nico-lab.com
Issued by R3
About this certificate
This digital certificate with serial number 03:9a:dd:51:5c:91:78:07:56:99:e4:f5:38:34:98:95:e7:d9 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nico-lab.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:9a:dd:51:5c:91:78:07:56:99:e4:f5:38:34:98:95:e7:d9Serial Number (int): 314034524141726185215324714572152642594777
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9b:ac:f0:97:62:52:2d:56:d0:60:02:57:50:3b:08:1b:02:c9:72:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0a:c7:a0:20:32:84:a9:52:21:cd:f5:86:74:cc:76:19:58:dd:21:d3
Fingerprint (sha256): 92:a2:2e:ba:3d:11:b2:f5:64:0f:bc:9e:bd:35:17:df:97:eb:60:f2:c3:83:be:f3:87:34:d6:d2:be:65:70:f8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nico-lab.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nico-lab.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nico-lab.com
nicolab.com
www.nico-lab.com
www.nicolab.com
nicolab.com
www.nico-lab.com
www.nicolab.com
Other certificates including the domain name nico-lab.com
(limited to 100 certificates)
nico-lab.com
www.lingosong.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
git.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
www.timber.so
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
api.nico-lab.com
nico-lab.com
www.delius-company.com
api-tst.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
preview.strokeviewer.nico-lab.com
preview.strokeviewer.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
www.lingosong.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
git.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
www.timber.so
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
api.nico-lab.com
nico-lab.com
www.delius-company.com
api-tst.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
preview.strokeviewer.nico-lab.com
preview.strokeviewer.nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
nico-lab.com
Certificate
The complete raw certificate details for nico-lab.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFjCCBP6gAwIBAgISA5rdUVyReAdWmeT1ODSYlefZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTMyMTQyNDRaFw0yNDA3MTIyMTQyNDNaMBcxFTATBgNVBAMT DG5pY28tbGFiLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMsI j68EManXxZFwhj+KQObwJonDcJiP7R2ycZTDT770jrLi+d4DD2W8s0abVpG9/UNG O8Lpt9+MC5VTcvn+ItQMi1Nk6dq1UGD3x9wlQY+gYB2rdA8Bs5yml0tCs5qt7LXP XcQ9yOfrm1Pqag9zyVz1nin1j9lLBJAt11VQw1sb6O0/L9kFqua1AuqMZgJaCc8D 9YZts9MALBWP+8BFje+MjHtpr/2SCyzbP9mjFY2YMgIBqE98U966YIzotOt3hOkk ChlZyFwx4PCTNN7sJiRszQrf6sd8VdF0RtsdoqJtGJ9VHdVQxpvC4gugqJzFvWx/ pJRb3fAM7Cjxk4BqebIdO47AuKHGb5UEgDdGR3Vv+ytBi8ALjwrEqdzQTBMKyRH3 cUzvoyOWAeyhh8bZIjEaiTYwUUyIV5NmMUDlWjS3Txew5X5tdjUybPwFbdNwtgsW V8tuNdThwUGF0rDRoZbbqTAHjua/23Ll9HUI+oNu+q6yVH8Fqd4kfu5PcBYqJUkg Pg8hiRmeU2lK6g1B6FMF9TCHw5+7X79BTUj1DLjBM/Jhbit6sTYZYs6i45eoViPn qPDn8yGpWE6DBN7y1vq3C408XwjGZ12uehw0hQ/+4XG+kDEMlFCl8QxnzJ9xRhz3 4uR9FEpNsNsqGI9KJ3MuzSpolRhsMn2uciGiiUM/AgMBAAGjggI/MIICOzAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFJus8JdiUi1W0GACV1A7CBsCyXIRMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMEcGA1UdEQRAMD6CDG5pY28tbGFiLmNvbYILbmljb2xh Yi5jb22CEHd3dy5uaWNvLWxhYi5jb22CD3d3dy5uaWNvbGFiLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2ADtTd3U+LbmA ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjtmgmNIAAAQDAEcwRQIhANKL1zpv Hxt/6KiyZsroh5hBCmCR+ythFT7LdMNTzRTpAiAjmzUHvtXMiNZ0fOZ++BFX3YJO NhjaOYLQfFn2ggjCuQB3ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTK AAABjtmgmQAAAAQDAEgwRgIhAIqCmXDEdaFSQ6AfMilpXLpsTq4lU+jKxz0Rp+Fh 9G5NAiEAiBFHyFE+p2nWVbS99UH14AFriPuvnLD0/bV57XEKlO4wDQYJKoZIhvcN AQELBQADggEBAAl5i5sH7FXsTQ2zxnRNW6nNPDRl94c2zozPcbFXmmO1IR/avugN /Bfg8bf5fyMKcnGe8R88LzsVs1jS/Q78awdPutK/p3lT54XzE1l5zdXBNBHkD+Uc pibxwlEsRJQUA+BDG3Fny0jAkh2CJVIMTZjDtQhDNb90YS0oYyuh6gx+HwgdIagQ TnAAzX8HGPxBNlgiizHOlQhzaQfrAP/Txs9DGwm7fBuOb2foUzerk2mzhxtWo4nZ We11bBuNVwQEG4Md+RErf0VDj5jW38U4k4vgnIDyXeqR5Zvk+NVfW1++9g1qtdat xQPSBxTLBNWJ4udPcGCV7I5xHEwtu/DfR/g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAywiPrwQxqdfFkXCGP4pA 5vAmicNwmI/tHbJxlMNPvvSOsuL53gMPZbyzRptWkb39Q0Y7wum334wLlVNy+f4i 1AyLU2Tp2rVQYPfH3CVBj6BgHat0DwGznKaXS0Kzmq3stc9dxD3I5+ubU+pqD3PJ XPWeKfWP2UsEkC3XVVDDWxvo7T8v2QWq5rUC6oxmAloJzwP1hm2z0wAsFY/7wEWN 74yMe2mv/ZILLNs/2aMVjZgyAgGoT3xT3rpgjOi063eE6SQKGVnIXDHg8JM03uwm JGzNCt/qx3xV0XRG2x2iom0Yn1Ud1VDGm8LiC6ConMW9bH+klFvd8AzsKPGTgGp5 sh07jsC4ocZvlQSAN0ZHdW/7K0GLwAuPCsSp3NBMEwrJEfdxTO+jI5YB7KGHxtki MRqJNjBRTIhXk2YxQOVaNLdPF7Dlfm12NTJs/AVt03C2CxZXy2411OHBQYXSsNGh ltupMAeO5r/bcuX0dQj6g276rrJUfwWp3iR+7k9wFiolSSA+DyGJGZ5TaUrqDUHo UwX1MIfDn7tfv0FNSPUMuMEz8mFuK3qxNhlizqLjl6hWI+eo8OfzIalYToME3vLW +rcLjTxfCMZnXa56HDSFD/7hcb6QMQyUUKXxDGfMn3FGHPfi5H0USk2w2yoYj0on cy7NKmiVGGwyfa5yIaKJQz8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314034524141726185215324714572152642594777 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 21:42:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 21:42:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nico-lab.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828304179054443463916926761910663325160600854969015813679857312333576912292801528113927613666685273949815290898174675463091665153797152943325348288299144129815634292947745014807336151698836451959404124881417689367395786137572251593648575646515195510245691740825009651640380807225479053324131031557489827833733245375838545365403939592091040144617026653638990354982743480593398142365235512105232020838090968033188912772752831744754805012150511478841956636318955388405122135110528393272971840647830933292073473693223511282827615550275748592413836379110460420584419938836539766572607450210505517560146335976256042760036862913263814383429095331420778460889752026276790042519745560525552774921373395491511523949315925110720253397579049875575504524331565490475908244127611986896167310191832016606947118634208761339770042156111203815932217996123048600657755771537861663779206771391293892313396083997052681717692472266336699902698969603715240608388240982384509699317273128427811436614814484782021521308191040328350783610821950661861247316586016487351164055289553271620389658487457711975559715665081921190772050959645593968335279838848465959370302006367679915650269217041072264667211195137530463642126628797121755667493839480318076717596492607 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9bacf09762522d56d0600257503b081b02c97211 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nico-lab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicolab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nico-lab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicolab.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ed9a098d20000040300473045022100d28bd73a6f1f1b7fe8a8b266cae88798410a6091fb2b61153ecb74c353cd14e90220239b3507bed5cc88d6747ce67ef81157dd824e3618da3982d07c59f68208c2b90077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ed9a0990000000403004830460221008a829970c475a15243a01f3229695cba6c4eae2553e8cac73d11a7e161f46e4d022100881147c8513ea769d655b4bdf541f5e0016b88fbaf9cb0f4fdb579ed710a94ee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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