ir.nexuswave.tech
Issued by R3
About this certificate
This digital certificate with serial number 03:54:6c:00:62:72:12:a0:13:bb:fc:bd:72:9d:b7:ad:3c:e5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ir.nexuswave.tech
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:54:6c:00:62:72:12:a0:13:bb:fc:bd:72:9d:b7:ad:3c:e5Serial Number (int): 290064135236898257721059251433573247171813
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 86:f6:a4:2f:25:72:3b:5e:69:84:d0:43:e3:7c:b4:44:3a:7c:3b:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 58:86:a4:7a:4e:18:51:73:40:0c:00:1d:a6:4c:51:40:86:fe:a6:a9
Fingerprint (sha256): ea:b6:4a:85:0b:f4:a2:b7:36:bf:8f:d6:48:3e:20:b9:b4:23:82:50:44:5f:63:61:c3:a6:d2:7e:51:41:ae:ee
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate ir.nexuswave.tech
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ir.nexuswave.tech
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ir.nexuswave.tech
Other certificates including the domain name nexuswave.tech
(limited to 100 certificates)
Certificate
The complete raw certificate details for ir.nexuswave.tech in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgISA1RsAGJyEqATu/y9cp23rTzlMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMTgwMDAwNTZaFw0yNDA1MTgwMDAwNTVaMBwxGjAYBgNVBAMT EWlyLm5leHVzd2F2ZS50ZWNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAoJjvqoc0Ze5ZP5cHwTbEosakgwbWXhejGHnB6sp/BqJI/pSgiL+OyOWDdII1 s0wQUYb4hQC4VZA7jVb4bEXNf0Db4dkLLbDQBAZFpXWIrdjLzoqaXj96TAAdc/Tt +U+tRKikW7LYhZvg5o83mHIMAq9SCZf70pVQTdpqMCR8JIRV09+fhaHLLJG/klnx Esp4HuLnYrs/avCjWZFj2KdSEZoDuoeGjDH3cB0FVOD5Fsr/N9DiD/ne2wBPHy2i vTufCPBVNA49ZBSn6K6DmM5hEo3IVhhlt69cTM/4pwzmOSpbbrSV/ddIa31AUKvH clwgzuuhckjs2VA19lUDACUldGNn4rF1lrOirYQ6++kIsGqKc9EvaCE9jZczEm8k jVtwshLaw/grXPFJJk/2lGEa+/OlyJ7q1ufrhebI3bd8CIbGd0PzTBhdqYCa32wH N3YI8K9gr3jqCsVF8uhXUpNaZUiEAefmp1xTbsiOR1oeZI2nxkh3hPZbZw83zlIO 6cOkwzONoi2XuCyjiE1bKF2zQxVtKX/ESBQPBUfsddKvATVCgSHb0rYYsxKGV5Jm rLKQ7CgL8qNEWEh/Jxzi5yDkA4O+ITQDoj2HBcy1tRkMzlh0rm/2tEqhPrp98W2H qD4uJUab/v+iiLBFesZJJ1aK3gIq8MTgwftJCBilRA/QPzECAwEAAaOCAhMwggIP MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhvakLyVyO15phNBD43y0RDp8O8QwHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHAYDVR0RBBUwE4IRaXIubmV4dXN3YXZlLnRl Y2gwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY25uv5dAAAEAwBH MEUCIQCo3HNLLOEbUoqXzpIm9uatEzPkpk3qynBjBb0aharItQIgHcNbsxAJet8u KRnzQW51U9ypcrdx1KD2dzVYJI5LyFoAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuync aEIKn+ZnTFo6dAAAAY25uwChAAAEAwBHMEUCIE5FzvmG5nMs50ikwZNiegM48egz DpM/dvfMy8j/WLaPAiEAogtVTGxiHalrHOwvqurNmike8cCK7dOEKOWOox9VKMgw DQYJKoZIhvcNAQELBQADggEBABYiCnPZOjtilZ5kRo0feygMkmUxcB0lRBxVQHgS ob1kfkHg6it2hzD7x2Ov9DQ1b0LPCte3RNTLfUgZo4jX9eJ4d3RDD46op5Gl2ij/ KQ/rI8fBF6+N1vR+Hf0ItfG/sVSRiWcXarlXzrtEVaEzzfU0zSq7dc6yb8ylOWLq tB9RcU3YN9+HLzP9YvXt/AkwrVui+nZ8qsPHtMnbZE4MoFfdM6yqoOro47BbpsF1 lRcHMtraNk94FGsVYgm1Esl27HVfeEWhJq3bLiTNjSsa7bTgWIn+OttC0JdFCxvC YgOMptt/KPaoHrOq2EaefQH3rn6pWfnpXsX33YSCBHINrC4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoJjvqoc0Ze5ZP5cHwTbE osakgwbWXhejGHnB6sp/BqJI/pSgiL+OyOWDdII1s0wQUYb4hQC4VZA7jVb4bEXN f0Db4dkLLbDQBAZFpXWIrdjLzoqaXj96TAAdc/Tt+U+tRKikW7LYhZvg5o83mHIM Aq9SCZf70pVQTdpqMCR8JIRV09+fhaHLLJG/klnxEsp4HuLnYrs/avCjWZFj2KdS EZoDuoeGjDH3cB0FVOD5Fsr/N9DiD/ne2wBPHy2ivTufCPBVNA49ZBSn6K6DmM5h Eo3IVhhlt69cTM/4pwzmOSpbbrSV/ddIa31AUKvHclwgzuuhckjs2VA19lUDACUl dGNn4rF1lrOirYQ6++kIsGqKc9EvaCE9jZczEm8kjVtwshLaw/grXPFJJk/2lGEa +/OlyJ7q1ufrhebI3bd8CIbGd0PzTBhdqYCa32wHN3YI8K9gr3jqCsVF8uhXUpNa ZUiEAefmp1xTbsiOR1oeZI2nxkh3hPZbZw83zlIO6cOkwzONoi2XuCyjiE1bKF2z QxVtKX/ESBQPBUfsddKvATVCgSHb0rYYsxKGV5JmrLKQ7CgL8qNEWEh/Jxzi5yDk A4O+ITQDoj2HBcy1tRkMzlh0rm/2tEqhPrp98W2HqD4uJUab/v+iiLBFesZJJ1aK 3gIq8MTgwftJCBilRA/QPzECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290064135236898257721059251433573247171813 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-18 00:00:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 00:00:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ir.nexuswave.tech' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655180258867568524818630346315364271843654109048880799368075115128897766212767921967845867239082763172633593761042263821253731233658899102753049857339150591414124430342459726869807030807553769314569574471865739732420820160322716805463862503990390968075009539100104056024378125968253041846619468971590876010054259100609957060283712485684073361579972752376756265052437878219888346681314954847704182250643701195418590757233896587011943834833304117882396607821621749379959422577717499622436210949189937476135846843664989014426311075718509956055095220395776097942788219949576112603517849140349859966470908417190181423061890521635535962747252692671342277131489434931878130937650191250923366285616600207574249048106603054978918628619299169664785063466574958415322835237794133452016080560610397726721839222936264665043813346252898490329939792116017798434212101442357555763267518789700237058977162648048511057684614327058465183589568429422811515286613700711534788168868584672743363684779631254565677492420727290740978386104900702218756767061262833625004760353462989521538605082693845170559786158502516797040972589771357902188426603995831034924353588880752096165633270836649531253412548939785699025706589526533438509732739464983494347119935281 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 86f6a42f25723b5e6984d043e37cb4443a7c3bc4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.nexuswave.tech' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db9bafe5d0000040300473045022100a8dc734b2ce11b528a97ce9226f6e6ad1333e4a64deaca706305bd1a85aac8b502201dc35bb310097adf2e2919f3416e7553dca972b771d4a0f6773558248e4bc85a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db9bb00a1000004030047304502204e45cef986e6732ce748a4c193627a0338f1e8330e933f76f7cccbc8ff58b68f022100a20b554c6c621da96b1cec2faaeacd9a291ef1c08aedd38428e58ea31f5528c8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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