bio-nmn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:2f:cc:ee:fd:5d:b7:fc:c0:7a:b9:1b:a9:4e:b5:6b:ff was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bio-nmn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:2f:cc:ee:fd:5d:b7:fc:c0:7a:b9:1b:a9:4e:b5:6b:ff
Serial Number (int): 320949809798093218514956738515444692249599
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:20:6d:af:57:a4:5b:8d:08:a5:f5:a3:80:8c:99:35:30:15:e0:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:c2:92:23:49:da:28:05:c5:23:a1:c5:92:b6:c0:dc:86:65:b0:73
Fingerprint (sha256): 57:64:83:b9:f6:4e:fc:73:95:e8:1e:25:e4:72:77:e0:d9:74:54:c8:7d:10:86:ca:03:1e:47:67:d1:82:ba:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bio-nmn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bio-nmn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bio-nmn.com

Other certificates including the domain name bio-nmn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bio-nmn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320949809798093218514956738515444692249599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 13:06:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 13:06:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bio-nmn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692120765784545543596638704822563782497256923163978397099734318860581644111856034903245859722752369707638849774001017505175779338842967751153081303142997136745572268971174939868765014059894160383194151017009054146184254342466047618523222060304978788660160125022406733376937298050969951375551886304129658534679073514035321616965155578443673152355143566835606697767324429425188567379299799282220908845284186998380997707024574456014930633058098007034364828045288419365525870923912413849718180880276203861681314820915046418032549975791052981746740183533684603181110101653517349846141659954034959816168094903252833298294119571417845992774373201550709463784913570105059874267010796946809391040796678751228978176763783777345667141563929091795676050709092031051941462210405516841366425790298785047901586139860895712466800515310511631460851940338148858043217092685881463882873443665536761869513591391448648521085938791358475305263491293897508355933926537622769514013667975727712356934752576193528863327224222889826355466823429419317923071176761115946307893878533556636664329485626014586367752491757316179786877044297791150136307734257690046410772481840578462798246227920757828707952438613700296624690560912818170619032494209784953711243362049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e206daf57a45b8d08a5f5a3808c99353015e026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio-nmn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e0d8a3a93000004030047304502200b04147ed2416a565a436f7a61fe308b5b53396a3100e33b14947246f83dda45022100b4eaa5895e1ea55eb0dd9dae3be801ed9d23e35a3448bb21b6b6c4234fa54c13007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0d8a3a810000040300463044022053d72be7b209b19601667c06c3ed9e7303a50aeed975440efa9790e42866f9ac022008605acbcc659d129af145341f405c5882bf615b9cf2fb6d8ac99ffa7aa241f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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