box.nts-unitek.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ab:d2:dd:2e:a6:3b:37:5f:b7:8a:d9:16:93:b5:74:0e:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=box.nts-unitek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:d2:dd:2e:a6:3b:37:5f:b7:8a:d9:16:93:b5:74:0e:94
Serial Number (int): 319805428861642829026179293897515190193812
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:0c:15:de:12:dd:bc:55:0d:98:19:c2:ec:b8:c5:0c:95:f8:77:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:e1:1e:43:10:a5:8b:78:66:88:14:54:70:f1:c2:f0:18:4d:69:2f
Fingerprint (sha256): 8b:38:b1:47:48:32:e5:36:bf:1a:bf:aa:6a:72:32:7c:1f:57:c3:5e:07:fc:89:59:db:35:33:a5:e5:e7:ef:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate box.nts-unitek.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for box.nts-unitek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

box.nts-unitek.com

Other certificates including the domain name nts-unitek.com

(limited to 100 certificates)
box.nts-unitek.com
support.converting-systems.com
*.nts-unitek.com
support.converting-systems.com
support.converting-systems.com
gl.nts-unitek.com
box.nts-unitek.com
box.nts-unitek.com
support.converting-systems.com
gl.nts-unitek.com
helpen.alvarum.com
cmp.raritanval.edu
a-www.nts-unitek.com
support.faithtechnologyservices.com
box.nts-unitek.com
support.converting-systems.com
docs-launchpad.nts-unitek.com
nts-unitek.com
nts-unitek.com
gl.nts-unitek.com
gl.nts-unitek.com
desk.rocket.chat
box.nts-unitek.com
support.converting-systems.com
support.converting-systems.com
support.converting-systems.com
box.nts-unitek.com
www.support.templogic.biz
support.converting-systems.com
tickets.nts-unitek.com
launchpad.nts-unitek.com
*.nts-unitek.com
cmp.raritanval.edu
support.converting-systems.com
box.nts-unitek.com
jira2.nts-unitek.com
desk.rocket.chat
*.nts-unitek.com
support.studioarabiya.com
gl.nts-unitek.com
support.rmggroup.com
gl.nts-unitek.com
gl.nts-unitek.com
support-ar.knawat.com
support.marcomkt.com
box.nts-unitek.com

Certificate

The complete raw certificate details for box.nts-unitek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319805428861642829026179293897515190193812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-08 20:53:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 20:53:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'box.nts-unitek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 629717296793577495466727996971584624711886489584084332524992781078789126429634897995421725593275943871375193070189793120564653149161900786002364880364499101127858600881585007772407748252036270794939002025593383002376855988734571795318098895263196386595008967152768667541307389950616178650981699018083428358136459199087863821757544630845913406860787824300782829700782812248926349875753336698069808606718162746968857480648848255043126345619627248262184680692973398732501525773144282386832326771430681349781094380219814756697582904878206743819735046982982791561647976326519383554048238287853763082310697640469878017518851580760749535867115316130359454773897360806421948355476467454452966381756489574822413739641766665831566119725732105171909037873427496797907075346936478690041506607187522983566537599717938132230449266373040513432437011396790949083591407941041671905372688768243987279384192909192628554059476959122843996184982859480949382850383193102427812069922772989107335459863591702634310562483311974688543720700853587740640355868593574840764499426667142397562728184665368252025801144833523874310218819851762440687366913142370062778412642395046724269752570143722873447101000979026986523178159465707069073338659344730909545268307287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d00c15de12ddbc550d9819c2ecb8c50c95f8774c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'box.nts-unitek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163e16418ea000004030047304502202153a91851792a0a05c109dcfbc3283bbab247dbb36d1bf36f430d7013323254022100c1370e39384b0d67b8f6e635231255a3f7ddf439a372ff09b043b8d2fe27a4a1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163e16418f8000004030047304502210085e89f810f1b5f4a87abf58933254b305a226778799839fc3a42c5ca4a119f140220357d7f90143fbbe322487ca2c98e5110070586d0e3072093d538aeb6c8b57dc6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b63372c84c624fe6b92039f0089d517fb590725ea056c1633a5da6b05b5617c516e58c5dfcb85e51ec8532e30d054fae02fa6dffc23bca56f60ff10e1ef272bbbc605cf5f01256d8076c27ee921e2744c36ba526558e58e0f232bc3c98b97f724e250b5fa8d701a3a7ca208f8b307a6c8b6aafbf3e05176a3a7a48e03ff4e82cb5825809c9a448178ba72d83a2e291cadb96efa929a72e0c63e23b12c8939f94eef30980476bba70e83cc5c07cf332723a7089c4825d2ec3d7c11038046a25387569847a3f9fe0e37db17c6164ed419b41f1d5e9d7e47541186d23df872d778042f7467a40dd0f3581eea0ff59014106b10ccfede12033e48d0d960a0621456