nrrco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d6:8e:ef:6f:7c:85:cc:cb:3f:f5:26:17:11:d1:19:15:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nrrco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d6:8e:ef:6f:7c:85:cc:cb:3f:f5:26:17:11:d1:19:15:4b
Serial Number (int): 421459563843685632889511164321083294291275
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:37:fc:ba:10:9c:5a:a1:f2:3d:e7:6b:18:f6:27:f2:1a:34:c6:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:99:33:dd:ea:7b:05:48:c2:fb:96:59:b1:60:39:9c:c6:4a:95:61
Fingerprint (sha256): dd:0a:38:5f:e5:62:11:92:92:e4:f6:a4:2d:44:46:49:bb:75:65:a9:c0:57:be:b0:24:55:88:55:a1:a7:3b:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nrrco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nrrco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nrrco.com

Other certificates including the domain name nrrco.com

(limited to 100 certificates)
underwatermp3player.com
aguasurf.com
lincolnrobinson.com
nyccarleases.com
myhwa.com
www.heleneogpaul.com
nrrco.com
www.halanderson.org
nrrco.com
goodgreencanna.com
www.nrrco.com
nrrco.com
www.sunshinecoastkravmaga.com
www.nrrco.com
imeditatedaily.me
nrrco.com
nrrco.com
www.nrrco.com

Certificate

The complete raw certificate details for nrrco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421459563843685632889511164321083294291275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 10:04:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 10:04:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nrrco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 961863835754346083220117832051532802972554314270029003885057377564848153009335211834594523248105993871958351922811924307629615620136798735888852672045347399306454421107320960890308899408328917197993234196277941942485811459813650267001994236648758117700059661227819391554200818959744621599841609737927862516610111065706277349088284791512215934268701436109884187507437937393039585705892904377479256366632724004996394193211614428562597376146794986159308170338357718700069088976139889313619367389470330251828788786163761966316652908764541856425862212510752284079719222091561341265386182645523946758913095189102290741423306944540310734134329853644438249925508635411537020285485376624050509080202344680288138814537191633979050995326587833066001969493066699093275577291155078240093031890475396715318354197736298894272686089105393180319222215019616899083102480601179072692331240506480889596600116077844662843231230214402245885804925143134430326825599438135650856132452014576868677083097332048084647700970143206240731771679431626007473933748591932790011364167010150695517705177729241722468607829700497291234757915867746521639009609716040784760045141304240065023198790192773679678836117645124444063650467592502856292546939388565519099865207747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5237fcba109c5aa1f23de76b18f627f21a34c6ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrrco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc4ca3fe5000004030047304502207b6c102a2fa549197ac69c2bd652b46fa78791618bfbd8ce1aecf452a64fcc16022100eed655cf1e2e739370c25043fa6792af723a0b41f0356b8072865729989dbabe007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc4ca3fe40000040300473045022100b5e9631983c5800792195b92a5c221870edf92e104a31ead778848b583dced44022059fa44fd0584b330676bddf3cb99335e20fb971a2b374c3e8547eb0dc71f7087
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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