www.nea.nu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:18:b5:bb:9a:ab:23:fa:c0:dc:35:57:a2:7d:30:ec:ff was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nea.nu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:18:b5:bb:9a:ab:23:fa:c0:dc:35:57:a2:7d:30:ec:ff
Serial Number (int): 282126927260152917339179482001314019339519
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:40:2e:f2:86:31:c8:20:ed:c8:92:da:01:5c:52:b9:62:3e:6a:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ea:19:c4:f0:b2:45:2b:fe:21:21:b5:14:a3:95:fa:ab:40:94:d2:33
Fingerprint (sha256): c4:35:9f:ea:be:2f:66:83:d9:38:36:bf:ee:49:98:13:bf:21:c1:25:da:1f:9c:34:2d:1e:0e:2c:1f:8f:d3:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nea.nu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nea.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nea.nu
www.nea.nu

Other certificates including the domain name nea.nu

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nea.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282126927260152917339179482001314019339519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 05:20:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 05:20:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nea.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869292038045021545686220446494621489494973674635944605717524160111376208985029008343191787673991334579119726899431257631441496092416493823654670157249193442441676546203826386705732360760620080471286763946339891413122209006171161263076304304641428510424005144137249834818097426241365768619522161187205598618059259818713384804634488799665501866479054001478675194266138909388543982785809313562719765180030244837372999361385990030113437790406216890585016263916295693138666422898129182149337267710186503513852346670343700421330108141127148900207872049023016063149813972750683543565611847055642635712547885536358771911891966113507913632930567026489273328976962758272996154497556262961052168735603330137070762666475895022818104654735505039228737183006962846754160564548774478025301431593679549801263958838856391390422628661184022848026689367772443259995758260057300063586217424934689742645617701933401114992948182757600183664119972018893362663340791077461581563788781435566204711940760558228273470400192918297010890157336934949579993493141919519989837162476646666313409962697679348900328391766905973441642117548367788505686667109301647248644467313873067811236607865982707492981196061189499444652513354191988449003215950138088561073902074523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82402ef28631c820edc892da015c52b9623e6a38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nea.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nea.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df21f957f00000403004630440220725d8d9a54c25f3cddabd2dcb23b0cf49f0d9a85ddba8183662417bad8822d8a022009be954d794a9a3815f3f62e2486582eba6cd6580745004dd9084582f7fe03d800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df21f95a30000040300483046022100f003277f76080fe3814b9b92722c1aeaf72da7ffaaf4051eaa8603a36a534f1a0221008ec311ecbc7a313ca902b9c75e9ec0f296991f79829e1da9725de7aa94dfca5d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036b3941d2ba4870148fadd603faf5c19073f8a08200bf27f24c07cbd4b43b15b7e88263382ddcbc5ffa5c18a079ab91d34a88fc6b778e64c9a3e2fff4ce843a6d89922eed65fd5de3488c104fdf10d2719696beadce35491a1ff56d05d21f4af8f5ec65a5e150964d061022f0981bee674fd30c9718cdf4adef62c55589520b7caaf1fd1a8684cadef74b66b5dad4abecf1d2fa72df90593b77e44c8ab5b01a14d940cdf26cfa0424f6bbf1a1e14444a00660e45e54f977e2e3f07c3179214668c97e99b8f28758283d9dbdb4d52d3a99745bb013a93b0158446a8805fbb6d8f837afcf39fbe6769a5125e732a155820bfeeba1aa03655309c86ee444632c571