DV SSL/TLS Certificate for fohcambodia.org

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the fohcambodia.org DV SSL/TLS Certificate

This certificate with serial number 06:38:78:f9:b0:dd:3b:bd:72:f2:a0:df:ef:91:39:e7:2c:10 for fohcambodia.org was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for fohcambodia.org provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:38:78:f9:b0:dd:3b:bd:72:f2:a0:df:ef:91:39:e7:2c:10
Serial Number (int): 541890331966778001714251599079402992249872
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 23:71:8b:f9:36:30:fa:28:f3:ef:71:47:75:43:cc:26:33:64:de:8e
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): b5:ad:28:ef:32:07:51:56:8d:9c:ef:03:cc:b0:1e:29:ee:ca:3c:a1
Fingerprint (SHA-256): a9:c1:92:e4:b8:06:7d:61:33:a3:8f:c3:ea:ea:22:3b:9d:0f:79:82:3e:76:3c:d6:de:b3:ea:22:4e:16:90:b3

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/17.crl

Check the revocation status for certificate fohcambodia.org
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for fohcambodia.org

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

fohcambodia.org

X.509 Certificate

The complete raw X.509 certificate details for fohcambodia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISBjh4+bDdO71y8qDf75E55ywQMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNjAyMDg1MzAxWhcNMjUwODMxMDg1MzAwWjAaMRgwFgYDVQQD
Ew9mb2hjYW1ib2RpYS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVnaHJeaRKQZTF/U6jfApRvlRdE8aCwwG/i7vzlgSIli7r11sXhqAxZlwEXusi
V+m0g/2AOUQblEgUcr1v9aPYhaDI97EbTGiKbqHMgEj2pt5LSXzfxqWGtPOZQVvM
cchFNuJujtmtMY4f0sm+5sdEbeRaVsdWwNwmexYQb5q7wczhx/A0TmMU8VHDC8hF
TcrjjiGNawHRkpYTQIuVLKa152kVGSTsmmN3MOhAwXzfQaxVIpO1sg3WwR39/Zem
vWK10hJ8Akd4TsLN4jcrLGkxJ+pXBkzBqNSEQFlKH+R3wyU6RtOpiO/GGbEqqnNv
7a5IlvkDpPEaUluun3iQe4mpAgMBAAGjggIfMIICGzAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFCNxi/k2MPoo8+9xR3VDzCYzZN6OMB8GA1UdIwQYMBaAFLu8w0el5Lyp
xsOkcgwQjaI14cjoMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDov
L3IxMC5pLmxlbmNyLm9yZy8wGgYDVR0RBBMwEYIPZm9oY2FtYm9kaWEub3JnMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTAu
Yy5sZW5jci5vcmcvMTcuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA7TxL
1ugGwqSiAFfbyyTiOAHfUS/txIbFcA8g3bc+P+AAAAGXMA2sJQAABAMARzBFAiEA
wy83Fcc/mZibHNUgTdAZnclMMfUg8C4IRKQEJEZOt80CIHYsZtbOg8Stzx17Rl8b
oW295RwZ5Eat14ylKMYtMu6sAHYAEvFONL1TckyEBhnDjz96E/jntWKHiJxtMAWE
6+WGJjoAAAGXMA2sLgAABAMARzBFAiEAj661Tf33r+MSJ4xaPVPUn7orCSCB9nXf
uCB5MGKfqpICIFlwyAQRAKyghJs+ywvT2FbqcwxWKNLzOGCqqXnYVxCqMA0GCSqG
SIb3DQEBCwUAA4IBAQDKn1ygvKLzt/tFZm7SEja0jixzt2PhZW4TOHOde4B+tDSR
lwmyu4zdFTsALXjT1k6pvjco5iHxZAvlx3VfgBaiihQ7xVe1KJmow+bOaLJ68BnQ
brYMjR3UnkoU6v/hS3SVHz7UoLkHJSkddRYzDD2LZNTCHc7B9qFpjFUicgkqV1bQ
SuqLKRihdG2BinA1QcrZPxkaC6RCPCoEeVtWjER+vIDTLfmtrhKmT/5TmBhVhCJS
P2oBvQBm4htdx9mhx+mSFbxgfPs0zUoMIe2N9vvalNovIXlig/RtH5ZHxuEjvnZl
Cw+vTF31hIr9lPiXRYfr1lHj3+WOTc0aOSGDTOQH
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ2hyXmkSkGUxf1Oo3wK
Ub5UXRPGgsMBv4u785YEiJYu69dbF4agMWZcBF7rIlfptIP9gDlEG5RIFHK9b/Wj
2IWgyPexG0xoim6hzIBI9qbeS0l838alhrTzmUFbzHHIRTbibo7ZrTGOH9LJvubH
RG3kWlbHVsDcJnsWEG+au8HM4cfwNE5jFPFRwwvIRU3K444hjWsB0ZKWE0CLlSym
tedpFRkk7JpjdzDoQMF830GsVSKTtbIN1sEd/f2Xpr1itdISfAJHeE7CzeI3Kyxp
MSfqVwZMwajUhEBZSh/kd8MlOkbTqYjvxhmxKqpzb+2uSJb5A6TxGlJbrp94kHuJ
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 541890331966778001714251599079402992249872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-02 08:53:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-31 08:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fohcambodia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18887238666618167506174614827984052147399586349489678264392709519417318877163926244523736171192227408736561870074076395299834819434208713410924759245172689304679900571656629224617526900213861756297121059997113309021006586313902971767094651936649286894191759282124391617329445723571092042589756249716628017554736606006349957957991981476573673742339961310615363538000663167898197272557531401211489439940830748042708560819208336684835754532376958132344542101487059704211206771675172269967362088932583170127847104692847971378674316609475874438748794919675109312073836549033332379997083163474705240134030902409385538718121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23718bf93630fa28f3ef71477543cc263364de8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fohcambodia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/17.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe000000197300dac250000040300473045022100c32f3715c73f99989b1cd5204dd0199dc94c31f520f02e0844a40424464eb7cd0220762c66d6ce83c4adcf1d7b465f1ba16dbde51c19e446add78ca528c62d32eeac00760012f14e34bd53724c840619c38f3f7a13f8e7b56287889c6d300584ebe586263a00000197300dac2e00000403004730450221008faeb54dfdf7afe312278c5a3d53d49fba2b092081f675dfb8207930629faa9202205970c8041100aca0849b3ecb0bd3d856ea730c5628d2f33860aaa979d85710aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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