nsense.net

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:79:c6:57:b9:76:d9:e5:0c:e3:76:69:7a:f8:61:a3:09 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nsense.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:79:c6:57:b9:76:d9:e5:0c:e3:76:69:7a:f8:61:a3:09
Serial Number (int): 406459012545132118324316771306859283981065
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:33:28:3b:76:a2:a7:3e:5f:2d:cc:c6:1d:18:7f:f0:aa:85:fa:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:d1:1c:45:88:51:f2:0c:e1:a3:ee:b7:b9:d1:fe:96:74:11:3c:f5
Fingerprint (sha256): 81:a6:54:39:a9:b1:2f:8f:da:1e:c5:51:ec:37:f2:81:8a:67:11:2a:4a:71:51:79:67:d0:22:ff:88:27:0f:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nsense.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nsense.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

herrasmieshakkerit.com
herrasmieshakkerit.fi
nsense.co.uk
nsense.fi
nsense.net
nsense.pl
nsense.se
www.herrasmieshakkerit.com
www.herrasmieshakkerit.fi
www.nsense.co.uk
www.nsense.fi
www.nsense.net
www.nsense.pl
www.nsense.se

Other certificates including the domain name nsense.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for nsense.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgISBKp5xle5dtnlDON2aXr4YaMJMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjAwNDQwMTVaFw0yNDAyMTgwNDQwMTRaMBUxEzARBgNVBAMT
Cm5zZW5zZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObYuQ
BIrC3QQE80xN8Q3zxJYtQ+DfG3or2tmA8go3agMd2qPDV3IUtPd2sh5XmDJEN0j+
I0egX6SqFaqze0XweR2efrl6/aBIn1YLKCOYm23LtD40kRa0Eq/YrGLTSUMiBfbu
4RjPRsDRY3FnEuIU6SMCgy05BSnKmqJfcVLqCnov06ueAyNWRGw9epI2aFycuZna
BLvbRrDwN3aRC7Qasy/8aLMadJ2CPPyBDqjBzDJMJQ/0dm/YicdIlRrZ2uFFAnQo
wezcoVrLyYwCKIAk0LXXNI7kFVKUr4gMjXkkbpEwUJJ6836fsRKSoqnHHJSZqN7H
g2+H/lqQqmfNq+ZrAgMBAAGjggLzMIIC7zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FAUzKDt2oqc+Xy3Mxh0Yf/Cqhfo7MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIH7
BgNVHREEgfMwgfCCFmhlcnJhc21pZXNoYWtrZXJpdC5jb22CFWhlcnJhc21pZXNo
YWtrZXJpdC5maYIMbnNlbnNlLmNvLnVrggluc2Vuc2UuZmmCCm5zZW5zZS5uZXSC
CW5zZW5zZS5wbIIJbnNlbnNlLnNlghp3d3cuaGVycmFzbWllc2hha2tlcml0LmNv
bYIZd3d3LmhlcnJhc21pZXNoYWtrZXJpdC5maYIQd3d3Lm5zZW5zZS5jby51a4IN
d3d3Lm5zZW5zZS5maYIOd3d3Lm5zZW5zZS5uZXSCDXd3dy5uc2Vuc2UucGyCDXd3
dy5uc2Vuc2Uuc2UwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYvr
PmDSAAAEAwBHMEUCIQCi13ZdNPhmjzFTqGk93FaUvpIv6oO7Ub7M9d1DEtOuYQIg
HKTGsTzzzEJyQ49hScURXDIZXGuy6cZTHvc/wZyH6dgAdgB2/4g/Crb7lVHCYcz1
h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYvrPmGEAAAEAwBHMEUCIGUoQ72Kgfqb/yRd
VDK4TI9jj3xhFiiIFkLrWCUS4mxKAiEAp+09wnr+cuw0t6okYU6DtSVva05FXjTL
+5maxmpyw7YwDQYJKoZIhvcNAQELBQADggEBAGbfL+bgDBSjKe7Lab5QPF9xjqO1
YLIsNpvhJBCXnqvj30i5y1rP0XJaPm7xX+1mixjB4ibBdYg07x7j8M+q0HdBWHpT
DfvppWf/tHh/95ruTGQu4yO2GZDa3GjdX9u8mP36mbJ2yxxJoVLfxCf/sn7KyUOQ
vpSkqoFlsU3o1u5JlF6mBEvQdNWWb2mpvCPo2PfXxdzTfQ9GMBslJmjWEjeJ5eaG
a8G1n7QFtdMTqYr7ObIOh0MFSbq9mR+VOyBfTTGXog07mye3oG1gYBcprco6rHX4
pxBRV/2mbbLE7kx8KaJVg1+DNDnLCBH5TNMw9ERWYmBA1lz0SgTzK7c1iXQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm2LkASKwt0EBPNMTfEN
88SWLUPg3xt6K9rZgPIKN2oDHdqjw1dyFLT3drIeV5gyRDdI/iNHoF+kqhWqs3tF
8Hkdnn65ev2gSJ9WCygjmJtty7Q+NJEWtBKv2Kxi00lDIgX27uEYz0bA0WNxZxLi
FOkjAoMtOQUpypqiX3FS6gp6L9OrngMjVkRsPXqSNmhcnLmZ2gS720aw8Dd2kQu0
GrMv/GizGnSdgjz8gQ6owcwyTCUP9HZv2InHSJUa2drhRQJ0KMHs3KFay8mMAiiA
JNC11zSO5BVSlK+IDI15JG6RMFCSevN+n7ESkqKpxxyUmajex4Nvh/5akKpnzavm
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406459012545132118324316771306859283981065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 04:40:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 04:40:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nsense.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26059109557809693515161901045944156239957717112799877015993236233527010313450795357520204031098633950025304413917071824271355410444180030521379850490579130258424328519523354115143439967642706990675346526758935539090641169436037468642115630021394498160183695351533742590500340012072183920295870212899304739830926657264387687565929661733114509580031277250844312696559098267898738089830498249729771973053292111754463440660724643169306864678284859898368145163144800351938766262565555859809872205440258368208206384368128891169762076961134902626710524494394926772812302694023338095385959192919226913855571998545378343118443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0533283b76a2a73e5f2dccc61d187ff0aa85fa3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herrasmieshakkerit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herrasmieshakkerit.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsense.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsense.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsense.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsense.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsense.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herrasmieshakkerit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herrasmieshakkerit.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsense.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsense.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsense.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsense.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsense.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018beb3e60d20000040300473045022100a2d7765d34f8668f3153a8693ddc5694be922fea83bb51beccf5dd4312d3ae6102201ca4c6b13cf3cc4272438f6149c5115c32195c6bb2e9c6531ef73fc19c87e9d800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018beb3e618400000403004730450220652843bd8a81fa9bff245d5432b84c8f638f7c611628881642eb582512e26c4a022100a7ed3dc27afe72ec34b7aa24614e83b5256f6b4e455e34cbfb999ac66a72c3b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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