legacy.niec.so

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:70:2c:05:54:41:d1:b4:e8:8c:aa:f2:44:b6:39:c7:bf:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.niec.so

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:2c:05:54:41:d1:b4:e8:8c:aa:f2:44:b6:39:c7:bf:5c
Serial Number (int): 386619282524422061808991039692944343285596
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:6c:ab:a4:86:d4:d6:5d:fe:66:22:3b:fe:36:06:c6:5f:82:77:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:23:42:9c:50:43:c9:9b:6f:79:97:e5:1a:86:d9:47:07:85:03:8f
Fingerprint (sha256): 8f:c8:c3:a0:fe:e8:aa:44:83:e3:ab:f1:7e:7a:2a:e0:bc:cf:e6:70:46:a8:5f:a6:7b:8d:52:ef:b5:52:25:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy.niec.so

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.niec.so

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legacy.niec.so

Other certificates including the domain name niec.so

(limited to 100 certificates)
sni70241.cloudflaressl.com
operation.niec.so
navdaanghari.enrichapps.com
wellifesales.hooliitracker.com
portal.printium.uk
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
kirsal.unfpahumtr.org
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
autodiscover.niec.so
apply.goldenretrievers.org
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
demo.gkdatalink.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
content.thependits.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
niec.so
app.testp.co.il
niec.so
mychurch.dupletech.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
academy.unete.org
niec.so
sni70241.cloudflaressl.com
chequeapruebas.scalatech.co
portal.printium.uk
sni70241.cloudflaressl.com
hs.reelanalytics.net
sni70241.cloudflaressl.com
apply.goldenretrievers.org
lyres.mccannbespoke.co.uk
niec.so
sni70241.cloudflaressl.com
guardmetrics.hyperionportal.com
sni70241.cloudflaressl.com
niec.so
niec.so
sni70241.cloudflaressl.com
webdisk.niec.so
app.blueskyaccounting.us
sni70241.cloudflaressl.com
portal.printium.uk
platform.sourcehubai.com
sni70241.cloudflaressl.com
niec.so
guardmetrics.hyperionportal.com
sni70241.cloudflaressl.com
portal.printium.uk
apply.goldenretrievers.org
sni70241.cloudflaressl.com
legacy.niec.so
portal.printium.uk
app-pared.rednbluepty.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
saudeservice.contabio.com.br
apply.goldenretrievers.org
legacy.niec.so
sni70241.cloudflaressl.com
19972.softpme.cl
sni70241.cloudflaressl.com
niec.so
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
navkaunlaran.enrichapps.com
niec.so
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
app.exdec.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
niec.so
cye.envisagera.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
portal.printium.uk
legacy.niec.so
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com
sni70241.cloudflaressl.com

Certificate

The complete raw certificate details for legacy.niec.so in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386619282524422061808991039692944343285596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 11:23:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 11:23:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.niec.so'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840175640602346457390442447796024740537798713777017123955594044952381744393340941662821306143017438908867131354232821428619786999086273703149246965868524044003950011552826931628120410128955867529893818055650666176722257844131036673208701608712657061635729190602987291199942384003799256425475667454193357193591924158098063336971427705429276564672159186209096761157144786631639301757234658495845657706382563732284380939656056659976074690412971694168751892164993294164908365728456855713654111201784320484637479393728055424685852044746998504736343755164407219349829512995700992402471479611818481797853384356336869460816312268131008873163907888850039205975165966871224107752722510334979129328594704484703942602897827479884272675692539005632060151828469395076215853156683064151370079040976253982449127364221140908632218847271579546459403602687311112949041380714024447610131709081529142415291158299795246729231650576530818199097077077790513569066027145359645584356935979425713746939660729346542721608038812981416265858271989469400461628993526557709731431148332434220851004348038185061425912837687973376376081645233125734174119888214073527131302475973319303645557096591726186617839605488380464335168679550630952944772746026530837977696208023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f6caba486d4d65dfe66223bfe3606c65f827785
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.niec.so'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a5ebfd58300000403004730450220160d0ac3b8b4559965637fbb4e3074f7e9ec46614f44a478adb83b3fed2e08f8022100d5458bf4e611606e999bae8b5cafa3bf9ed09048786b4dbbb125e25df79bdd2a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a5ebfd57b00000403004730450221009a1a6ac24452c971608d3e3a37688c4dbcf21dd9772d10d171adae602b11958202203867813d5f3b1ef78f359f4a7a136c1113c077c6ec6e0b63cead5d007f3fd05b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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