www.fixop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:03:40:bc:a1:f0:89:36:0e:75:f3:69:11:a0:3b:14:c9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fixop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:03:40:bc:a1:f0:89:36:0e:75:f3:69:11:a0:3b:14:c9
Serial Number (int): 299793089074256269219599518340107382494409
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:3a:bb:12:72:8f:22:fd:d7:ce:9a:6d:1e:69:51:61:f3:5f:12:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:ee:d6:8c:38:48:83:de:06:aa:f4:bb:ca:8e:16:06:49:d1:f9:40
Fingerprint (sha256): 02:7e:3f:e6:38:cb:a5:e1:78:67:11:f7:f6:bb:f8:38:37:d8:4a:d8:6f:68:e4:79:99:05:87:d5:4a:99:d0:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fixop.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fixop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fixop.com

Other certificates including the domain name fixop.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fixop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299793089074256269219599518340107382494409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 03:01:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 03:01:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fixop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 648260097902861299835949341087252080626568058590393025675509962875203718661732658852294383472383641629871324869025773683075814083843643290438198793003917592764391821290476354018276270424359778465947015160987945794194652296451681089159940404463266566183883924513567662556301980252197326686209971482444128562653887558142040363200730855393474889919317615150165789197920030388430210655073023686648442524384724094312988236826609733898975976255991767639401254255726962023650920518212386699786540805641881357785998410135661679584825113844254797115031215151874062684608414033316796061802823855681212424540248314106894467411883832068474323181468987179290769898986023112587520631281874254499437801287673302410185444841345762589997508186577476516388068391603359465096092853914379670676607657543160927188808216895774253589798654783759189906293311478689418730484128231765764143133044107740085808013398672329746281649115945167104751760685265427230572794734650381167445272079404516320135884067797312219806712150678189303693644394314063486386281714349990974633642425567732587255243928516998688134255180279821207868400346752743402835701584417333452269175328278421846160658077022914015267906033843292928808740322649307101294603145262842833856091203337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							073abb12728f22fdd7ce9a6d1e695161f35f1236
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d47aeb9740000040300473045022100abf4287635fa4ff0e4aaa12f4e6ba3d1a43f7a6e286d17cdbbe5fcd1a8b2204b0220537f670eefc815e0ee3d4b8bdb12ee8d27bb369470b9bdc48bddfb33d696889600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d47aeb7190000040300483046022100a58c4ab5287c32ee837afbe8f46161a07d5bef647784651d8df4a08fb789d5b6022100c74ec5a139348d31fba511e7bd02180c4c2d54f28a12db55c29fdb7bc5df51cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00315528d9faa203836b49aabe80d5c2ec9f49e663834c528f285ab7ea7d5e018e12b4caf6926fa8372a77d964ee947fae53fac7c663ea5be572c2b35d9295ef674981d805bf18b61ce0a6039f1f05146d121774eef8e81b65329fb92ece723fcc4ef601c3d67d8d6500b037e47df0c61e5d1a9c535a189673d03135e7aa7d5174cdb8b69b5fd0658c4d2244cabbcbf50b51b1ab7692f39bcd4000c334104b5db93e4d5b743bd97660bba9fe031e4e358d8f8e76c9e6e9fa99bfdac47d046dc03729776fd5b91b188c6894bcb60d78f5916c7c70b0ad62b0a1445f01f60e079bc3c71ad7330b0b08332ea47bacd544adbe1111a62689fa4806bcda362b9b227993