www.nt-shield.com

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:49:02:b3:6b:7d:01:8b:78:d2:51:f4:32:05:12:a8:46:62 was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

www.nt-shield.com

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:49:02:b3:6b:7d:01:8b:78:d2:51:f4:32:05:12:a8:46:62
Serial Number (int): 111956488774239828046615785357933313279586
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 0c:04:db:31:f6:c6:ec:c2:99:06:67:e0:31:84:bd:54:95:07:2a:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:30:e2:b9:8a:e7:b5:e7:ee:7d:a5:4a:5b:fe:f0:0e:da:73:95:50
Fingerprint (sha256): 3b:99:b6:f2:c9:3f:de:bb:03:ce:b5:90:c3:36:74:03:6b:a9:53:80:ad:8f:42:16:7f:8b:3d:cd:1e:4e:94:45

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on www.nt-shield.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.nt-shield.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgISAUkCs2t9AYt40lH0MgUSqEZiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMjMxNTUxMDBaFw0x NjAzMjIxNTUxMDBaMBwxGjAYBgNVBAMTEXd3dy5udC1zaGllbGQuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1u0ISzwBR8ACI7t/vJC0h8Uia1/A YlIWnuOXwpGPR9KPSgI9rthRMVCizjWAHrXkR5tmI8SfgPZdzRHbMLiFk5V6pUw8 IXtgfVKG5rbOgw7EtEFE4m83SQFDZz71/hK9Za2t6tgaYT9ORGGuzZBjFVMpaZKK ekMrSc0+3bmkgIujcCtyX/zo+glIcgj3LvHY2q9H9CmwTwgFK+AKcSRNvGFEaCPG JijWdbl6B4y5IhtOwJS3KAR9FIaS/oSTyd1UKs4B1ThIscAToyvDiq2LLGgaNkyZ xEeq/f13aDy+bKPnpROoyp7CfdRGLQvSjbi08Ag8JkJ5CrJwQFgPDuWK+NkoKlI7 s4pYsQTbNKdRybmYQcupwhfKxaKS8JirDribZsVXpeeLKgLL2XNKdkWng2d+58Dq etfXosbTmePY1+RbkJ/yd6PVfGs7DuSMRWAwoRvC8Xxs1OnT9dV5nHn33xqZ+YZL gStcQwDqHuG92SruK0aTOIzd5SLfemyperBPPeCv31QB5nfLJ3MH4PoiT/K8LdRy G0iATQF4fzgsUaI+nNxHAA0gds12mc9LTsPHv/cGsUnLFFWBxAet7Wk9tAbIqq4w iJ2G6j59psr7AJtFxDkEhydmRtnEu6Ze313on70phRFXPM+oUxyGlIxqg3Ziu7df ThGmnpttptoejoECAwEAAaOCAhIwggIOMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU DATbMfbG7MKZBmfgMYS9VJUHKqIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8vb2NzcC5p bnQteDEubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgxLmxldHNlbmNyeXB0Lm9yZy8wHAYDVR0RBBUwE4IRd3d3Lm50LXNoaWVs ZC5jb20wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHW MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYB BQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1 cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdp dGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNl bmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAjVAo0hdW ydH7G+bPk1wcC01QrQvCYwAXQKOwoXY/6IlakwaU9icx1aRV+LG0Ob5ecuNGNv1A WEUpLfUlT3v2zhn9HcNYTlyW1ASEem1f4VTn4F9kEkelw3lpgoTIBa3TVogyeZJw 12R88OfAvfthDucTTXGK5mvPr5OHxmW6sEHudmagSLOUMN/QL/ch0cfwcZZr2x0f Tw1LX3JlDzF+fy8nuC07E4O99KifQOldPW6f0QJtfMTcRpJt0rIy6SOqs9fmOQR5 rAfHAHKMSp4I/r5YmXjOIvjAgtzucWu5xWX6lW2H043y0xDUDbv4gzU2HR2Rp9D/ G/Z4sovTPio4wA== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1u0ISzwBR8ACI7t/vJC0 h8Uia1/AYlIWnuOXwpGPR9KPSgI9rthRMVCizjWAHrXkR5tmI8SfgPZdzRHbMLiF k5V6pUw8IXtgfVKG5rbOgw7EtEFE4m83SQFDZz71/hK9Za2t6tgaYT9ORGGuzZBj FVMpaZKKekMrSc0+3bmkgIujcCtyX/zo+glIcgj3LvHY2q9H9CmwTwgFK+AKcSRN vGFEaCPGJijWdbl6B4y5IhtOwJS3KAR9FIaS/oSTyd1UKs4B1ThIscAToyvDiq2L LGgaNkyZxEeq/f13aDy+bKPnpROoyp7CfdRGLQvSjbi08Ag8JkJ5CrJwQFgPDuWK +NkoKlI7s4pYsQTbNKdRybmYQcupwhfKxaKS8JirDribZsVXpeeLKgLL2XNKdkWn g2d+58DqetfXosbTmePY1+RbkJ/yd6PVfGs7DuSMRWAwoRvC8Xxs1OnT9dV5nHn3 3xqZ+YZLgStcQwDqHuG92SruK0aTOIzd5SLfemyperBPPeCv31QB5nfLJ3MH4Poi T/K8LdRyG0iATQF4fzgsUaI+nNxHAA0gds12mc9LTsPHv/cGsUnLFFWBxAet7Wk9 tAbIqq4wiJ2G6j59psr7AJtFxDkEhydmRtnEu6Ze313on70phRFXPM+oUxyGlIxq g3Ziu7dfThGmnpttptoejoECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 111956488774239828046615785357933313279586 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-23 15:51:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-22 15:51:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nt-shield.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876821204839007084658467233134404208427117749951933913423668918471690404383828261688474760110297928270222008790880666139496025048282390621140996560367387627449176412403462246655394185495911068511134836934270153653565725798627410491423050640576394308731964062877938022464698518542551463575159332500985833712517527454957994649566750499619399566907778396409480640797408005727760386866712421865012015034088740100879573871302424542332708122971976913798899379799279027323287364923768518522696942767723463534651548839917682228170343591308906487867804594852766624175540465469640429730777774789230815032114972808275619810675608704260163088442599470761229943461321219245184115352721383470397342566925550151386200699958551375908767574769643156942879359131795124283394433051173799132547369587305316023018629462861627165853803270415714768013821248119250703408202153895936692683254633866477840098571959932836916536532534827187686498855949006548293904700409390341374296160141284480723064949262935123000883227522181529216960249098291592099204036768025788920818114181588751727969815468382113081574399679457347348131939195153340671885117538430194068539268843695244076630558780056427568879624009968387556742155926543591312706902536257077480662843166337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0c04db31f6c6ecc2990667e03184bd5495072aa2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nt-shield.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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