www.nckco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:3c:6e:5a:d7:f1:81:db:11:0e:81:69:5a:63:27:82:d8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nckco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:3c:6e:5a:d7:f1:81:db:11:0e:81:69:5a:63:27:82:d8
Serial Number (int): 275709043880887351331274543614666882908888
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:8d:c3:4b:fd:ad:47:6a:07:a4:be:0d:13:5e:79:a3:73:bb:55:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:aa:27:51:28:a4:0f:0f:f4:ba:08:e5:cd:c6:da:82:22:cf:79:41
Fingerprint (sha256): 55:d7:36:76:3b:cf:fe:16:29:05:8f:1d:31:85:45:f7:e5:22:08:3c:36:e0:ae:79:74:ea:00:f9:37:04:6a:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nckco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nckco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nckco.com

Other certificates including the domain name nckco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nckco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5ITz14Kbu3DODsTE6LET
BRHW9gWom3FXymPH809lKmNE+U4T7oOJ5rlAsAtSKGMjww/mrg0xpVhyf6rjUjSI
PvzM4LSiLotQdHy1tpoPo9NP6WjFRdkAqud6edyT9Xy3UbxZGa+TCKJDOH6J7xHz
HKV4d6ziNDKXQU6AcYG2w8FXZOPKk0ipvJdGOAkr6AiMMl1TcQx7uTh2Uz6UsKwG
ioGyM/flPrfMvM4SYmMEUR1eZlBRlL7Rb6W7aFFY2RTBV+ru8JfGyB72zzi05hhN
1XRwRKYLi3XX4DS6MoQJ248v00sPz5db7Gw72xvO+0QzxVINk7JyM5USNGdVQe2e
zhkR+VuiJvjiWbWk6YHa7KbzgXvpwZNO3CJib/+hrkP5w0S1RLT20mTOq87N9LS3
7GBdIqJXjkAjdiVj10fx7Kb0LiUw7RIFHeoi0GabBJyqtKC1jlgAsKyzZaWiTrhe
L45yuxAOq8MDNSk1Yw4Oi1Br73GI4KDzEMBmr7iVYhNLutTBg9SDzVnoUzFPb7Px
aUW/9685IPjvqWl+hWv9J06emTUbtSjXfn62QHEGiHnljyYCNJYmTBwWOxdHPFYO
D10HBwF5C9D8N/7DWIKSRflEGcypQ7uh9oXBM/khZQNspiKd5l0d4P1zxMwy16BJ
yU3WdP9Gx3IfoA3gw5tOlF8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275709043880887351331274543614666882908888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 15:50:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 15:50:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nckco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932277593239928401077968481886887661074227599679493298442210620057128241143096266850919523180278714413424173599661663753658310492708421203213928818895615085471188777764164960742444608868761612254688592027517144709242841116978449308262215087747874393881022859553057042831212075832189764625796321077324264774965935867461219472423825893833495568419879623397550358510937918097942242110603908536136697145368327685554152550442690217667431955453693119620077985820130271200699663153947194000968439642055184216453790939970751023783507840774438867682586492564079844293275214396607107738805693354249239870851572678082799442928986602582769589490676275056124960912819498511472893902689893372716639431212804118033651149647753316335648251522602148754861688252122354496040645271156039657040997140392700321795907505505893353940851938244150178471141791495153923401296019725213406420021298564901758522218312411117332938070333498108223981307436411607417788666185887073745724624090527195153906082047487439391841569857405218279399565340544506703399409112541307437145297517214412302882720132588029341519731365952571003481029246973196777294702506464252504649260384178664999987760583292308552882075809176340916660539424305562623187771447338387648018975200351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c8dc34bfdad476a07a4be0d135e79a373bb5516
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nckco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f5cdd97f30000040300473045022100f8fea53774246c7dab86b035ac85b4391688b2767d251a74140ce49703bec0dc02201b614a3c48c7e5f0a3e9272e2773bcff507f5fe9aff22f2c53d9b82b6d7bb9710077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f5cdd982b000004030048304602210086bf03522fc5137bf1858b65eeb31539901c594d088e8015286adc548e5dbe0f022100a3900fe53e0111d22253f1b1d5061444f407072910afd4ee01448ceedf052cdd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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