nutrita.app

Issued by R3

About this certificate

This digital certificate with serial number 04:53:0c:31:5f:e9:bf:d2:a3:cd:91:2d:60:c1:0d:71:7d:27 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nutrita.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:53:0c:31:5f:e9:bf:d2:a3:cd:91:2d:60:c1:0d:71:7d:27
Serial Number (int): 376708787285322806748552391387302990019879
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:d9:64:77:05:20:74:48:dc:f8:5d:e3:cb:88:ce:75:da:c2:0c:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:02:07:6c:a2:a1:69:08:32:68:68:69:ed:05:e5:e6:d1:85:0d:f0
Fingerprint (sha256): a2:20:bd:5f:d6:7e:53:d4:b5:61:24:c0:d6:35:6f:c4:3c:84:b8:70:a3:f8:ac:47:3f:2e:f0:cc:16:40:14:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nutrita.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nutrita.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nutrita.app
www.nutrita.app

Other certificates including the domain name nutrita.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for nutrita.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAruCBEhHl+GE2eUoFPR3o
f0FhKefFAaKoKqguGXnqW9YVKRUe2ZVDHEsQmnzwNxE/LYN6lDss2eZlNAxMSykK
CHrj7uhkABsavR2dUddTXwbxmf/3UR4ZhEVXA62aiB9fdxutUhMj3q+0O5E9gNe9
M6Eh09gVjmkjRZK2OZG+gQshTAdlkHwxNjS4sKJz5SD/Yq12XlQo1Ce3QWV5ZKsh
7XBvbM6MSh82bWgNvfP0cV7VzGYqMO/Po9JVHMZZ0p8nkpzBQbnVKN3LipWFODXQ
HUAiraGI1zSEMZzL8R/K/wcMSUiYWiBJ5XAEkAdeFzeIZoP+/qv9zDjM79F2WrUl
bQV9ES6EH2SZnEsGKkm/BrNbV354/KM5z6O5fwXiih/TicwRuxwbJ1nbtsLvsgKf
DgH/Fr4uXiwFFXLT4RdoLeCOG9+EipfDsPVYypi5IyGhBFB+y3w+a0JzKOUafzhQ
YlLScB/FqEgDdb6qi7dSqtdUipFLPzDhBZeo+Hvy2+R42uSMVMBamMTXUn8FE2g4
GBp8f8eLDrU8Rg9bbyOsEfjKHgQ59zrfxX9VLNb5qccyVvtjLoEPxhDtRt3b/sck
NH68hZrR7idCtBmuOvvHMo6MXpGj3cxDrjzoHUJxaYuBqUKO035mMrlXqq0a7m7a
nUAlMKwWQMQtyOmgDnu9IS0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376708787285322806748552391387302990019879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 22:04:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 22:04:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nutrita.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713435791094252589574917444546849856410299643215671939010697607773270907718990175468744212131234263157100217125295061345566327108098298936449971287565466223301631455847501805030349363125851902189927699762117547496784952323037982396160124465732551530027097742667072500568121032105387715196513047131551853672011247053079157774401361754741920116975522680270731996515790778661395959581370096577844029641819314500320438839663095711278569142880185133855675005022860346810846528532987817152834143101736106808905860076173942378104697395007485721122558710551509745756354361559701161984728942077408499618400700582732691949789430446892889114168891632187227718333831094410240378245913061649544412710556429814196044800806729826573991194088714746197528132913245839603822140706211547268624068706762024654628391560069390328131291593478616278534199916293529539675185380215286027866468605468903499739082801035633715277872107089034379339476481635426967562539935281380727311775384641454812775044711586706709487461423245846859696262257223808451973576364970669529372580575866125127890523075478058912113371613132442567733487472790939679511246264836476455146134482814765347000260827051997918541094812307750333826126363624036128326705418804159831330046943533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aed9647705207448dcf85de3cb88ce75dac20c66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrita.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutrita.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb6542f7a0000040300473045022076f7edff0ce7ab8db720fd609c11359012826ff1d00a2b73abc46d53778bfb0302210095f4ef00195128fd8c191d210b08412367b6df8fe67b19fbba0da903d3cf5d120076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bb6542f760000040300473045022100be947fc0e0bd15dae5f1bd92fc88a2be7c992ed78c8b5d6b93fc80f8179e60b502203eef848b056f4781792ac543078eb1b8b7a56f5745d50576ff99dff1216eeda7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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