e1:67:16:46:65:db:15:b1:e7:0e:11:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c8:92:17:34:66:78:b6:c7:d8:8d:b1:c3:d2:d9:53:e3:2d:e6:8d:85
Fingerprint (sha256): 53:1f:97:17:28:2e:2a:65:7b:53:69:b6:ce:fb:49:2f:5f:e1:cb:ef:fa:27:23:a1:81:c6:7e:03:8a:bb:bf:aa
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nico-lab.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nico-lab.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nico-lab.com
nicolab.com
www.nico-lab.com
www.nicolab.com
nicolab.com
www.nico-lab.com
www.nicolab.com
Other certificates including the domain name nico-lab.com
(limited to 100 certificates)
nico-lab.com
www.lingosong.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
git.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
www.timber.so
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
api.nico-lab.com
nico-lab.com
www.delius-company.com
api-tst.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
preview.strokeviewer.nico-lab.com
preview.strokeviewer.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
www.lingosong.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
git.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
www.timber.so
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
api.nico-lab.com
nico-lab.com
www.delius-company.com
api-tst.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
preview.strokeviewer.nico-lab.com
preview.strokeviewer.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
Certificate
The complete raw certificate details for nico-lab.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISAxM1HE+qG2g4kbEcSQPyQRRaMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTMyMjQ2MjhaFw0yNDAzMTIyMjQ2MjdaMBcxFTATBgNVBAMT DG5pY28tbGFiLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANqS thbHELhOrKXgu1sWk9QH1IC73kBcar+++EKwG337odUzXR2+Q1pFOIyqit91P7oy g6NV69X3s2PoagGmNqv0vG2nU8ArzpAW7bxaK3zbhCwqyEyGDEl+Bo4TK2bslf7i z0Bw+HVfgNfZd8k2RQ9m/9Vn0WOnLWzP0fn/CZzIpte4bvYvlxJYcYcARYQ0wGav is88Jt3FzQ/TbTDX9XWzsHsyYlV758LlVQJPAYBcq14cdBS2lcnHLjgOY5ae/Abk +AP+Sn1WQrc2bklfO8+d16y0fGTZBZureSdeq6TYCr8aJxVvQgwPtlf/X+8wHotP vmzrLZ2u+9KHboLQ9gwMWZA3OomTN7bhLhfALVEQuyLqDjwkhRecfIpxVikUFOMd 9FAbzaYSdpRpa0I3Woc6NTXOUA8REabl4QuroEsDCmn7Zs7KUsSKEjhJxyWktb9Z Ne56CZZqNeKRMa2ciuJEOKlp/GcR/+gmITAT+Nv3dBaPCYnRkT5UBOiTxDrHWQ2Q GpQmVew0inflhw6ikMqHYpsVqVVtJAKOklYbgS4jEqY67YoWLnOwX+PoG0/I0+GG Nnbc6tziqPC6vDodi85eRJUNbjlmAWslpoJIbXKpLtDQELQF8Y/cx/FKfUU/xmur RiaXzY0qJDTn1REyiAz95v2BoY7xwd2RJRlSJj0ZAgMBAAGjggI+MIICOjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFOIJP8rD+Dcf4WcWRmXbFbHnDhF5MB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMEcGA1UdEQRAMD6CDG5pY28tbGFiLmNvbYILbmljb2xh Yi5jb22CEHd3dy5uaWNvLWxhYi5jb22CD3d3dy5uaWNvbGFiLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjGWTGuMAAAQDAEcwRQIgGuYHk+8H LEeHBdbNlZzPgj7ZAddSa/bRYGi5wYHg5QwCIQCZCdfIycBHXj/KAoPFxVMCKqRk MSNpud77vvU9oNZNXQB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX AAABjGWTHIUAAAQDAEcwRQIgRVNgN+oeQho2W5RNaHIGMamp2pw2i+/pK06yvfSc Iq4CIQC9KQwybXhHfY6+762ugJWXqLxZgy5mGhPujiseMLVstDANBgkqhkiG9w0B AQsFAAOCAQEAs5hpZlmvnuKxvURW+oMlIl3SUwG3n3uJcEXxo6lvn2jWdYzLIb+3 SIR/ex2AR4zEDuUSJrtwSZ6sR02f6FhS265cjrROYhdrKDOc1M9H6hlBAhr9iLZy F9AjHBmy1+H3nDWbVZ9DHM4f+4e99qNJQYWw3NKe7U4hYuaV9N5Q0UyI5IV1t7OU WyT0X20suEALvBnDho/Y9jAP9XUD8Pdl06xuM2sYLzG5pVzrT/ILmyR0JRSXPyj5 49T4byGvXNMH2W4ZPIkz4AtkLuy9GPWVH2V8nYzD9EJVaR/AXcGA2K2ASRTZJ0X1 95SMAo5VHkHLRBgFu0yAtTCa0jYC6NzWAA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2pK2FscQuE6speC7WxaT 1AfUgLveQFxqv774QrAbffuh1TNdHb5DWkU4jKqK33U/ujKDo1Xr1fezY+hqAaY2 q/S8badTwCvOkBbtvForfNuELCrITIYMSX4GjhMrZuyV/uLPQHD4dV+A19l3yTZF D2b/1WfRY6ctbM/R+f8JnMim17hu9i+XElhxhwBFhDTAZq+Kzzwm3cXND9NtMNf1 dbOwezJiVXvnwuVVAk8BgFyrXhx0FLaVyccuOA5jlp78BuT4A/5KfVZCtzZuSV87 z53XrLR8ZNkFm6t5J16rpNgKvxonFW9CDA+2V/9f7zAei0++bOstna770odugtD2 DAxZkDc6iZM3tuEuF8AtURC7IuoOPCSFF5x8inFWKRQU4x30UBvNphJ2lGlrQjda hzo1Nc5QDxERpuXhC6ugSwMKaftmzspSxIoSOEnHJaS1v1k17noJlmo14pExrZyK 4kQ4qWn8ZxH/6CYhMBP42/d0Fo8JidGRPlQE6JPEOsdZDZAalCZV7DSKd+WHDqKQ yodimxWpVW0kAo6SVhuBLiMSpjrtihYuc7Bf4+gbT8jT4YY2dtzq3OKo8Lq8Oh2L zl5ElQ1uOWYBayWmgkhtcqku0NAQtAXxj9zH8Up9RT/Ga6tGJpfNjSokNOfVETKI DP3m/YGhjvHB3ZElGVImPRkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 267872818850654838668710696885032096699482 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 22:46:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 22:46:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nico-lab.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891700413952609681176616278887067012883011729650838442371257220135971571068667917343125520036639844500192815180158809885550464202935308116549216820398939946995621021277380825790838527920594246437195847425519512131459002879737427508372251396903663070002708822802232228200247109478788376436980843389956426571834784508330968692750049307911665093836346767170806170663361112888574417243305903625873145714592372150289142159916139092652723169396693440742648807100707759977704223512179498524500396794125887132682189636668509912299459532105539968865588245567513085762903289227708310833505988710179202727111377622317134549819543305605230613966674731790569148745419356778921459086511782221855578600738123787147170199409623383019926693010073323278300955429642676746375372017482773048471610794303837991351937056828054991576008467292089433836869788708803304551898639823295579223582339812218907452968776354893172039804471370852415358486490159199246832469552224086317704965775016422219956441954559034897679086567050232880277460435976728263688688175564199555789537747274238296704330626503105574285711303141305535221754817551031335796395819984663062365889295337274917643800544541059787823693636057851057425191346465071960957490997591407847287317478681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2093fcac3f8371fe167164665db15b1e70e1179 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nico-lab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicolab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nico-lab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicolab.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c65931ae3000004030047304502201ae60793ef072c478705d6cd959ccf823ed901d7526bf6d16068b9c181e0e50c0221009909d7c8c9c0475e3fca0283c5c553022aa464312369b9defbbef53da0d64d5d0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c65931c850000040300473045022045536037ea1e421a365b944d68720631a9a9da9c368befe92b4eb2bdf49c22ae022100bd290c326d78477d8ebeefadae809597a8bc59832e661a13ee8e2b1e30b56cb4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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