nuvact.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:e7:cc:e6:5d:e8:06:e0:1b:b0:aa:ac:66:46:2a:d0:c2 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nuvact.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d7:e7:cc:e6:5d:e8:06:e0:1b:b0:aa:ac:66:46:2a:d0:c2
Serial Number (int): 421917968183022449690463273337565980840130
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 42:08:01:1a:97:6f:4b:f6:8b:55:75:69:c6:35:24:fb:d5:30:22:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:c5:56:f0:13:1a:17:9d:24:2f:e5:24:54:d1:b2:81:89:d3:0d:48
Fingerprint (sha256): b9:83:67:95:dc:91:c1:a4:ce:f5:d1:7e:bd:73:50:65:e6:0e:e1:57:56:d4:ed:fd:6c:88:6d:33:13:ef:3c:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nuvact.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nuvact.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nuvact.com

Other certificates including the domain name nuvact.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nuvact.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421917968183022449690463273337565980840130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 20:43:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 20:43:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nuvact.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867037630924687780518479006545939440194051626966727616308635502782921361145041894521627698484625906439617202257095443309708800680130832036177691434681255949887214192137949114405052621894615491831792419001213696052265520022371985785778626343986803766217136998354191537934867061216635469136940438767934357821570527587054417862042636964247670466944543902081632373364587436392699759302536498811680427821563770077920446545649973858573538944609261832182729901595489965131041432970086480033455351543200313736240451224078402054830654002334675446196776404257536989629393226041399505948686908174159131824690909815526350160815320195039248018900332469887543817295865957733635792773644370014191670512324782390972952991405601089692452227841658186523303363743052554712698089343599887118717971631840032922444714004491510545212949164802515086082095403058313625367311138496201604946936502034126926919895740565871243369731046156077712726420892530580286474802786524234540267881986919630420146484149112260496387819736919118051477721269007831957112868558895293867727365754903445051706780154896352127111177092856432872391979968442493691511093402118111315417299027990114118572239410328690340384314533276353840479183514875228537996483247323419063293921739587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4208011a976f4bf68b557569c63524fbd5302209
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvact.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eba843f40000004030048304602210097894272b3d6f890ce1bf2c10a1abd9ac248ac17b8ccc778193c0d2628552296022100aaf1acdcfaae56bd406903f8dc562f81a6ac95a6e541e56886740aa6ec038e4d0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eba8440c600000403004730450220187680f3c74f150f7a5233e48aa09d5b937407c036151e12d512b560c347a299022100f7a328ea5d5b65399fde69757cadab01c79cc8d871f666dac2c5ad97236cc8bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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