www.nfyco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:45:97:ad:4f:0f:e9:5f:8d:29:3a:77:fb:f2:30:9c:2b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nfyco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:45:97:ad:4f:0f:e9:5f:8d:29:3a:77:fb:f2:30:9c:2b
Serial Number (int): 270276703618880748620579643096159568829483
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:41:a6:6a:fd:ee:25:b6:49:a7:cb:90:77:d8:e9:e7:71:ec:b7:39
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:0f:9e:be:af:65:1d:f4:c7:9c:66:81:ae:c1:41:12:11:08:7d:c6
Fingerprint (sha256): fb:4a:3a:98:de:0d:60:7d:ee:a2:a8:1a:bc:0d:1e:a4:46:be:87:30:7d:ec:a0:28:ec:0c:2e:e8:34:88:24:43

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.nfyco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nfyco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nfyco.com

Other certificates including the domain name nfyco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nfyco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270276703618880748620579643096159568829483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 03:44:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 03:44:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nfyco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768620832091047143199645255729266926615697889217447628182244372320025390053981974460147168472192560013603293309336925353106139422690450681687365967224882902619307605800761168610940414541473494527693556533543427529800208882083113603021874261523088225045919845087451894290400948174464811620600937142914682159215213255111436642889588357043357808915909370015681697942538600376818372750604116582673824972960754776247542948514233842701662811589487911872896027824643768652260174819446157195437774566596978864144798931913679511428173009641484462050847165157119032927850353260387797262002748020938136103527209467975702627526978132117696354678645663810486787528420140857246565502529615992687479718340773370416548851468970722984906263062390352916405626925550206057512405403341051306126472459263102537798545654939255610573297606574250048678253812035336438962720176189297974203224631069236236281301921716638582122197563104013301726612019397165577184165674315330298785568492891022715801014149532277245415344807861362101369956737542437767009554509344742907618080796443717246151459774366393113575842954881620103442881046077840964436274534407313672403453289260099143373128677779028529030554877195095456742339884975467380760813297844757331363158790649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d541a66afdee25b649a7cb9077d8e9e771ecb739
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nfyco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbe487596000004030047304502206bdf715318836496d9a27ea44665bcbded3e1302790d733934e853691c3feef5022100c284ee0266bf580a179bc42a5e9230d02a57d93e4ccdeeedf007d1b4cd32ca140075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbe48790d0000040300463044022003fa51ce9fa94eb6421e6cbb852f806b3cee62d02f971f980c16947021ce1f4f0220415c02a6557f77d26640473ebd9e4db4f17d74a909f743ffb10c5e205804c6af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001942f9414cd2130cf59625c911a6883be2c8d7965257e7fd227e64e6de46ea27a8a3944ec074b9ea4d323fc998c0e23b7bf9055710919ce04b1bc375c2efc0be1b9d57543f582776410f36a4a30066bcda6e4765365e9836bcb6ce0d1225afb8b5beacaba3d9666fe659dc721c746ddc79edfa98aed15614771f549268606cdae0983bb2c179e6fb291413560b98d44c452710cff3ce72eb13da27673b1ea527a77c76c3dfa0ab88cbc09ad52b9dd87b8e8272712ffbaa60d030e5abcec7b929aff0db20e94d481bc45a8f3ea14fda0cbd7e15d5878a00308c5d7c4d49d5cb880262e70e062ab1ef7f47be195fac22adfc7cd012c8140271300d61c6a2c020d4