www.nvnco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:30:ed:18:0c:60:29:b7:41:f7:84:82:db:a2:9b:30:8a:52 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nvnco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:30:ed:18:0c:60:29:b7:41:f7:84:82:db:a2:9b:30:8a:52Serial Number (int): 277985563308619145359391768399209737259602
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ab:e4:9c:25:e2:9b:76:3e:d7:c4:bf:a8:4d:f7:00:ef:c8:76:78:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e1:63:3b:17:07:c3:33:ea:a8:79:a7:79:86:29:2c:6a:70:11:b0:a2
Fingerprint (sha256): c3:13:65:5f:ec:1e:90:25:01:04:68:16:be:42:13:e5:60:fc:9e:5f:56:8a:96:6a:18:ab:4c:37:6f:59:56:a3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.nvnco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nvnco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.nvnco.com
Other certificates including the domain name nvnco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.nvnco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAzDtGAxgKbdB94SC26KbMIpSMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTIwMDAxMTFaFw0y MDAzMTEwMDAxMTFaMBgxFjAUBgNVBAMTDXd3dy5udm5jby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCrPfFHNp1qrbGW/L+iVMrvDXjc2I2yH21a 7XpV+axyfjz52clVaCDM7oLmVmgi4HrgKApd4pyl4ax3Nx+aela+NDS25tW39Sfw A7LuDXPCRMiRZbtPIqEwR5sWQw/BWnD7EEZ3Ic7aY08Dq9GjUHQ21zg5yIW0wBVT 7/yloVdVr+ObtNtvy8in7SwAdYsETt6lUPGLR3ZU2z/sXHHHfOfbe4wV09exNKgX iCVVBCgzos1mxcWwjeLGG/Nk7ydkGSnJyF2S5KxHRAVsVi3W5r82w5e4oWr45p1F MJyd1QHwQ/0C0rqewLp5iEzkgUzBZaHOaO9Nua8aRL3gpHv9n6jLHAv1KT5WVGEf QUZsXPazr8SIiM/wFs8pk2DVP4mNIwvaqBjLJygxinfmVVIOFzAneb+3hhywnNGE jkiDGIBoVuuJlw6q6w8tHWhwUqlL4oniLFql20/bJklsgbjHmA3RgZObndU8emh4 nWu69KPHmUuzuRENbevxVTPsKnHYNnlg5TcIf+hJCdNyWWJFF3WyXsrPqCL1LwDE 1vgUcIWNS2MrQIpNF/VOzJ6Cglw6KxBSHFSOBYf6+67/v6MRMCTzUqB2OCekj8Ei KMT5xzwObDBkYyHf5f8wzlev3ZO2PtjJXpJBDSB+ltwjrIBHgNRhqgEUwFyhQMoI 4zfLdU97NQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSr5Jwl 4pt2PtfEv6hN9wDvyHZ4JTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5udm5jby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW73n76BAAAE AwBHMEUCIGtTqpXFcF/i4INZlHSfBnkk9ZMXiSBLheCWcAGdaSh6AiEA7tS6QUGK 5uoZKEV8CPNSfwm+lgYsQ0cvd8MKPnDZdm0AdgBvU3asMfAxGdiZAKRRFf93FRwR 2QLBACkGjbIImjfZEwAAAW73n76nAAAEAwBHMEUCIQDlz/Ud3mUqB0fyp2gZ2gyC ugRUT71xsUCX8pdRMv8LrgIge2mxE0B1K5O4An0fAM29fCS0Rhb/6YXKctcDoLD3 678wDQYJKoZIhvcNAQELBQADggEBAI6muKKRM+msQyoijJfoFJmxVLfeKJHiCPCT GtVbudWXmippt9mvS75pDPvMV67bmweEObM4BQJubOu9L2B1KG/qJL+s6IqfJpjt c6UfefamP4Z+ZvbhOmYdoLMYWQulJDmIuwrgESstFfmG+E2ufhfF1FDAZ3aT1L9z rK3J6Mo1buXw8LqpzFtjxBLLx6dHIGeVy9wJAgUEFIBF8Zmw/UgWFcK22EMWx4Qw L7OGpv4X/vIpGcEjm3YINldEnLiipUfttVhq2LopU5JZpfbc7xvLzm4xnTuEeZLI kjljytipiDyok/XRpFykmq+rfsSgw/Ys7TVqAxC6uyaqOBr4URo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqz3xRzadaq2xlvy/olTK 7w143NiNsh9tWu16Vfmscn48+dnJVWggzO6C5lZoIuB64CgKXeKcpeGsdzcfmnpW vjQ0tubVt/Un8AOy7g1zwkTIkWW7TyKhMEebFkMPwVpw+xBGdyHO2mNPA6vRo1B0 Ntc4OciFtMAVU+/8paFXVa/jm7Tbb8vIp+0sAHWLBE7epVDxi0d2VNs/7Fxxx3zn 23uMFdPXsTSoF4glVQQoM6LNZsXFsI3ixhvzZO8nZBkpychdkuSsR0QFbFYt1ua/ NsOXuKFq+OadRTCcndUB8EP9AtK6nsC6eYhM5IFMwWWhzmjvTbmvGkS94KR7/Z+o yxwL9Sk+VlRhH0FGbFz2s6/EiIjP8BbPKZNg1T+JjSML2qgYyycoMYp35lVSDhcw J3m/t4YcsJzRhI5IgxiAaFbriZcOqusPLR1ocFKpS+KJ4ixapdtP2yZJbIG4x5gN 0YGTm53VPHpoeJ1ruvSjx5lLs7kRDW3r8VUz7Cpx2DZ5YOU3CH/oSQnTclliRRd1 sl7Kz6gi9S8AxNb4FHCFjUtjK0CKTRf1TsyegoJcOisQUhxUjgWH+vuu/7+jETAk 81KgdjgnpI/BIijE+cc8DmwwZGMh3+X/MM5Xr92Ttj7YyV6SQQ0gfpbcI6yAR4DU YaoBFMBcoUDKCOM3y3VPezUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277985563308619145359391768399209737259602 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 00:01:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 00:01:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nvnco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698606257989385150978095437366213584907650819361246429617120071889695080516320372998915932760189679546135865996714711853848332463095524037013344169735233130764389560040990793672865493695715463013603132641676309262863363686962654006347838819517940710865557937775022991882839434251190979484265907088729726237123612765401036336827650612820394521574026841013562946163948269679482996370178914733034801154621423732447263057672774296097862162441503581185096223950163747107059756969567015787785893218532962704057280694718602414635289724164384595981514382186883659984897475292600111820725962440148843968958792734809250647946072035096722466640504940180206920666286307962744033581093282023763470179891186411323283219260167388533963569657370141442093118766939208500798230292241624978960634531711702506586769215524086154146445448554119985297088480208944766991809306532394271834716475078938080667576868780657329654951812063847319263135151047577317309201611030237849772341640800459291580945771346959019966195450230685673064430593896603842540808473483041512450188379518038089790816356001683982771273176780396148521851878621098554086348562127023073621679540313927848589716488880634551702854770912979770423856056905013885318176341439336129765879806773 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) abe49c25e29b763ed7c4bfa84df700efc8767825 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nvnco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef79fbe81000004030047304502206b53aa95c5705fe2e0835994749f067924f5931789204b85e09670019d69287a022100eed4ba41418ae6ea1928457c08f3527f09be96062c43472f77c30a3e70d9766d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef79fbea70000040300473045022100e5cff51dde652a0747f2a76819da0c82ba04544fbd71b14097f2975132ff0bae02207b69b11340752b93b8027d1f00cdbd7c24b44616ffe985ca72d703a0b0f7ebbf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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