www.ngsac.pe

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:5c:44:0b:f3:1b:97:70:b9:02:68:6e:9a:8e:ef:94:51 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ngsac.pe

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:5c:44:0b:f3:1b:97:70:b9:02:68:6e:9a:8e:ef:94:51
Serial Number (int): 341766138682788298252330410254535643599953
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:da:8e:f8:ac:71:db:e8:d4:6d:be:3b:88:8e:47:8d:c9:df:9a:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 69:16:92:7c:fc:59:03:8e:db:b0:83:2b:3a:75:01:06:7d:3a:f7:94
Fingerprint (sha256): be:af:30:7e:25:27:71:1e:2e:bd:49:a0:22:27:d2:a8:72:f1:9a:34:93:5e:47:af:5a:f4:1e:20:29:e8:a7:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ngsac.pe

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ngsac.pe

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ngsac.pe
www.ngsac.pe

Other certificates including the domain name ngsac.pe

(limited to 100 certificates)
account.flyachtcharters.com
app.pawsworldwide.org
app.pawsworldwide.org
app.pawsworldwide.org

app.pawsworldwide.org
www.ngsac.pe
support.optimiso.com
www.ngsac.pe



account.flyachtcharters.com
app.pawsworldwide.org
ngsac.pe
www.ngsac.pe

www.ngsac.pe
www.ngsac.pe
account.flyachtcharters.com
app.pawsworldwide.org
www.dreampbx.ngsac.pe
support.optimiso.com
help.sico.support

app.pawsworldwide.org
ngsac.pe
account.flyachtcharters.com

account.flyachtcharters.com
support.optimiso.com
app.pawsworldwide.org
www.ngsac.pe
ngsac.pe

account.flyachtcharters.com
account.flyachtcharters.com
account.flyachtcharters.com
app.pawsworldwide.org
account.flyachtcharters.com

www.ngsac.pe

app.pawsworldwide.org
support.maineit.us
account.flyachtcharters.com
app.pawsworldwide.org
support.amtechnology.ca
ngsac.pe
support.optimiso.com
ngsac.pe
www.audara.ngsac.pe
ngsac.pe
www.ngsac.pe
helpdesk.adcom8.com

www.ngsac.pe
account.flyachtcharters.com

app.pawsworldwide.org


account.flyachtcharters.com
account.flyachtcharters.com
support.monumentbiz.com
app.pawsworldwide.org
client.sv3nska.com
app.pawsworldwide.org
account.flyachtcharters.com


support.optimiso.com
account.flyachtcharters.com
app.pawsworldwide.org
www.ngsac.pe

ngsac.pe
app.pawsworldwide.org
ngsac.pe
account.flyachtcharters.com
account.flyachtcharters.com
account.flyachtcharters.com
account.flyachtcharters.com
account.flyachtcharters.com
ngsac.pe


app.pawsworldwide.org
app.pawsworldwide.org
app.pawsworldwide.org
account.flyachtcharters.com
app.pawsworldwide.org
account.flyachtcharters.com
account.flyachtcharters.com
books.ngsac.pe
www.ngsac.pe
support.optimiso.com
app.pawsworldwide.org

Certificate

The complete raw certificate details for www.ngsac.pe in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9G4u//ICSpLZTUd86i3c
sB0vm7iq/uupihPqv26D2i7YVJxpIizE02l8/tKFdgSk1fNGWquOhEdbixqEbwXj
xYNfe7q+vbqt0OlrB952fTGXeeZXCQdcqCdIuddMgh8+vZqKFf6AG8SoumLPWUCI
VMeEnKoLKiUWD/JLPnZsaS0cO1xSRTEwmG3vC3NuVPV0nK5r7EOLRI0JqlLr4OBT
dneAv3YwilfYudoyRw/a9EY35FYZU4B35jMECSKqlVmIKbfCuhCgVl3M8F0UaWNn
MRKsydjLxJTUu1I+7jaBZHgQxnSDRD3ZzQ5FTVkzUtDavujTW5FPZsRIU3lQfxgu
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341766138682788298252330410254535643599953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 04:48:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-23 04:48:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ngsac.pe'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30856479966424533155953952065809309923979331241389151523854951045669068746450734847569150120267136787122310133260075900394009772889328713118418648275839282925487404423723385915975264910066082929180298922103355716323994299925419683657784950206382087717269028539100669360168891704532840336638872089062508879213590083575450166259146327598533643100838080891567574176995175960707397484289929786473467230435211931482894483274740804316511439486625484839702714176438719755398902373138345594852231887008556161667212792335077809179859556714953250417443532883725526860223634216869663064025708383377171915538933254734879296859739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99da8ef8ac71dbe8d46dbe3b888e478dc9df9ac2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngsac.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngsac.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001660a1f59de0000040300473045022100bc5e7a252874494e7c10fd4735e25819034ba837321079ba88e147067bd5181f022053c09006c0ecfcd07f0fabb1d25de55520434eb59f7f27cb199c5519a2da24ca007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001660a1f5a2700000403004730450221009f6ed79de4b1b9a8ecbe48685cb2bb9e811b77370c12b2650237c390f475ae5802204b383b23418b3bdb25057b9e60ac19ea5c832d015f21d490b0a21098e2b2069c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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