www.nmuco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:fc:e1:56:be:0e:f6:fb:c2:90:f2:00:02:eb:e3:f6:8c:4e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nmuco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:e1:56:be:0e:f6:fb:c2:90:f2:00:02:eb:e3:f6:8c:4e
Serial Number (int): 434499826882542376086472131493594825919566
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5a:57:10:a8:b1:23:fe:e1:11:dc:f9:5d:4e:d0:ba:50:f3:cf:df:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): af:71:e4:35:12:33:e5:f5:2d:f3:32:8f:84:01:3a:8e:4c:4d:03:2b
Fingerprint (sha256): c8:34:74:92:04:a1:8a:d7:82:8c:ab:79:85:51:76:84:02:fc:4f:ba:14:0d:4a:bd:4c:2d:63:9a:06:58:57:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nmuco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nmuco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nmuco.com

Other certificates including the domain name nmuco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nmuco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISBPzhVr4O9vvCkPIAAuvj9oxOMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDEyMjEyMDlaFw0y
MDA1MzAyMjEyMDlaMBgxFjAUBgNVBAMTDXd3dy5ubXVjby5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDD6/Xr+kik2hZ/p1SEZaAcsMh8BCjaEWpj
FS8GAsZOvZ4pB3g3b3X+5+PMzsUNmxUxyawz4hSruGWRo+IvM0KjV9rMi3BpkAyH
fEC1pXHjpbAVZuV69L3/sXnOOiMqmzvPnudF/oVLJ1K6V35eHWjFviOPmk8YUoAl
KREyypYlcA0BThgWPb++kOBsw/yW9nkgZUVizzo9Is2xmHhov+qtZMy8cM9XBXVP
lJt00L7Prxu2y7Htj/KFNSF25JTvo67LyyhOJmcoHiVd/mmyYG/WLBHxhJ6w/qbm
YIUKhCAV9N3Zh3qxPZWUVchS0cb5+btnt/ha7onqss08zaMxkQQrNELJKoWvw9EK
BqC8AxgR8Q7mHSxGj3Zxb8TvayGBPlRSR6NZewgaJAw08GC8+u8C1O+YzsRDPYtL
ahCN7s9e92oQXe5hSa2eXMnKfpB2Wx7Qa2AyBZr49Qw8t070LYhnfKWgiRNQ09vb
yaqWACMOUP6Cr3rjBZO/zvSmK+WwHXNoOQLKfk2KYxOYcPZ1NXcxn28GNI2h+1oI
2g4MASCn+PeTMiGp7uP1pTe4RqHf4ESvdqmA1VzG/UDoNxhfW/qAbXZrQbHyYteb
1B0gBkcqqWmsFvRj5s/3E89L843TiXWdD/EKxNrE3J5ifGcjNFEDClxMefDMu+fE
Ei7TsQl/TQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRaVxCo
sSP+4RHc+V1O0LpQ88/fxDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5ubXVjby5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdgDnEvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXCYXwiBAAAE
AwBHMEUCIQCoe0wAzx5jgr61LUa50MnoR/pAQw8quKVjAnGLJBwnQAIgat/JiF/Q
2ZCREJCo6E4Q3MzxeDVNuaIuFX1Lr8QOAC0AdwAHt1wb5X1o//Gwxh0jFce65ld8
V5S3au68YToaadOiHAAAAXCYXwi8AAAEAwBIMEYCIQCZQ8Wn4xbb1ACaYajljE3C
N/3RB8flBeW72JSSVH3NMgIhAOyxOo5/HFi/E19mCHUxhhZWq4SlKVsPTwv36NTm
D6OkMA0GCSqGSIb3DQEBCwUAA4IBAQBwq6PYMlCWC9VG2F79Uc4oMbEB/XpkvU+f
/qPobNjTJOy7SC93cLoSkAiUny1jycmyjG6LNsNJMlsIluHpJgFNEqxocRltV6os
Nm+lhKXx04KrVfJdxLhpuH2+51rvPeppJboL4grg9XlAKZh48E7fIpRmFXrKqVV9
72ZHGa9bBYY6mIbXgiLD1PUGZtAi0zT1Nb8IYjfDbYLaYSqd4uHzVFDUQWAd1vGF
5jdTBFmlFcQXM7X67ujwZCKpFZOGhgBUN4Z1shVEP+KBjIRrwq8a700U2125zcH6
Fyk81wubm4xtKRw7Y8YhCDFE/8QSH0SB7CM+OaAOe5yq1k3THw4/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434499826882542376086472131493594825919566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 22:12:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 22:12:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nmuco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799290887766103608105255160790196738814261159247916143422671491925395806762906717256180085270523411125087385936391083083154436176467441347977521255572649142717317302972137221132655000569266395531798579029515890387909357207359996150671225150508695411826024417446261488078166602024995163673060848311234849682015119713934407806450684255178458893614561804598736038881566040390189611039120189150357391892895217424251716428502356843506148792415021262768663820065791006232242077074549866079169450018859729960926834849769405716438850084136036720251755278210066263946163659948348068143282324439343559345222586257750090204866586244880719948145750131489941453080782656982916067599095954505802374923839182272696683786860282235546689782370304117060098085902944307798491004556829402248208154778058941222974016080688741148939162849831391573111172014987148326106579316140844593367295197131568236135588657895303249275716985854475386330450515236139301543375440406737123475779829882693660646088605951309031924547776875894774734317309977124645935051325403966954359263639991596888409238253763170317425341013041131672123620934858528777333418930701491234815218543989897333786668014528110135927077125170304423992539246749823895005111206392834356002683453261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a5710a8b123fee111dcf95d4ed0ba50f3cfdfc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmuco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170985f08810000040300473045022100a87b4c00cf1e6382beb52d46b9d0c9e847fa40430f2ab8a56302718b241c274002206adfc9885fd0d990911090a8e84e10dcccf178354db9a22e157d4bafc40e002d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170985f08bc00000403004830460221009943c5a7e316dbd4009a61a8e58c4dc237fdd107c7e505e5bbd89492547dcd32022100ecb13a8e7f1c58bf135f66087531861656ab84a5295b0f4f0bf7e8d4e60fa3a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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