nx-pod.de

Issued by R3

About this certificate

This digital certificate with serial number 04:89:2c:8d:7f:22:62:a3:ae:9b:4c:71:7b:69:5b:25:cf:23 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nx-pod.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:2c:8d:7f:22:62:a3:ae:9b:4c:71:7b:69:5b:25:cf:23
Serial Number (int): 395127048719471450389756051529944491478819
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a7:62:d6:15:cf:3e:9e:25:b2:d8:e4:3d:44:cc:ef:1f:46:cf:73:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:cf:64:7c:ee:7e:d6:9b:b6:37:90:c8:7d:04:ec:67:e9:be:28:f6
Fingerprint (sha256): d1:df:6c:27:0d:9a:40:dd:a9:17:18:dd:99:57:db:9a:d5:ac:66:ae:3b:46:0b:39:41:84:52:8c:0b:48:42:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nx-pod.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nx-pod.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nx-pod.de

Other certificates including the domain name nx-pod.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for nx-pod.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgISBIksjX8iYqOum0xxe2lbJc8jMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjgyMjExNTRaFw0yMzEwMjYyMjExNTNaMBQxEjAQBgNVBAMT
CW54LXBvZC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALUTjj+z
vy4Ra+F6zKtH1IWhY780SmT6i+/rLTGSV1lmudxINFlndA72bPp6VOabgR289BSb
+6AFIBWsJfd9oy5pLPyxBEt5rOr7d6JHSBf7Vy9/HggtLKM7T6jFXBeaXgz/suQY
Vhn9iDr66k8DqwK1jxhgFI5NoC3Uo4nbRrCFQN9MqryedRXBhhIL2kd5MzzMIMU8
uAa4cv2EvJLZMKubjPY2EmJHSbWQfcOhTbsdWp94Ubg0PJPCBLKVEISaJgGOlF08
mZLTjL3TqyzKQcfwcAxJr/nZmfmmQQZUj7W05wXsPkRUFKbIqhkiu0zMDTWCQ3KT
y2uRLlAdYCjM810CAwEAAaOCAgswggIHMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
p2LWFc8+niWy2OQ9RMzvH0bPc8UwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFAYD
VR0RBA0wC4IJbngtcG9kLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHUAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXt
tJkAAAGJnsXeegAABAMARjBEAiAGtArkiMkD0WWgGUyVSDInaAORb0u+r+W2Ig+y
6aMC3gIgNm8F+gZnpi3N7NYnQNHPJCNVj7mPBRM8YKZDSA09AiwAdwB6MoxU2Lct
tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYmexd6QAAAEAwBIMEYCIQDb7qzk
2Na+ahOKX1KEda7HJGaiYWO6IVoE9GU87e9ruAIhAPIfOFvXGjgsg8YLyIp/zgzT
c8Pxw0+gYaiZ1WBzyfk/MA0GCSqGSIb3DQEBCwUAA4IBAQALGd4jABshBM8G9KbU
AlPq2blkQlPXXbmR/fHgI7/dzXAEIbp7D7A41snYBooFjPrwsqSQgMigfXOg0aMv
bKQxjLke7X+8aXhk9zhiOVHX9tPzXx6NbnuxQIWUptlEJOqAQTfSK8PLIfwsODnC
13tD+7xW5gWROGnnKeQ+dQUc4QZyiWOtuoFN9ujW9Y5MofS/C7oVhILbhZzT73Jc
0CIziLJeOYUfbnKL2eIcBTJXVlMqhfbrGFQ2j2jpz5KlRjlr6HD/R3mQrmzl8UPt
TR1LzaAPdpPtrBny1B1AwmVsq22XJROa8ChjqeXjqHahKQrr8/v99kvYhG2BtHu2
xPmn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtROOP7O/LhFr4XrMq0fU
haFjvzRKZPqL7+stMZJXWWa53Eg0WWd0DvZs+npU5puBHbz0FJv7oAUgFawl932j
Lmks/LEES3ms6vt3okdIF/tXL38eCC0soztPqMVcF5peDP+y5BhWGf2IOvrqTwOr
ArWPGGAUjk2gLdSjidtGsIVA30yqvJ51FcGGEgvaR3kzPMwgxTy4Brhy/YS8ktkw
q5uM9jYSYkdJtZB9w6FNux1an3hRuDQ8k8IEspUQhJomAY6UXTyZktOMvdOrLMpB
x/BwDEmv+dmZ+aZBBlSPtbTnBew+RFQUpsiqGSK7TMwNNYJDcpPLa5EuUB1gKMzz
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395127048719471450389756051529944491478819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 22:11:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 22:11:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nx-pod.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22858776453973707813995972822750137961921794278136773816531906385224197618910326707869007999446983982135208160593887798188117728185965908111018505663249292856517368703701415398046607840629185633583928596984863128604051528441659213068521693099462045231084467482766803174629511816311896320102282606692016283214992040026463797710887182593957181910978185982026610757814670078265430167008345509283057163832450257080269223367041923919557307447033413498314861895621349811079780409349672216506950896301834216930143339339899019066021006345271104936723578398465314513788247862571994670348822074256381304234779956335954489045853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a762d615cf3e9e25b2d8e43d44ccef1f46cf73c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nx-pod.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001899ec5de7a0000040300463044022006b40ae488c903d165a0194c954832276803916f4bbeafe5b6220fb2e9a302de0220366f05fa0667a62dcdecd62740d1cf2423558fb98f05133c60a643480d3d022c0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001899ec5de900000040300483046022100dbeeace4d8d6be6a138a5f528475aec72466a26163ba215a04f4653cedef6bb8022100f21f385bd71a382c83c60bc88a7fce0cd373c3f1c34fa061a899d56073c9f93f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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