www.nea.nu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:3d:18:b5:bb:9a:ab:23:fa:c0:dc:35:57:a2:7d:30:ec:ff was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nea.nu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3d:18:b5:bb:9a:ab:23:fa:c0:dc:35:57:a2:7d:30:ec:ffSerial Number (int): 282126927260152917339179482001314019339519
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 82:40:2e:f2:86:31:c8:20:ed:c8:92:da:01:5c:52:b9:62:3e:6a:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ea:19:c4:f0:b2:45:2b:fe:21:21:b5:14:a3:95:fa:ab:40:94:d2:33
Fingerprint (sha256): c4:35:9f:ea:be:2f:66:83:d9:38:36:bf:ee:49:98:13:bf:21:c1:25:da:1f:9c:34:2d:1e:0e:2c:1f:8f:d3:6c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.nea.nu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nea.nu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nea.nu
www.nea.nu
www.nea.nu
Other certificates including the domain name nea.nu
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.nea.nu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISAz0YtbuaqyP6wNw1V6J9MOz/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjIwNTIwMTlaFw0y MDAxMjAwNTIwMTlaMBUxEzARBgNVBAMTCnd3dy5uZWEubnUwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDVFJKnyuJvyA67OBL30wPi31HtOCCi5d5D9L/Q wPY9zwR55JOGgsytmnTufMnLZa/k5UsFa4i/sNRUHQZkKKHT0gdZ09bOZ1/H9aTk r1PqVw45eipCKsHvb/wItjt+SHtKa2uFpuUPH9f2aoHjaAPO3rxt8q3KCp79Muyv +n7vwNA59NHKRHXp8+J93nBR8tgiMQ76TqHPdQwInezTIUQT9oX4AMF8ngHOoH+q MBW9lhqGJy/GrDUr0zekWP0hFC8xQCb1p7kHwV2XJ/fLjEzK2WIpJ5xB2Hu6jHHp jXUNIjQN6oU6Iw2r0aSy2CnnWwFk5tPO+i7OGu7NxK/MJ3pDOAfeeGi/LvT53OuT E/skopaUegIDyrjIhpFDuJ95Edh3seFBS7YU7JCZMzAxycJZ2ZU8L9l/KXSVvw3g 2w/ZXbN79fJ8YObrk6o6+g4ZLP1o4nxKgFMN03G5H44/s/ANnbflnlQeETYAlMiD /mBq0ALG3r8Guy8DqCIgwaS71BqZmYwgnwmXIAHVLNyhh3mYkY5qpbk3d5S+7+tU wWheXxVgytxqwIjTsPHHFuFsjWkIjuMhqdrCejgV6hiAuU+HRvl5UAuPaQFcx1fY 576C0Gng+e4bUF7VV7HXZNv+PFPpGyWJuUhT52JUAQsRmcSMi+4bewI2VWsUyuef Z4Q6mwIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSCQC7yhjHI IO3IktoBXFK5Yj5qODAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMB0GA1UdEQQWMBSCBm5lYS5udYIKd3d3Lm5lYS5udTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbfIflX8A AAQDAEYwRAIgcl2NmlTCXzzdq9LcsjsM9J8NmoXduoGDZiQXutiCLYoCIAm+lU15 Spo4FfP2LiSGWC66bNZYB0UATdkIRYL3/gPYAHcAB7dcG+V9aP/xsMYdIxXHuuZX fFeUt2ruvGE6GmnTohwAAAFt8h+VowAABAMASDBGAiEA8AMnf3YID+OBS5uSciwa 6vctp/+q9AUeqoYDo2pTTxoCIQCOwxHsvHoxPKkCucdensDylpkfeYKeHalyXeeq lN/KXTANBgkqhkiG9w0BAQsFAAOCAQEANrOUHSukhwFI+t1gP69cGQc/igggC/J/ JMB8vUtDsVt+iCYzgt3Lxf+lwYoHmrkdNKiPxrd45kyaPi//TOhDptiZIu7WX9Xe NIjBBP3xDScZaWvq3ONUkaH/VtBdIfSvj17GWl4VCWTQYQIvCYG+5nT9MMlxjN9K 3vYsVViVILfKrx/RqGhMre90tmtdrUq+zx0vpy35BZO3fkTIq1sBoU2UDN8mz6BC T2u/Gh4UREoAZg5F5U+Xfi4/B8MXkhRmjJfpm48odYKD2dvbTVLTqZdFuwE6k7AV hEaogF+7bY+Devzzn75naaUSXnMqFVggv+66GqA2VTCchu5ERjLFcQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1RSSp8rib8gOuzgS99MD 4t9R7TggouXeQ/S/0MD2Pc8EeeSThoLMrZp07nzJy2Wv5OVLBWuIv7DUVB0GZCih 09IHWdPWzmdfx/Wk5K9T6lcOOXoqQirB72/8CLY7fkh7SmtrhablDx/X9mqB42gD zt68bfKtygqe/TLsr/p+78DQOfTRykR16fPifd5wUfLYIjEO+k6hz3UMCJ3s0yFE E/aF+ADBfJ4BzqB/qjAVvZYahicvxqw1K9M3pFj9IRQvMUAm9ae5B8Fdlyf3y4xM ytliKSecQdh7uoxx6Y11DSI0DeqFOiMNq9Gkstgp51sBZObTzvouzhruzcSvzCd6 QzgH3nhovy70+dzrkxP7JKKWlHoCA8q4yIaRQ7ifeRHYd7HhQUu2FOyQmTMwMcnC WdmVPC/Zfyl0lb8N4NsP2V2ze/XyfGDm65OqOvoOGSz9aOJ8SoBTDdNxuR+OP7Pw DZ235Z5UHhE2AJTIg/5gatACxt6/BrsvA6giIMGku9QamZmMIJ8JlyAB1SzcoYd5 mJGOaqW5N3eUvu/rVMFoXl8VYMrcasCI07DxxxbhbI1pCI7jIanawno4FeoYgLlP h0b5eVALj2kBXMdX2Oe+gtBp4PnuG1Be1Vex12Tb/jxT6RsliblIU+diVAELEZnE jIvuG3sCNlVrFMrnn2eEOpsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 282126927260152917339179482001314019339519 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 05:20:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 05:20:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nea.nu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869292038045021545686220446494621489494973674635944605717524160111376208985029008343191787673991334579119726899431257631441496092416493823654670157249193442441676546203826386705732360760620080471286763946339891413122209006171161263076304304641428510424005144137249834818097426241365768619522161187205598618059259818713384804634488799665501866479054001478675194266138909388543982785809313562719765180030244837372999361385990030113437790406216890585016263916295693138666422898129182149337267710186503513852346670343700421330108141127148900207872049023016063149813972750683543565611847055642635712547885536358771911891966113507913632930567026489273328976962758272996154497556262961052168735603330137070762666475895022818104654735505039228737183006962846754160564548774478025301431593679549801263958838856391390422628661184022848026689367772443259995758260057300063586217424934689742645617701933401114992948182757600183664119972018893362663340791077461581563788781435566204711940760558228273470400192918297010890157336934949579993493141919519989837162476646666313409962697679348900328391766905973441642117548367788505686667109301647248644467313873067811236607865982707492981196061189499444652513354191988449003215950138088561073902074523 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 82402ef28631c820edc892da015c52b9623e6a38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nea.nu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nea.nu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df21f957f00000403004630440220725d8d9a54c25f3cddabd2dcb23b0cf49f0d9a85ddba8183662417bad8822d8a022009be954d794a9a3815f3f62e2486582eba6cd6580745004dd9084582f7fe03d800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df21f95a30000040300483046022100f003277f76080fe3814b9b92722c1aeaf72da7ffaaf4051eaa8603a36a534f1a0221008ec311ecbc7a313ca902b9c75e9ec0f296991f79829e1da9725de7aa94dfca5d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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