beta.nitestar.kred

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:03:92:a1:bb:87:34:d0:06:0a:d1:b9:ea:26:32:53:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=beta.nitestar.kred

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:03:92:a1:bb:87:34:d0:06:0a:d1:b9:ea:26:32:53:47
Serial Number (int): 268487536540274605405973601577759419814727
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:0d:f3:9a:a7:ee:db:9a:77:bb:86:80:a5:dd:c4:bc:e1:4c:fb:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:ef:f6:60:1d:70:0d:22:11:e6:42:d8:77:38:f4:17:5b:29:be:fc
Fingerprint (sha256): c4:4e:da:8a:a5:00:bc:79:53:6c:00:5b:4d:00:e1:7d:3a:7b:ce:13:26:36:02:e2:b6:52:37:82:0d:db:95:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate beta.nitestar.kred

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beta.nitestar.kred

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta.nitestar.kred

Other certificates including the domain name nitestar.kred

(limited to 100 certificates)
nitestar.kred
www.nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
beta.nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
www.nitestar.kred
beta.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
nitestar.kred
beta.nitestar.kred
nitestar.kred
nitestar.kred
www.nitestar.kred
beta.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
www.nitestar.kred
nitestar.kred
beta.nitestar.kred
nitestar.kred
beta.nitestar.kred
www.nitestar.kred
www.nitestar.kred
www.nitestar.kred
beta.nitestar.kred

Certificate

The complete raw certificate details for beta.nitestar.kred in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268487536540274605405973601577759419814727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 10:33:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 10:33:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'beta.nitestar.kred'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742689027307238534272471243973675483154144516740779298003554587828279254827114999415707408963038745156336816498640457008697587572186853694465364310900801806678765067249069015061870876997323689670440138730553360503343376168281210455037518931712045973773306158306829288923324948448321847627781880988016515245304011011381345939037221482816910864265758620384480941876311841597868442705811099982905551820585776158949105659851459689436020777269525829097730770435439463757492720019163390905458782803876801221973249153974363013935297581108304952327271195150529077299522925018150521571533014764628192902940155272307673282840644722218274225934105895191707352003807224607459749624706373150246327459939648779969617919265517021334178104918919878849660688853110596563627758005932668352168211636026546923997022308030046030852249843660556311713220109975125709130634343319109657767848579702972086862480108578006186666424810101290824825438731275345637992242432288741707337257507294612223177971265965267129567728303361457686491780181435351837805393958024827651146613994450637542861533969424851927258715250183618435116848706652770930110934545525807148446414849867103598730820038338225550402849346146172734272199052370985238389882017492689041824012681579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							210df39aa7eedb9a77bb8680a5ddc4bce14cfb1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.nitestar.kred'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016889ef6946000004030046304402203bede36abafd00813b5394381d2c2bb0bade63f12a8332d4a3dac52057d5888b02207d21fd74dc32941bc5c8e895455d1f046b5b66e579b1061b142ecb61894d1b15007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016889ef67550000040300463044022055006a7b6514965bce9b3d1e16856817dacda781c20c3a67914c8a719389d52d0220392348e5ef90430a2b57a70b9bf8ebfd7dd8971be365b5e9ccbb000cd75a6b12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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