Certificate Summary:

Subject: nextdns.io
Issuer: E1
Expiration: 2023-12-29 09:38:05 UTC
Key Identifier: 05:2C:0E:E3:3A:94:D6:D5:E4:D0:2C:E0:1E:35:3B:F8:AE:AC:5E:B5

Download and Install

Received at FYIcenter.com on: 2023-11-13

Certificate Detailed Information:

Name:
/CN=nextdns.io

Subject: 
   Common Name (CN): nextdns.io
   Organizational Unit Name (OU): 
   Organization Name (O): 
   Locality Name (L): 
   State or Province Name (ST): 
   Country Name (C): 
   Email Address: 
Issuer: 
   Common Name (CN): E1
   Organizational Unit Name (OU): 
   Organization Name (O): Let's Encrypt
   Locality Name (L): 
   State or Province Name (ST): 
   Country Name (C): US
   Email Address: 
Valid From: Sat, 30 Sep 2023 09:38:06 +0000 
Valid To: Fri, 29 Dec 2023 09:38:05 +0000 
Serial Number: 0x046E0F8F03F92BD25DB11592DA098F4E317D 
Hash: 8b2475ec 
Version: 2 
Signature Type: ecdsa-with-SHA384 
Purposes:  
   SSL client 
   SSL server 
   Netscape SSL server 
   S/MIME signing 
   S/MIME encryption 
   CRL signing 
   Any Purpose 
   OCSP helper 
   Time Stamp signing 
Extensions:  
   keyUsage:
      Digital Signature 
   extendedKeyUsage:
      TLS Web Server Authentication, TLS Web Client Authentication 
   basicConstraints:
      CA:FALSE 
   subjectKeyIdentifier:
      05:2C:0E:E3:3A:94:D6:D5:E4:D0:2C:E0:1E:35:3B:F8:AE:AC:5E:B5 
   authorityKeyIdentifier:
      keyid:5A:F3:ED:2B:FC:36:C2:37:79:B9:52:30:EA:54:6F:CF:55:CB:2E:AC
 
   authorityInfoAccess:
      OCSP - URI:http://e1.o.lencr.org
CA Issuers - URI:http://e1.i.lencr.org/
 
   subjectAltName:
      DNS:nextdns.io 
   certificatePolicies:
      Policy: 2.23.140.1.2.1
 
   ct_precert_scts:
      Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : 7A:32:8C:54:D8:B7:2D:B6:20:EA:38:E0:52:1E:E9:84:
                16:70:32:13:85:4D:3B:D2:2B:C1:3A:57:A3:52:EB:52
    Timestamp : Sep 30 10:38:07.031 2023 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:46:02:21:00:8F:31:DB:F3:EE:35:04:47:67:11:CD:
                8B:21:E8:51:5D:DB:79:63:CC:F6:A4:F4:6C:B4:A4:1C:
                9A:67:8E:C4:73:02:21:00:BA:05:32:C4:42:9F:A7:79:
                8B:6D:70:4D:78:10:12:43:DB:82:2A:C7:35:44:CD:36:
                AB:28:C9:38:5D:E7:87:78
Signed Certificate Timestamp:
    Version   : v1 (0x0)
    Log ID    : E8:3E:D0:DA:3E:F5:06:35:32:E7:57:28:BC:89:6B:C9:
                03:D3:CB:D1:11:6B:EC:EB:69:E1:77:7D:6D:06:BD:6E
    Timestamp : Sep 30 10:38:07.023 2023 GMT
    Extensions: none
    Signature : ecdsa-with-SHA256
                30:44:02:20:77:BD:30:57:F5:21:B5:E4:FD:01:E3:32:
                31:DB:4D:F6:93:D2:30:F9:1E:DF:CD:9A:5B:AF:5F:E6:
                90:D8:2C:C5:02:20:4F:A8:E0:52:48:CB:2A:7C:42:06:
                5B:4F:0F:94:47:D6:BF:73:BA:4F:47:33:BD:58:3F:A7:
                3F:84:3C:01:90:E5 

Certificate in PEM Format:

-----BEGIN CERTIFICATE-----
MIIDdTCCAvugAwIBAgISBG4PjwP5K9JdsRWS2gmPTjF9MAoGCCqGSM49BAMDMDIx
CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF
MTAeFw0yMzA5MzAwOTM4MDZaFw0yMzEyMjkwOTM4MDVaMBUxEzARBgNVBAMTCm5l
eHRkbnMuaW8wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQgLdWvVfW7AYztLWfv
WKExzf/4uLzDf/ES1UGV6MdEgRhHf2Rjumxexv3CdG0LPNceldHPT8K1lHtDRcqv
bAZNo4ICDDCCAggwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFLA7jOpTW1eTQLOAe
NTv4rqxetTAfBgNVHSMEGDAWgBRa8+0r/DbCN3m5UjDqVG/PVcsurDBVBggrBgEF
BQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9lMS5vLmxlbmNyLm9yZzAiBggr
BgEFBQcwAoYWaHR0cDovL2UxLmkubGVuY3Iub3JnLzAVBgNVHREEDjAMggpuZXh0
ZG5zLmlvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGK5aq+twAA
BAMASDBGAiEAjzHb8+41BEdnEc2LIehRXdt5Y8z2pPRstKQcmmeOxHMCIQC6BTLE
Qp+neYttcE14EBJD24IqxzVEzTarKMk4XeeHeAB1AOg+0No+9QY1MudXKLyJa8kD
08vREWvs62nhd31tBr1uAAABiuWqvq8AAAQDAEYwRAIgd70wV/UhteT9AeMyMdtN
9pPSMPke382aW69f5pDYLMUCIE+o4FJIyyp8QgZbTw+UR9a/c7pPRzO9WD+nP4Q8
AZDlMAoGCCqGSM49BAMDA2gAMGUCMQDks5hhGSDQ3+OehyhTwsRmF9t3nlfiYbjR
0e278amzYIZHqlvansWuhaUV2Resz7kCMD3CNkQemI4yIh4BFg0eEkaM59PIJ9d0
NE1IC4imeH6QiaIx7JFIANhGn55B7pVOng==
-----END CERTIFICATE-----

Related Certificate(s):

ID      Subject          Issuer           Expiration Key Identifier   Relation   
        nextdns.io       E1               2023-12-29 052C0EE33A94D6D… This Cert
        --------------------------------------------------
13314   E1               ISRG Root X2     2025-09-15 5AF3ED2BFC36C23… Parent Cert
32354   nextdns.io       E8               2026-04-08 4D892729BCEA60F… Same Subject

Public Key Detailed Information:

Key Details:
   Type: EC
   Size (bits): 256
   Curve Name: 
prime256v1
   Curve OID: 
1.2.840.10045.3.1.7
   Public key (x): 
202dd5af55f5bb018ced2d67ef58a131cdfff8b8bcc37ff112d54195e8c74481
   Public key (y): 
18477f6463ba6c5ec6fdc2746d0b3cd71e95d1cf4fc2b5947b4345caaf6c064d

Public Key in PEM Format:

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEIC3Vr1X1uwGM7S1n71ihMc3/+Li8
w3/xEtVBlejHRIEYR39kY7psXsb9wnRtCzzXHpXRz0/CtZR7Q0XKr2wGTQ==
-----END PUBLIC KEY-----

Identical or Similar Keys: We found that the public key in this certificate matches key(s) recorded previously.

ID      Type Size Pri/Pub Key Identifier   Date       Comparison 
21621   EC   256  Public  052C0EE33A94D6D… 2023-11-13 Same Key ID