www.nmuco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:fc:e1:56:be:0e:f6:fb:c2:90:f2:00:02:eb:e3:f6:8c:4e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.nmuco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:fc:e1:56:be:0e:f6:fb:c2:90:f2:00:02:eb:e3:f6:8c:4eSerial Number (int): 434499826882542376086472131493594825919566
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5a:57:10:a8:b1:23:fe:e1:11:dc:f9:5d:4e:d0:ba:50:f3:cf:df:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): af:71:e4:35:12:33:e5:f5:2d:f3:32:8f:84:01:3a:8e:4c:4d:03:2b
Fingerprint (sha256): c8:34:74:92:04:a1:8a:d7:82:8c:ab:79:85:51:76:84:02:fc:4f:ba:14:0d:4a:bd:4c:2d:63:9a:06:58:57:68
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.nmuco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.nmuco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.nmuco.com
Other certificates including the domain name nmuco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.nmuco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISBPzhVr4O9vvCkPIAAuvj9oxOMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDEyMjEyMDlaFw0y MDA1MzAyMjEyMDlaMBgxFjAUBgNVBAMTDXd3dy5ubXVjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDD6/Xr+kik2hZ/p1SEZaAcsMh8BCjaEWpj FS8GAsZOvZ4pB3g3b3X+5+PMzsUNmxUxyawz4hSruGWRo+IvM0KjV9rMi3BpkAyH fEC1pXHjpbAVZuV69L3/sXnOOiMqmzvPnudF/oVLJ1K6V35eHWjFviOPmk8YUoAl KREyypYlcA0BThgWPb++kOBsw/yW9nkgZUVizzo9Is2xmHhov+qtZMy8cM9XBXVP lJt00L7Prxu2y7Htj/KFNSF25JTvo67LyyhOJmcoHiVd/mmyYG/WLBHxhJ6w/qbm YIUKhCAV9N3Zh3qxPZWUVchS0cb5+btnt/ha7onqss08zaMxkQQrNELJKoWvw9EK BqC8AxgR8Q7mHSxGj3Zxb8TvayGBPlRSR6NZewgaJAw08GC8+u8C1O+YzsRDPYtL ahCN7s9e92oQXe5hSa2eXMnKfpB2Wx7Qa2AyBZr49Qw8t070LYhnfKWgiRNQ09vb yaqWACMOUP6Cr3rjBZO/zvSmK+WwHXNoOQLKfk2KYxOYcPZ1NXcxn28GNI2h+1oI 2g4MASCn+PeTMiGp7uP1pTe4RqHf4ESvdqmA1VzG/UDoNxhfW/qAbXZrQbHyYteb 1B0gBkcqqWmsFvRj5s/3E89L843TiXWdD/EKxNrE3J5ifGcjNFEDClxMefDMu+fE Ei7TsQl/TQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRaVxCo sSP+4RHc+V1O0LpQ88/fxDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5ubXVjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXCYXwiBAAAE AwBHMEUCIQCoe0wAzx5jgr61LUa50MnoR/pAQw8quKVjAnGLJBwnQAIgat/JiF/Q 2ZCREJCo6E4Q3MzxeDVNuaIuFX1Lr8QOAC0AdwAHt1wb5X1o//Gwxh0jFce65ld8 V5S3au68YToaadOiHAAAAXCYXwi8AAAEAwBIMEYCIQCZQ8Wn4xbb1ACaYajljE3C N/3RB8flBeW72JSSVH3NMgIhAOyxOo5/HFi/E19mCHUxhhZWq4SlKVsPTwv36NTm D6OkMA0GCSqGSIb3DQEBCwUAA4IBAQBwq6PYMlCWC9VG2F79Uc4oMbEB/XpkvU+f /qPobNjTJOy7SC93cLoSkAiUny1jycmyjG6LNsNJMlsIluHpJgFNEqxocRltV6os Nm+lhKXx04KrVfJdxLhpuH2+51rvPeppJboL4grg9XlAKZh48E7fIpRmFXrKqVV9 72ZHGa9bBYY6mIbXgiLD1PUGZtAi0zT1Nb8IYjfDbYLaYSqd4uHzVFDUQWAd1vGF 5jdTBFmlFcQXM7X67ujwZCKpFZOGhgBUN4Z1shVEP+KBjIRrwq8a700U2125zcH6 Fyk81wubm4xtKRw7Y8YhCDFE/8QSH0SB7CM+OaAOe5yq1k3THw4/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw+v16/pIpNoWf6dUhGWg HLDIfAQo2hFqYxUvBgLGTr2eKQd4N291/ufjzM7FDZsVMcmsM+IUq7hlkaPiLzNC o1fazItwaZAMh3xAtaVx46WwFWblevS9/7F5zjojKps7z57nRf6FSydSuld+Xh1o xb4jj5pPGFKAJSkRMsqWJXANAU4YFj2/vpDgbMP8lvZ5IGVFYs86PSLNsZh4aL/q rWTMvHDPVwV1T5SbdNC+z68btsux7Y/yhTUhduSU76Ouy8soTiZnKB4lXf5psmBv 1iwR8YSesP6m5mCFCoQgFfTd2Yd6sT2VlFXIUtHG+fm7Z7f4Wu6J6rLNPM2jMZEE KzRCySqFr8PRCgagvAMYEfEO5h0sRo92cW/E72shgT5UUkejWXsIGiQMNPBgvPrv AtTvmM7EQz2LS2oQje7PXvdqEF3uYUmtnlzJyn6Qdlse0GtgMgWa+PUMPLdO9C2I Z3yloIkTUNPb28mqlgAjDlD+gq964wWTv870pivlsB1zaDkCyn5NimMTmHD2dTV3 MZ9vBjSNoftaCNoODAEgp/j3kzIhqe7j9aU3uEah3+BEr3apgNVcxv1A6DcYX1v6 gG12a0Gx8mLXm9QdIAZHKqlprBb0Y+bP9xPPS/ON04l1nQ/xCsTaxNyeYnxnIzRR AwpcTHnwzLvnxBIu07EJf00CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434499826882542376086472131493594825919566 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 22:12:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 22:12:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nmuco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799290887766103608105255160790196738814261159247916143422671491925395806762906717256180085270523411125087385936391083083154436176467441347977521255572649142717317302972137221132655000569266395531798579029515890387909357207359996150671225150508695411826024417446261488078166602024995163673060848311234849682015119713934407806450684255178458893614561804598736038881566040390189611039120189150357391892895217424251716428502356843506148792415021262768663820065791006232242077074549866079169450018859729960926834849769405716438850084136036720251755278210066263946163659948348068143282324439343559345222586257750090204866586244880719948145750131489941453080782656982916067599095954505802374923839182272696683786860282235546689782370304117060098085902944307798491004556829402248208154778058941222974016080688741148939162849831391573111172014987148326106579316140844593367295197131568236135588657895303249275716985854475386330450515236139301543375440406737123475779829882693660646088605951309031924547776875894774734317309977124645935051325403966954359263639991596888409238253763170317425341013041131672123620934858528777333418930701491234815218543989897333786668014528110135927077125170304423992539246749823895005111206392834356002683453261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a5710a8b123fee111dcf95d4ed0ba50f3cfdfc4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmuco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170985f08810000040300473045022100a87b4c00cf1e6382beb52d46b9d0c9e847fa40430f2ab8a56302718b241c274002206adfc9885fd0d990911090a8e84e10dcccf178354db9a22e157d4bafc40e002d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170985f08bc00000403004830460221009943c5a7e316dbd4009a61a8e58c4dc237fdd107c7e505e5bbd89492547dcd32022100ecb13a8e7f1c58bf135f66087531861656ab84a5295b0f4f0bf7e8d4e60fa3a4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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