nanokovrik.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:a7:89:20:96:73:f2:7f:55:11:81:f7:6a:1a:9c:3e:21 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nanokovrik.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:a7:89:20:96:73:f2:7f:55:11:81:f7:6a:1a:9c:3e:21
Serial Number (int): 332678565562679794657357719678524705226273
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:80:1b:9a:51:55:38:50:df:5b:3c:ac:7d:0e:87:9b:5d:2c:e9:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:34:0d:9f:8f:14:af:87:dd:df:e6:f7:2a:35:a7:8b:e6:f4:15:89
Fingerprint (sha256): 8e:41:e3:2a:af:0a:75:00:0d:3b:f1:6a:e9:13:a5:a1:be:5e:ad:93:0e:69:8f:39:0f:bd:76:32:04:4a:d4:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nanokovrik.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nanokovrik.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nanokovrik.ru
www.nanokovrik.ru

Other certificates including the domain name nanokovrik.ru

(limited to 100 certificates)

Certificate

The complete raw certificate details for nanokovrik.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApKTUle1e5wlCQ3Kdukzx
2FbRB/+/N+OvJEnl4dzbFX5yEzIxCCsuERQ14K2OHOsA4xqWX6YaC0ilq4VE5zRZ
liIS8048FulyBUbwD+xSox75b3yVvN5jvZ6AFwBaQUF7Q0lryy1/KtGDJGCgOoSA
pKAW4LV0lTHgeuxPksmvEiW4OhmKjHTwaMaoVj03sYNvhJ/fJZKc3xFCXA73Ym6B
KR5yQY5rAjDf0rVq18rhap+nlhccTIdW9FTn6hVlc/udU/qbmzXNzC4xzjlTcpoj
Fkogb4NwSEWgz1Rr+2LbysP2/FhGwcVu6hWnh8KwOIbMVZnsRyikkG6FnIQsmanX
fTRpJgCvkhyvQRyPNshT8ZJWuoLEuIyuWzKzwM7w1R/fC41rqmpBSIj5lftVCPuv
8Ki0Qkspcfs/i71PIWYTkyQLgZI7KZwyMSB8KfYOziMZlAezr+yyKbglCKNXvBgx
1VLJJd+T7K7NSGB8KTyKh7h/cAIaVuCAfW/1UGWAt2XsRs/f+ZTO7bukHptXnt86
U9z2sefOKzMdMZ4o/s24Dl/SDPuUuhvwYYA5GBySpp9BDVMe4x7Szb91fvmxbUnc
3TAKyMAaJhXGGlxIlX+VhVDR23NXK7I+TVxBKowwVH5jMgcqCsXF1pZy6apf3ubT
gVE3sI3S7u/DRjLCr1EmZdECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332678565562679794657357719678524705226273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-22 04:49:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-20 04:49:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nanokovrik.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671688382684337419428742652818289662827970453832185018500493456116063339518784774745486547300825029963307689407481172606770535973362022117676875529662870093525344696544931528368385996495828878534093879596929067861779503630594434764676234296978338763823369122490512260267662840730717969584880558879614477070945400076660954486304619359984701414284065481753243836540114044157210815645831413381990600592773735859247160341012248954744923595908416564269377429318338573218349123281123362043080098256410200517720570342881288587836382227040779118024870309772525216559521231485896408012150217314785774874219520400213472749419403388584660766223007826412786772842100236406441306496181716712375728168306011080126551374295509042999441707359931059034898502036226487042765374791808328238966369454135779788568562674205292542424426929325496283100912358952953762282530259939980297485652202585015321289328953499188088636746645802085267536371204980205660464203151243319483163485880785943793632652971343270310300033349758137134531129934020543514278755462048862172379957933971132421756977382976176660005846722533979987398580816684604071947755968750292063629958734725075512686084945536250141694673624218042602100263184595544999066766085491946576290754487761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf801b9a51553850df5b3cac7d0e879b5d2ce9be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanokovrik.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanokovrik.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.24
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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