niovis.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:34:a1:48:e5:3a:df:46:dc:53:e2:60:c4:c9:49:69:a7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=niovis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:34:a1:48:e5:3a:df:46:dc:53:e2:60:c4:c9:49:69:a7
Serial Number (int): 265490203492402001968415583080377899116967
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:e8:bd:51:56:69:e4:c7:03:bb:ff:12:ef:5a:62:22:f9:c6:b0:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:d8:66:cf:81:8d:4e:e2:30:ea:a2:89:cb:f8:2e:7a:be:a8:e7:fb
Fingerprint (sha256): 64:48:37:d5:0c:ff:b8:fd:b1:63:fa:02:7d:89:e2:44:89:85:d4:bd:55:37:58:09:4f:b9:c1:86:cf:9b:ef:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate niovis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for niovis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

niovis.com
www.niovis.com

Other certificates including the domain name niovis.com

(limited to 100 certificates)
hallo.ezturns.com
beta.ultrahealth.care
www.magdalena.digital
sudoku100.de
niovis.com
www.niovis.com
dev.app.sappay.net
www.aminorewards.com
niovis.com
tomasbaran.com
niovis.com
niovis.com
api.bepos.io
www.treadtransportation.com
niovis.com
www.curryavenue.com
www.ihax.org
niovis.com
realre.it
adamgram.com
niovis.com
auth.flatfrog.app
niovis.com
niovis.com
niovis.com
niovis.com

Certificate

The complete raw certificate details for niovis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgISAww0oUjlOt9G3FPiYMTJSWmnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MTEwOTUzMTZaFw0x
ODA5MDkwOTUzMTZaMBUxEzARBgNVBAMTCm5pb3Zpcy5jb20wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCaT50iGaM2S+mUc4/JcxqID06FvEFv8XgIxP6d
CqWBl+8KNXGsTC3uQRoTCHWx56k8R3HhX/rEENeD3iE6KY/F+YCFcPJwNCsG0BnF
JDWomL5pJQITs0ceTZc5iN/j/E+azgffVj/8GnVCfwkWjNo1Bd14sHiMpC/M5Zln
ms+g+dwcLdfBTWRRv7G3KZksV0MrT4G5g1TuG6MMZkItBYpr388IgAqH26tHjImW
nzWED1Qd9FXi0iqSpJBnSHbrfyckITlEkARSF43Rsv1CjL13X6EISxzLVeD568Xn
34tulNSTezNhhpDUfMEwp25HlbL7sL2MW8FfqcBvINJk4Iv80ynq9DtZ67Eo3YtN
WAjL4Ge8pUv/MJbYTOphyGermJbBEEYeRFRPmH5K5ZThHX4gKTTQkBjsDTVKUOAx
JiP+N6c7w/SyecfBJnM7+5GjRugB7a4qdeHebJ+tV80cW6tB5jv9KaM+KIjO9KB9
HXFb8Hij4eHldPVJ5KLT68hbsyxbLuo6vrUIJ5YBkfgCGWefma8jEkcOzB0Of+0Q
QdEQAU+vxNJuaFZ2hNhoV6lSXQWiOjkBdXFrE+NYJy7qpR022t57TEBCioUoznI6
hXi48QH58+2s6+qs+BPy9ih0n1TonrLFv7qCn47yK/rC7B+uPsfahKNNzxn84HDV
oBzf2wIDAQABo4IDITCCAx0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRN6L1RVmnk
xwO7/xLvWmIi+cawujAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCm5pb3Zpcy5jb22CDnd3dy5uaW92
aXMuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB
1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG
AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg
dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3
aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz
ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8A
dQDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWPueoNZAAAEAwBG
MEQCIGQ4ADVvkLtOCofWDrpespt+VAAiARubSy8XnaF/QcOoAiBzfomIeSBwFEiY
5COMwL2lrAYlb4ecx/r99ywtEP9cJAB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc
pMMM9OVFR/R4AAABY+56g2kAAAQDAEcwRQIhAMsO/Qn3wIm4aaJ9TiOR1QgjBeqf
V9mR9YRdUq1bQpvNAiA/XiJNT58ox2ahbH2uM1UMkDe5Ms8kQ5G8AXCNhRCi3DAN
BgkqhkiG9w0BAQsFAAOCAQEAHei6Sw57VfNzM1HQkgTbwL5G2MLF3huzVvEfmMsW
0drVZl++OQvWuC526dnKnmiUGeSSn1DbjuSA8C9ZXBzJx5grCFu0P3anHbnUCTfW
2ACIDp6XWsmxcGhKbJSeroHm4aqr/sGZ3u+5SxXLFseNV96Fmse/Zwx3WapidDHy
7ST3pVspAgMIuz/HRCQsz5mu+XbwLYGS4olHWoCgXTnNEt8kt/8gNMmBxycPyeqF
USButBvCbMPt/egnPswHrJ/uUAn89nAqk8i+XoxxsPiIXsnOQG1XZMcC/VKLHEgY
wehyyH3Ez96gOuvHILpxr3yGN+QYGTUsDXxCmnm9ju6NgA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265490203492402001968415583080377899116967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 09:53:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 09:53:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'niovis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 629533920745942973512664367423407332342064170985543145978664216710432770237612607077849990791214992510502710306615084294824043125484605453651173243572338564036801782250255524196568436184714321806880505583359937835570600579565310411363448426873955185358067899461692345215476548737544625514789273122549639626161961220689559612344292422405237170491322515369929923776548433619158030432773820419947137809565350720951694256951791303735790491705977183275975497067483291370106154884063040482907790525617254188086365098340748654923451510879515633439137885829355420307000312072134322060243024419902419150614950609390279871732886815560883715036164211303012151888121835340050281523147750644264085402146666891688016864261603210532128075391823499373436733338875589796632060247540392948145559149534063772419579494267942184321610914727922942512177596869319208633507337573180370047054766707098038623471068407738833585004716436544496852441209325130876177746670472084985705524543646080326457047554395201094435143456988824851585272062697357317407937109181861409869385797349660363163867797243052238973965832213024823697274169681840557391320309597756977396550943057913175929899640025615627147018239602994214170137164376402176248943924727488767969415978971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4de8bd515669e4c703bbff12ef5a6222f9c6b0ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niovis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.niovis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163ee7a835900000403004630440220643800356f90bb4e0a87d60eba5eb29b7e540022011b9b4b2f179da17f41c3a80220737e8988792070144898e4238cc0bda5ac06256f879cc7fafdf72c2d10ff5c24007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163ee7a83690000040300473045022100cb0efd09f7c089b869a27d4e2391d5082305ea9f57d991f5845d52ad5b429bcd02203f5e224d4f9f28c766a16c7dae33550c9037b932cf244391bc01708d8510a2dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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