nervo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5a:29:51:fc:39:0b:ce:04:de:8c:f5:ad:7e:e6:59:e9:43 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nervo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:29:51:fc:39:0b:ce:04:de:8c:f5:ad:7e:e6:59:e9:43
Serial Number (int): 379129480789485049950381969556706487298371
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:00:68:5f:0a:6a:7f:fb:77:c2:9e:2e:62:4e:df:3a:6f:db:80:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b7:57:1a:14:4e:5b:76:cf:fa:a8:a4:03:07:d2:83:2a:d8:c1:ab:55
Fingerprint (sha256): bf:6c:7b:00:e9:b8:6a:a9:71:e2:53:30:83:81:e1:40:f3:8a:ca:ea:f2:03:27:6a:f8:b8:d5:35:5f:24:c9:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nervo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nervo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nervo.com

Other certificates including the domain name nervo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for nervo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379129480789485049950381969556706487298371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 04:18:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 04:18:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nervo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 650373530149821470698311237003951348062976988544556640328075192975437109129756760252550212261306071750293415948938119899079877841359495892119481872474781882276701446623821641428207761875447465796168176716725203881706425635559443193730168974269195845525030151678848584381445925631499570636150871124971291312643324535870291637025829838192059515603066304329216194317725345724307913800279925745551913829265535070374038420689209910930697310118140220719432841283600313247467323108321952360841302891038856783431135316907668394747225595395671432386729080404507235292338781273979652921665215643591130047893569800603916483102543817811491005511238875402316810287171833595166265644834043560391250556490497179467493657067571039747731023992879207921794854340083256082623897202632793048636044204312421221672103073964532031139664122204225327446183459272515606219967215548949732866926744313058496011303890878845642237566417272911098642523405574707372596582620452850342642168909258970610839238345951658919250503677700386955419881059617987980775681159403895216999740241005559606852629472160709799805718771290096856766615321970033804459056241821879264122760284087521305017770952182800177845956962747259310933232578342639604133634940296118832527069740863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5900685f0a6a7ffb77c29e2e624edf3a6fdb8070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nervo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7e58be4a00000403004830460221009e8a44d33d5ce36c37517febab94d2eb70f629e203f5fb481f58fd07a11d83fa022100ba627eec0dbb5fe55ebe15dfd1b05cf0e187ba9642ad9db7a1a9f885832dee21007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7e58be4c0000040300473045022100f50f3c99e2a2eac66244204bf82647ee1e5ac2e4ef0f811a56c2aaa6de673b6002200909c65645dabcfa35c7fd8659304dc2562621c9be3e9b0d1eb0a55ca3583539
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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