www.nitestar.kred

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:52:f4:32:61:c5:be:93:fa:99:e5:1b:26:71:9d:07:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nitestar.kred

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:52:f4:32:61:c5:be:93:fa:99:e5:1b:26:71:9d:07:6c
Serial Number (int): 298197618060696750481553971732069207574380
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:ad:39:a2:72:eb:b8:af:a6:0e:12:05:99:a2:55:8f:86:22:d9:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:4a:15:7c:b3:7b:ba:5b:33:c3:05:d2:db:ae:9b:a7:2c:29:63:b0
Fingerprint (sha256): 67:cd:4d:4c:cb:0a:ec:90:95:8d:b1:7a:c1:99:e7:56:7d:dd:ba:fe:4e:2f:45:06:07:0d:73:b3:50:77:4a:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nitestar.kred

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nitestar.kred

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nitestar.kred

Other certificates including the domain name nitestar.kred

(limited to 100 certificates)
nitestar.kred
www.nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
beta.nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
www.nitestar.kred
beta.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
beta.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
beta.nitestar.kred
nitestar.kred
beta.nitestar.kred
www.nitestar.kred
www.nitestar.kred
www.nitestar.kred
beta.nitestar.kred

Certificate

The complete raw certificate details for www.nitestar.kred in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzl24T9V0MLdJcndaQ/kJ
XsY2ODF2RIujCSdLpwrTyZNanc/TxyIXZ/mRfRCChmn/27DhAEJcIA21ZDhX0dz6
n7ulML9iQc3JESBZSLtDvxlH5MBm4tSZ70Rgv2teo5w5+ADeENiWQEMgMxoJsXiE
E/o8mEOnvcetpUme+EKuHjSonH1+x5UOmPYZctsawji8eA+Rv7wCTmvyiY8YTJxu
GhrMkqtvQl1GAutAZaIUMXHRsj9xYohHtIyus9KoQkFaz/bMyVRC/boRNYjS/avj
0LhAi7KIrkYmblgvb00FSbVxH2ILPeAhSihg8NjWoX4Q8x6decEX5DzqGnnnG8hh
+F2zImH0AXolhoCSKWVgpj01q8gcVXbnpsz3ZPaZlHlQeL6bduCiMl84GESUfV9f
XFyFwk5moNOW32H0Z379jqOO5IqL5bGW6ylp1LL4CHcmMV22Po8qRTvlM9PbNBpf
9FOndoKNZlgEXHrCt2H4DwwuV3ep1g55J9vWc9dACTWFzdQEbKGKvxLKt3zBMP/X
53xejDQmNbOxgSRY/b7cQ1N6KKyhFgcNd/gMKT9IZ2IlK6vvnqfsjkAPiNVuvo5X
uA1LkEDmhPLWyKJp6CFzKFGf4D3m+tt9ZgBAqnKGV++C4fp7rKdNOJkH7zFjjbnD
AMiSeRtLQ6kTRrtxaiuPFccCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298197618060696750481553971732069207574380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 05:31:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-11 05:31:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nitestar.kred'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841900209700381558508644649833638628129569713296992931505650508161167185610636171738324859928702252126868958542981300909813595684640578274403820514735875672248943983294620229317098050057256320501755917347504802825206473378973686341245546061774395301891522605896155472073138656543348975972555376606453840945700851805044715712085983203736595224231600359812838254022298383389444573869585930015074520706854335725782115000817873355524562849701964511320529052707895623328093369464527417325545623068820647268778823101439666448438834198557126177044853196899337721029506819893673810465523824584724093403039960143792290981774487469493035188775746561490796647315440269172137177906034379274224574951012848185134855612654677262675438385050977049838066637078755440052947176610141931836197716957170734785111048943875718898607467502854721337258862491363728523876691029043475362169868932918469081891895901075632837904426574645091700102632873715886341779390138065214439231127620624164477174187563158030876750418333474050711127125674047177887879281925534999699654181997395894767341979370413308531983631848102656271484525074031214758340993681494613190626613858701492198456316089548363067983023475764307549920475634552451605222830459144222812309451380167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1ad39a272ebb8afa60e120599a2558f8622d92f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nitestar.kred'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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