2016.nscloud.eu

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 01:be:2f:af:ce:f2:18:56:0c:a5:f8:0f:3d:9e:e5:48:62:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2016.nscloud.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:be:2f:af:ce:f2:18:56:0c:a5:f8:0f:3d:9e:e5:48:62:15
Serial Number (int): 151829322211847814693808807993585768620565
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 3d:56:62:98:d9:f6:4c:27:79:bd:ab:8c:28:49:06:e0:71:a4:00:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:a7:4a:d3:3d:25:4a:01:1f:07:d7:8e:e5:9c:8a:d4:67:98:1a:20
Fingerprint (sha256): b4:56:63:73:19:11:ad:5a:73:a4:ee:52:5d:b9:7d:93:e3:6e:f9:3a:d2:5c:3c:37:44:44:67:c3:00:73:90:2a

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate 2016.nscloud.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2016.nscloud.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2016.nscloud.eu

Other certificates including the domain name nscloud.eu

(limited to 100 certificates)
lionel.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
nscloud.eu
nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
whoracle.nscloud.eu
lionel.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
nscloud.eu
2016.nscloud.eu
2016.nscloud.eu
nscloud.eu
nscloud.eu
lionel.nscloud.eu
lionel.nscloud.eu
nscloud.eu

Certificate

The complete raw certificate details for 2016.nscloud.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151829322211847814693808807993585768620565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-20 18:56:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-19 18:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2016.nscloud.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 960918094309143008164144370837857701376179276865238732528029866722696251144961098018756738471369678669049695547931139496932446597524704585147945538930560317560991263137791052932767326782919372011071486248537780140010194740027353905342521318950610269743798735591044508083315475277054660645015357889068588655684324309840314652066683854654821180048610064183323388910653469621535778692213422899775532369849147567739776109933355214699295612201754011467965417972546679789997341468602655217441213922382736416547614776991083468953143569766910841414009541596512788024406047176876368799709853867854395867555124788037674504191277942418393673086424062838686375729055102728432999424867161036046656056031329001469913733968408307319621113249579531935103851529792604979908584077955949597689245252675833021131751791888009861576238905306771300224906718246098769529742051936797291833235096476878635054566406413225590636875545878755527600970734470687759118667224024999908476050557423990891120643356601499361752244648318506735123765376132006765877185390819950990073938495174425495423578819502797131529535577144903012259199297703985951122397671312111786014034302685569903459989197621472462065904955379857354401364988922763592088876207450444208581805116629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d566298d9f64c2779bdab8c284906e071a40054
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2016.nscloud.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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