www.bio-nmn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:f4:c8:38:51:a4:5b:db:15:e1:e3:ff:54:be:93:bf:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bio-nmn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:f4:c8:38:51:a4:5b:db:15:e1:e3:ff:54:be:93:bf:df
Serial Number (int): 337885479218197467750793004711155097386975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:24:a7:15:38:f6:d9:ea:ea:08:1a:71:48:a1:8e:a3:3b:f7:52:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:bb:b7:65:78:34:80:ff:c8:5f:47:75:4d:02:e3:69:bc:d1:a8:b3
Fingerprint (sha256): b4:e2:81:74:ab:42:bb:c8:83:c7:93:15:3b:ec:c3:35:27:87:fc:27:c2:44:c0:39:d4:b7:10:85:28:6d:6f:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bio-nmn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bio-nmn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bio-nmn.com

Other certificates including the domain name bio-nmn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.bio-nmn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISA+D0yDhRpFvbFeHj/1S+k7/fMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjkwOTU3NTdaFw0y
MDAzMjgwOTU3NTdaMBoxGDAWBgNVBAMTD3d3dy5iaW8tbm1uLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAOVV5SnjiuNnG4tkKkGgppb6IY80olkB
NZywliT8/9Ug9q1KdTfU+seIk3I7EMdyatF57asbcMDEylBKYrJ/hV9HdA8fX9Ju
U3N78BtQTarUcfyMGpU2qTPMugcGZAvu+KIEA36dvG9u2FiJ3h9xQks9Ugq5pJ23
TektRSGw3ugnQ7WrPSk1WxQW9IiUcddh44Igr7feV0HjZageV+QHiqHu8cAekLz0
KaxeyURVUXx6D3YOjsqX7SWuJv4hrSsbS8XNaBTMaxp4t+k5NgFKzX2mdm7Ova78
ZKVs9ZMjKXusaauZa078XDYPKqdTsAbWjz+DFPmB+c54w4ATKL2/z0KLeTvhkzm4
nDMg095EN93A7eHRV5FoLVP35p0Xs+2DRAusJrzTcacdQwqCOTSSB0V91N4vbUpa
yTQJS/u+Vbwn9Yt/GF268oeAU8zgjpPmXogLhiHm2jfJ06kp5zB2Zh8WuSGEM5gh
xxOFD/I92/8JYUge5BMXj6JeTMz9ZhKDOntzpOGrj4BLeGJfZK6cxq5GdrhhZcDI
OX2Ei0O9v9S4+51YGWUvGVljdpuzw9bBAJfQ0sgZloMA8DASYN5wo6FL3mIrNb57
TkGjYe8XrW9quyj+3BkxhvQTO04Vq8IUsjPshrX0t7BKfCiRTfTGiYnPXMRqH7LZ
NOv+mLX6qd2jAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLsk
pxU49tnq6ggacUihjqM791JOMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmJpby1ubW4uY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFvUU40
gwAABAMASDBGAiEAk3vcBpknnSXC8V68kQ+HIFgiCHeiqTGDj+LlZGrfkMgCIQCs
jnhgn/qdQqhTTZdGlkmG/r6d3Vv/p7IfNBug03X6UQB2ALIeBcyLos2KIE6HZvkr
uYolIGdr2vpw57JJUy3vi5BeAAABb1FONHsAAAQDAEcwRQIgS5gvK4Gi7Lyitz7V
aIIbWy7DpU/mzuwT0MAXvTDZXRsCIQD7MUpzU2w5Q+mO/E5zpfcU5KT1qAg4TZPm
Sq3UwKlDxDANBgkqhkiG9w0BAQsFAAOCAQEAVsZotb651/l2cMTm/yR4UGb7n6wt
3oGsEHVTDhkEi/fcPAA0iNCk1TbHOlp4OkpBaIT9G8f1cgFsp/CAFH+A99aKGBpy
rQhnoKUm642Li8BWwqIjBx13pmJNis3nXlAujnt2AEwGt1zLjf746ywMBWvWQUBO
NqFDi1fYPYRuUxoBBP0AFCf5+Hg55a6m+5WkixiLaW3prlrrP9dyupbGjxFoUxQA
3Q4jk/u96wAWQPgK3BfbNt+CT/kmR1HFopJ/6h/Uwab6WhcdVmRdBxFUelB+zDLU
RwGZ2AaZmpVVa6DrJ6WlUwHhGv3ttxFc2dQ3/xcIHrpxUmnpxeasVbB2Vg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337885479218197467750793004711155097386975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 09:57:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-28 09:57:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bio-nmn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 935607326430076026724949288594877317984819542666406571379216676444700053238741243515200199413527925301795182659566865393131613354735397389747612468720037661443770109755943810445766029625885709583631473980417430227579540243055854641181487441981278918630640032263138117969466923408999319715105913663147285082721224505860705442652612153064268202703241107229145557151475509758819085016970375643927769329335840017754282129639645463062338811630258286749534223651934058818659302975775439204062421188081188747033571290075070498167187650505938760687716507123829648001382414553090550034219914386337625136660897678920975529109890516201410439178403147041410808547253370566231171789890369980459522339364003373705316855345623954980598335864449263851753748433615440099377689912706921695566578463764062995612187912430708650411530183012672276504477729417345543767237460884462848466491145307645428089928862232186756898854412294533905858747278263415423278486566672787062091695076468556554172958106134837025094666008622517676085340691030121635776211565356964293720619435201150752582344049633774851631369281531550202006572062568544907297060895774965984534521529116002386519485820843474618264547351773690481949135813549216401857427757381649097566045461923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb24a71538f6d9eaea081a7148a18ea33bf7524e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bio-nmn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f514e34830000040300483046022100937bdc0699279d25c2f15ebc910f872058220877a2a931838fe2e5646adf90c8022100ac8e78609ffa9d42a8534d9746964986febe9ddd5bffa7b21f341ba0d375fa51007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f514e347b000004030047304502204b982f2b81a2ecbca2b73ed568821b5b2ec3a54fe6ceec13d0c017bd30d95d1b022100fb314a73536c3943e98efc4e73a5f714e4a4f5a808384d93e64aadd4c0a943c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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