nrtc.com.pk

Issued by R3

About this certificate

This digital certificate with serial number 04:c0:ac:59:e0:56:44:38:2b:90:e4:1b:53:a5:95:35:44:b6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nrtc.com.pk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:ac:59:e0:56:44:38:2b:90:e4:1b:53:a5:95:35:44:b6
Serial Number (int): 414012452055651072781711101279952377824438
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:06:f0:10:ca:b8:df:da:c8:6a:36:d9:bd:89:5e:5d:8e:11:5e:5d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:74:90:e4:94:98:ef:ab:20:85:55:9d:38:5f:81:8b:f8:a5:f7:52
Fingerprint (sha256): 57:b4:e2:4f:df:e6:45:e8:e4:31:43:91:5d:05:a3:51:38:65:72:e7:e3:f5:d6:25:33:f8:d9:74:a0:05:62:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nrtc.com.pk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nrtc.com.pk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nrtc.com.pk
www.nrtc.com.pk

Other certificates including the domain name nrtc.com.pk

(limited to 100 certificates)

Certificate

The complete raw certificate details for nrtc.com.pk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3A7SY245LTx4/WXxSzH
BWXPe2LLcR/A9Du5MFDaiKUy10QuGStm1xzXqQevDQb7HEE+wivr1jaRyMilF0vO
1WlfEzeMcnI7yZzbG1vZwdeMIfbym9MsbD4/9lWMWcCVFe+9ZpFitXlPm+QUjfto
ZMkVrqPCG3HJgTnDDNPVZYqEy+EqiOM8GqlYLEPQzID3dgMeBbpnEpWdY+sUPyqh
v5/fOEff5eICl6JAQpXnmklmvITD8rMe36n6qinwirKMUAZzj1HqAybM+3OcDJ/2
SvBBoIsm+ERS2ZSZlBSyFNCWEj2RfMDJL1v0xGAGxN4n7EVbuzvj+Yidbk36WFNV
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414012452055651072781711101279952377824438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-04 23:32:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 23:32:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nrtc.com.pk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24671812928626381409980238794426191066789622656704638380838258978282259997485023557643153410393961908078593522026767560950001406874476257566571360498743028888167479303917509888378301048377358327846728146989334552293828954720645455526932307640155088206050355730156147885562416202621055578159320838017316997099345196104811928740344848373513483427106318867881226212364957006117621992166857839427191350993293227182612010598269979330359903940834316188869303279131976038019603896876494290603337143757534870259072101518975044528682646487899962026416431769335181328655833464682750403953014224080581614748367960872867513718051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a106f010cab8dfdac86a36d9bd895e5d8e115e5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrtc.com.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nrtc.com.pk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186af2f8e630000040300483046022100de286acc13bb5249566fa4e79c4c119cbcd35187f4459028c7094dc0c4fdf7e9022100979ff704e3dccdb525f3815201f6cdcd997c1a0237cde7bf68cfbf1065a168940077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186af2f8e6d00000403004830460221009c9b183d3cf6999c80da56d1cd0503f154f75cc384accc83ecd085759d3e0978022100c3b00b61ba20d499743c326eaefe6ac57007908b7c42fa12608e549ce8c04cf2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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