fondep.gob.pe

Issued by R3

About this certificate

This digital certificate with serial number 03:57:4f:30:0d:90:38:04:1c:04:e9:d5:e9:6d:68:96:0e:c0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fondep.gob.pe

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:57:4f:30:0d:90:38:04:1c:04:e9:d5:e9:6d:68:96:0e:c0
Serial Number (int): 291046682234416120664966811609779548851904
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:75:44:de:b7:6a:c3:ff:bc:7a:7c:4b:93:16:b2:6d:97:87:bd:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:36:ad:4c:79:59:6d:9a:8b:0e:7c:7b:f6:65:ba:86:11:c6:f6:41
Fingerprint (sha256): 05:8d:9f:c6:d8:df:44:e5:37:4f:7d:c8:d6:73:2f:8b:5a:0c:c1:85:94:b0:ec:27:6a:77:ae:49:57:b9:b1:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fondep.gob.pe

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fondep.gob.pe

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fondep.gob.pe
www.fondep.gob.pe

Other certificates including the domain name fondep.gob.pe

(limited to 100 certificates)
web.fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
web.fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe

Certificate

The complete raw certificate details for fondep.gob.pe in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TTMdEqxOTvZYO3PBbdx
TPfkDzHSgDk+ctTli+N8Ug1xgOQlNxkA8WfrqDATI6kvm6VkOohYMHqedZ0YgCPh
1AVb71tv/3VvcVfc2WTHLGt3TyRZpv34uWTQqMbg9bdTzRRTDEwowILWe3cK+q/n
/HKXJ20Pjb9revmMu57MDrRxFlbcuzmwCWbm//9CPyjUfyZ5YQ0LFA+1TXZN8HQu
n811mHJHZbivDoi/jBd5aCv8Y840MzCY6qccNATHVZ446A/L6UxodnQqGO8A6/oA
rwSovevVBAFHo06F2zDA7SRfOyDDVRtEu7p7jcFNBsfT81jZYwFuUZJQSbdoeFY/
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291046682234416120664966811609779548851904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 15:19:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 15:19:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fondep.gob.pe'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28934607821656268441459407905112036896060187611426641736322673283974614260313180361204345890152162140672932851835475958451315721981204273660718396135666498069475926106371180469826451900920652440041802317684886347327427196171614664070258375817882170330136891273037919750494549319666697057264286636239261168736138954286038922699783120374125812860091095985227764303315280515743460376815692808330176819540478101097633139869136166347649258707351050763160663143857615475123130056220642944954013232960196204330672414304156889393136365974272751326537478568321155096063030502152257511626396760941428372116251659371605835267927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe7544deb76ac3ffbc7a7c4b9316b26d9787bdd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondep.gob.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondep.gob.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e148ffa6e00000403004730450221008cf590d1c1fa3d952523f167dad196fd62a4de6f1d05c9a9e3461a84c45d6de2022066810d2f0ac19c5f809b80372cf723fca1e186ed37ab9d40389ba53ecac0cb84007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e148ffab800000403004830460221008c3d9fb9c1081aa5fec7232b5a24724faa9f19e9ff216b1982159a1bc6a71379022100a58a1a0f080f1cb76e74dc351a0d927e2a353ec48d3f79f2ed9ac753877b5abc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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