www.nexnano.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:96:2a:9b:a9:ae:26:b4:4b:43:81:aa:62:de:a3:3a:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nexnano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:96:2a:9b:a9:ae:26:b4:4b:43:81:aa:62:de:a3:3a:b5
Serial Number (int): 339801407620149327593367812798270692080309
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:cf:f9:e9:ae:cf:02:10:7a:e0:0a:af:ce:63:ca:53:73:07:66:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:a6:65:c2:4f:96:e9:0c:28:f2:fe:38:f8:b4:e5:b5:3d:a2:76:d0
Fingerprint (sha256): 8c:b1:f4:54:c1:2c:3d:30:38:89:ba:97:6a:1a:55:4a:34:54:9c:22:7a:71:74:e0:62:eb:c4:4f:f8:67:b8:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nexnano.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nexnano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nexnano.com

Other certificates including the domain name nexnano.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nexnano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISA+aWKpupria0S0OBqmLeozq1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTgwODQ3MzJaFw0y
MDAzMTcwODQ3MzJaMBoxGDAWBgNVBAMTD3d3dy5uZXhuYW5vLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALSamBf1TOszRV2jqYDY6Pm0/4EWiZdN
GZyf1nr46UnYpXInf30yPDuVUIgmpXvuek1Nvm/U7DKfq1CQ/27ophrRGoFg35HC
vAhmNzG6ibcZSSYBfEaOw8YtoOVSwb2DmWuO1F1iElhIeGdTemeRwUC9CpKhavom
ynDH/Lkrd4fyIkENsVh+Z6lOr99S5XLXVjDLrj9ggKdLjKfnvgNX4umvJcwFJImc
09KHRqTy735R6Nrkzzg5898Ory4IYMxTdZveCScaYlIi3q3abWHjfOWn9jyUPGOz
a1xu75qVu1fUXzXH2BrDUgFIaMoanmomrDufsjfAKGnKDojGKLQ5iFPafpo+qrY1
YwZEt8kazwNu9/0r0/4EdxgzYmV8H/clGVruWWDfALzJ4i71CMGkSCjtAb+jOnhm
K4Vo6ly3VmGXWJ5jw3S9uuy1ciezZcST00DPeJnMpdlxlHtXc0CI8eploiISVOCK
CbqKq0YBZg0QXusbasNEStUkzJGggux7pAju3F/jdRfazRSqT7pFojC7bCQsYzp4
sofT2qZFfj7Nbac6vbcPcl2yTUWC7hqxvZ8nrgS68btlV5juMoC2GuXZLDfr0fMu
PoYsLzXUJzoxAcI2jHlG1G5gFnzkjH/28diUrQPoKyFISKc54rtqX39wdL7WP6xC
DJGsZG3T5wBNAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHnP
+emuzwIQeuAKr85jylNzB2ZVMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3Lm5leG5hbm8uY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFvGGfJ
wwAABAMARjBEAiAYxzJtW4//o9Sg539KHSojku7MJtrf4QvSWNEK8M4CXgIgBV+q
LoJdgHy0P0zlt/ZAtBKpeyhX3WZh5Yox5O0F9VsAdwAHt1wb5X1o//Gwxh0jFce6
5ld8V5S3au68YToaadOiHAAAAW8YZ8n3AAAEAwBIMEYCIQD2MXtSTK2k4uLGM1SG
rgqORqCRgCCS8rJGAgf+urnF3QIhAPK9bdh4cgouEz8pVyRHoghZnb7rP+2yMlG2
vGVKgGDyMA0GCSqGSIb3DQEBCwUAA4IBAQBF3sYrbSPQAFOhNs1qi2Ebqq6uMhgy
jwziA5aDDzXpRT77Vp26f8rWUj6Iy3KuKZIFGOUh3vZkbpMD0/uBLuqOp1JkQhav
rD5IEnE1pyrqsOVIKHaHLOnf+hv7m83NYHv8trfU7Gz5prTMeaX90CJAKQwxwotu
R941yqvKiwsdnfXAgiQdUpxA1Bm9hlapClXfUgLiseFOhS586ax18sN25V2Tjy/r
tKJ3tgNpU7CMma0NKlW0w8tZcg3XX9ekoNHJdRRfWg3XHIfZydgP/Tj6ga+3er65
JUwqFNch+l8hhvAO9fzFfOE9sZWp1rVfzyXoiOA3Zl7sp4O349ldavbP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339801407620149327593367812798270692080309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 08:47:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 08:47:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nexnano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736799561019204906068875782228315765392494844807077627726866090287788685816097096754515961632760456827739586219027854343898948313991076692850239740645535921482442122383649350922834172150007729235695659043618383728763580158715848732726881097931857975775580242180292689532288947918860495497743213276515890648652028445962879525728191449505535186538451547947614276536269568958509817566552748367210677823239979202724550207197438265568678894780355189011407855372631654327992466340839878233788743703880589090639955451203656184860212979735258137925088065144428375657083191760869551472224309803752316557878552108302481050455163432034874989849054078024486710437114529521850574669562891596857589879823958827762471032951344547875610010270507625363042223028117197556003296481737485610431098642522056711502166540527547445880906903921188251147845640093635285380659371642338320123458102109231564724770836812767816313947649511078764327995326084976449396560080924940856033270325791805011023483007384988579581652130154290568814999884688218524583751364300792795707786761819678406048918008786177056863772242584796420567039457109299346196718770196540940748343250752838631649250262989569338013729159658201653712354314753812603992106255508272625971806797901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79cff9e9aecf02107ae00aafce63ca5373076655
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexnano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f1867c9c30000040300463044022018c7326d5b8fffa3d4a0e77f4a1d2a2392eecc26dadfe10bd258d10af0ce025e0220055faa2e825d807cb43f4ce5b7f640b412a97b2857dd6661e58a31e4ed05f55b00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1867c9f70000040300483046022100f6317b524cada4e2e2c6335486ae0a8e46a091802092f2b2460207febab9c5dd022100f2bd6dd878720a2e133f29572447a208599dbeeb3fedb23251b6bc654a8060f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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