nuvact.com
Issued by R3
About this certificate
This digital certificate with serial number 04:d7:e7:cc:e6:5d:e8:06:e0:1b:b0:aa:ac:66:46:2a:d0:c2 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nuvact.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:d7:e7:cc:e6:5d:e8:06:e0:1b:b0:aa:ac:66:46:2a:d0:c2Serial Number (int): 421917968183022449690463273337565980840130
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 42:08:01:1a:97:6f:4b:f6:8b:55:75:69:c6:35:24:fb:d5:30:22:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7a:c5:56:f0:13:1a:17:9d:24:2f:e5:24:54:d1:b2:81:89:d3:0d:48
Fingerprint (sha256): b9:83:67:95:dc:91:c1:a4:ce:f5:d1:7e:bd:73:50:65:e6:0e:e1:57:56:d4:ed:fd:6c:88:6d:33:13:ef:3c:5c
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nuvact.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nuvact.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nuvact.com
Other certificates including the domain name nuvact.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for nuvact.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISBNfnzOZd6AbgG7CqrGZGKtDCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDcyMDQzMzJaFw0yNDA3MDYyMDQzMzFaMBUxEzARBgNVBAMT Cm51dmFjdC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDUhxuH eAESRSwUVVrP1DWRqnYRp28PkQDGTv5bh1fzIi3DP33eeHGIq/VeY5zOrneY3oSF xsU3fWvwStf/vve8S3KcVMgb4+XUWrObmm17QmPtRNeDMzcQvxhK6QiTp5qPb9J9 OgOJP46QQvl9a6n+OdHXLxyrMXucGb87Sdd36WbETtYpcJ8oDdKRR67Vh6W142P8 78e9zlI2L8HXODN1ah0Baj1tn5kSJZ8NmvFguilhHaph6uNqO3RuoZGQnGfCSqBd DQGntjbBlQ8+bKN+ZkLHMImA8RU9pM+nIzU0409BMEsQeY6YA3hQPFPvnsqI53Q7 x4+xtlEhgdYa8FhvNKHd5fFUxqJ6tWHoeMhz1fUnoqZwTz+lxVtoITqythO/G5Ml gk1OkRPmlaZn74N1gj4QgKVkjxh+Ddvrk/kOtVW9CbR5W3bb0bM0EKXwGwweKrOR R6ifBCQwKhc6mR0VlfANGggACNwd/ShBSVeETZWyGFgIsATVgEHV4SL62RymtiMD bfEXgb5emrCDx0wnIZlDET6tmwlmGRuWNVGG2tS6TiPrwkcI6fq5QMYfVbiahYWJ lD6ZjWx1sOcVSzKjA9d1y3dfJ+yyaIobuZm2xLrM5fE2Ai6ymYukAM4Gc01EKTA0 /ciiHc1WoRQaAOHA8mlmBMkOJAx4dWm0FyhDQwIDAQABo4ICDTCCAgkwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBRCCAEal29L9otVdWnGNST71TAiCTAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAVBgNVHREEDjAMggpudXZhY3QuY29tMBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcASLDja9qmRzQP5WoC +p0w6xxSActW3SyB2bu/qznYhHMAAAGOuoQ/QAAABAMASDBGAiEAl4lCcrPW+JDO G/LBChq9msJIrBe4zMd4GTwNJihVIpYCIQCq8azc+q5WvUBpA/jcVi+BpqyVpuVB 5WiGdAqm7AOOTQB2ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAAB jrqEQMYAAAQDAEcwRQIgGHaA88dPFQ96UjPkiqCdW5N0B8A2FR4S1RK1YMNHopkC IQD3oyjqXVtlOZ/eaXV8rasBx5zI2HH2ZtrCxa2XI2zIvTANBgkqhkiG9w0BAQsF AAOCAQEAFrAESmQfoCH42hVTBmn7Cqzb4qVMzRCAh1GBeeSFzvPqLe5qp4Gt2k34 Ikl5uGE3HdfwHk1/kerK3D2y6QbYuTh4v2jYSveex8RvXzaE+rIKKmzL2qA8Z4zp 7ETtVfv4HBDOfdySefQKUlfKncBKNOZoVlyvQWlHoNgGHVsgxK0RnOC5eElxEC5A 7lp2aRkgaxPsXgHZJIGMZjK3xPqwhPpOB9Pbunwn3qJHSL25M3b78NJWxVtLNFbi lkQ/uLS6Ok0/TtvOaLQFZnbU9kgaeWjcskU9n2mnHUI9GdvlNolnbdvr4MXP8t+k Hgi+UwFIHIPR0CTGPYRO0sVVOuio4g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Icbh3gBEkUsFFVaz9Q1 kap2EadvD5EAxk7+W4dX8yItwz993nhxiKv1XmOczq53mN6EhcbFN31r8ErX/773 vEtynFTIG+Pl1Fqzm5pte0Jj7UTXgzM3EL8YSukIk6eaj2/SfToDiT+OkEL5fWup /jnR1y8cqzF7nBm/O0nXd+lmxE7WKXCfKA3SkUeu1YelteNj/O/Hvc5SNi/B1zgz dWodAWo9bZ+ZEiWfDZrxYLopYR2qYerjajt0bqGRkJxnwkqgXQ0Bp7Y2wZUPPmyj fmZCxzCJgPEVPaTPpyM1NONPQTBLEHmOmAN4UDxT757KiOd0O8ePsbZRIYHWGvBY bzSh3eXxVMaierVh6HjIc9X1J6KmcE8/pcVbaCE6srYTvxuTJYJNTpET5pWmZ++D dYI+EIClZI8Yfg3b65P5DrVVvQm0eVt229GzNBCl8BsMHiqzkUeonwQkMCoXOpkd FZXwDRoIAAjcHf0oQUlXhE2VshhYCLAE1YBB1eEi+tkcprYjA23xF4G+Xpqwg8dM JyGZQxE+rZsJZhkbljVRhtrUuk4j68JHCOn6uUDGH1W4moWFiZQ+mY1sdbDnFUsy owPXdct3XyfssmiKG7mZtsS6zOXxNgIuspmLpADOBnNNRCkwNP3Ioh3NVqEUGgDh wPJpZgTJDiQMeHVptBcoQ0MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 421917968183022449690463273337565980840130 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 20:43:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 20:43:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nuvact.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867037630924687780518479006545939440194051626966727616308635502782921361145041894521627698484625906439617202257095443309708800680130832036177691434681255949887214192137949114405052621894615491831792419001213696052265520022371985785778626343986803766217136998354191537934867061216635469136940438767934357821570527587054417862042636964247670466944543902081632373364587436392699759302536498811680427821563770077920446545649973858573538944609261832182729901595489965131041432970086480033455351543200313736240451224078402054830654002334675446196776404257536989629393226041399505948686908174159131824690909815526350160815320195039248018900332469887543817295865957733635792773644370014191670512324782390972952991405601089692452227841658186523303363743052554712698089343599887118717971631840032922444714004491510545212949164802515086082095403058313625367311138496201604946936502034126926919895740565871243369731046156077712726420892530580286474802786524234540267881986919630420146484149112260496387819736919118051477721269007831957112868558895293867727365754903445051706780154896352127111177092856432872391979968442493691511093402118111315417299027990114118572239410328690340384314533276353840479183514875228537996483247323419063293921739587 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4208011a976f4bf68b557569c63524fbd5302209 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuvact.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eba843f40000004030048304602210097894272b3d6f890ce1bf2c10a1abd9ac248ac17b8ccc778193c0d2628552296022100aaf1acdcfaae56bd406903f8dc562f81a6ac95a6e541e56886740aa6ec038e4d0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eba8440c600000403004730450220187680f3c74f150f7a5233e48aa09d5b937407c036151e12d512b560c347a299022100f7a328ea5d5b65399fde69757cadab01c79cc8d871f666dac2c5ad97236cc8bd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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