www.fixop.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:71:03:40:bc:a1:f0:89:36:0e:75:f3:69:11:a0:3b:14:c9 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.fixop.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:71:03:40:bc:a1:f0:89:36:0e:75:f3:69:11:a0:3b:14:c9Serial Number (int): 299793089074256269219599518340107382494409
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 07:3a:bb:12:72:8f:22:fd:d7:ce:9a:6d:1e:69:51:61:f3:5f:12:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 83:ee:d6:8c:38:48:83:de:06:aa:f4:bb:ca:8e:16:06:49:d1:f9:40
Fingerprint (sha256): 02:7e:3f:e6:38:cb:a5:e1:78:67:11:f7:f6:bb:f8:38:37:d8:4a:d8:6f:68:e4:79:99:05:87:d5:4a:99:d0:4c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.fixop.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.fixop.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.fixop.com
Other certificates including the domain name fixop.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.fixop.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISA3EDQLyh8Ik2DnXzaRGgOxTJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTkwMzAxMzVaFw0x OTEyMTgwMzAxMzVaMBgxFjAUBgNVBAMTDXd3dy5maXhvcC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCe5rEvwWukqofE6NhwjUHF0CQvGJ4dXLou qzVryRLxOxVGX08e4Yg1WMPx29V5bAWObkLSKJGKNj00ibPLupBO3bIHt2QgohzF q3Q1XVRENE45vuwu3/k82zv9wrf+osfIalnAHbhpiXpwsrF/wke1RyEcxNlCgiC9 oIfg5E8lTEmFxUpRJ7JQgMDpufb5a/h7yWVk8Lfxj49G5p7faZz/ts2sDEiWL3X7 PTWNkQvZdG3A4iSKCnPRg//fwK9blb9Y5QX2yili6rBWBg4yfFlQQtQM46x4W6Wv eJdTMObWFulucZjE7rM2uzuqEZuQ7KrdKqzWR7mcLTJWIMox6PtkCuRGY5LZCi7U mKUCxViCFY+Le+AgqcEX7uu6JWYztnxyB2714ejPt3JabyWBp8xdF8sVHqwRwf56 w9lN4x6wWsYSvO/UitHfDhCzl85Y7ZX6f/fbAeRB2wIk/1A8hEN3SXXxaxDCZlLP 1jQ/Mb67znDJyCsb+HwGuRegF/F76yXVe5mckDoW0gLmdzm++xXpGC/s0t8F7ARK FtoGFvGo3EsepezxOfGtqBlY6KKq2PfJ0sOAXUL/C0MN1u0gMtwoCIrybAUlnv9u /NZLZaLuQK0jb0bBNOdXt3B2SNKTqL+RB4J8MYpzNVi3vdS7EXVwM/VVtpylqNB2 x+KDiPUnCQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQHOrsS co8i/dfOmm0eaVFh818SNjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5maXhvcC5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAW1Hrrl0AAAE AwBHMEUCIQCr9Ch2NfpP8OSqoS9Oa6PRpD96bihtF8275fzRqLIgSwIgU39nDu/I FeDuPUuL2xLujSe7NpRwub3Ei937M9aWiJYAdwBj8tvN6DvMLM8LcoQnV2szpI1h d4+9daY4scdoVEvYjQAAAW1HrrcZAAAEAwBIMEYCIQCljEq1KHwy7oN6++j0YWGg fVvvZHeEZR2N9KCPt4nVtgIhAMdOxaE5NI0x+6UR570CGAxMLVTyihLbVcKf23vF 31HPMA0GCSqGSIb3DQEBCwUAA4IBAQAxVSjZ+qIDg2tJqr6A1cLsn0nmY4NMUo8o WrfqfV4BjhK0yvaSb6g3KnfZZO6Uf65T+sfGY+pb5XLCs12Sle9nSYHYBb8Ythzg pgOfHwUUbRIXdO746BtlMp+5Ls5yP8xO9gHD1n2NZQCwN+R98MYeXRqcU1oYlnPQ MTXnqn1RdM24tptf0GWMTSJEyrvL9QtRsat2kvObzUAAwzQQS125Pk1bdDvZdmC7 qf4DHk41jY+Odsnm6fqZv9rEfQRtwDcpd2/VuRsYjGiUvLYNePWRbHxwsK1isKFE XwH2Dgebw8ca1zMLCwgzLqR7rNVErb4REaYmifpIBrzaNiubInmT -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnuaxL8FrpKqHxOjYcI1B xdAkLxieHVy6Lqs1a8kS8TsVRl9PHuGINVjD8dvVeWwFjm5C0iiRijY9NImzy7qQ Tt2yB7dkIKIcxat0NV1URDROOb7sLt/5PNs7/cK3/qLHyGpZwB24aYl6cLKxf8JH tUchHMTZQoIgvaCH4ORPJUxJhcVKUSeyUIDA6bn2+Wv4e8llZPC38Y+PRuae32mc /7bNrAxIli91+z01jZEL2XRtwOIkigpz0YP/38CvW5W/WOUF9sopYuqwVgYOMnxZ UELUDOOseFulr3iXUzDm1hbpbnGYxO6zNrs7qhGbkOyq3Sqs1ke5nC0yViDKMej7 ZArkRmOS2Qou1JilAsVYghWPi3vgIKnBF+7ruiVmM7Z8cgdu9eHoz7dyWm8lgafM XRfLFR6sEcH+esPZTeMesFrGErzv1IrR3w4Qs5fOWO2V+n/32wHkQdsCJP9QPIRD d0l18WsQwmZSz9Y0PzG+u85wycgrG/h8BrkXoBfxe+sl1XuZnJA6FtIC5nc5vvsV 6Rgv7NLfBewEShbaBhbxqNxLHqXs8TnxragZWOiiqtj3ydLDgF1C/wtDDdbtIDLc KAiK8mwFJZ7/bvzWS2Wi7kCtI29GwTTnV7dwdkjSk6i/kQeCfDGKczVYt73UuxF1 cDP1VbacpajQdsfig4j1JwkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 299793089074256269219599518340107382494409 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 03:01:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 03:01:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fixop.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648260097902861299835949341087252080626568058590393025675509962875203718661732658852294383472383641629871324869025773683075814083843643290438198793003917592764391821290476354018276270424359778465947015160987945794194652296451681089159940404463266566183883924513567662556301980252197326686209971482444128562653887558142040363200730855393474889919317615150165789197920030388430210655073023686648442524384724094312988236826609733898975976255991767639401254255726962023650920518212386699786540805641881357785998410135661679584825113844254797115031215151874062684608414033316796061802823855681212424540248314106894467411883832068474323181468987179290769898986023112587520631281874254499437801287673302410185444841345762589997508186577476516388068391603359465096092853914379670676607657543160927188808216895774253589798654783759189906293311478689418730484128231765764143133044107740085808013398672329746281649115945167104751760685265427230572794734650381167445272079404516320135884067797312219806712150678189303693644394314063486386281714349990974633642425567732587255243928516998688134255180279821207868400346752743402835701584417333452269175328278421846160658077022914015267906033843292928808740322649307101294603145262842833856091203337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 073abb12728f22fdd7ce9a6d1e695161f35f1236 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixop.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d47aeb9740000040300473045022100abf4287635fa4ff0e4aaa12f4e6ba3d1a43f7a6e286d17cdbbe5fcd1a8b2204b0220537f670eefc815e0ee3d4b8bdb12ee8d27bb369470b9bdc48bddfb33d696889600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d47aeb7190000040300483046022100a58c4ab5287c32ee837afbe8f46161a07d5bef647784651d8df4a08fb789d5b6022100c74ec5a139348d31fba511e7bd02180c4c2d54f28a12db55c29fdb7bc5df51cf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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