found.design
Issued by R3
About this certificate
This digital certificate with serial number 04:6d:78:af:3c:4b:23:2a:89:9e:93:a9:b5:8d:92:9a:07:ab was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=found.design
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:6d:78:af:3c:4b:23:2a:89:9e:93:a9:b5:8d:92:9a:07:abSerial Number (int): 385700338955765284411374535504468014401451
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 55:98:93:ab:35:58:e8:8f:d9:9d:19:7c:99:28:e5:a4:4a:ad:d1:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c9:ba:95:26:a2:c8:64:8c:40:14:4e:76:0a:80:3e:cd:08:bc:89:a6
Fingerprint (sha256): 1b:02:e9:c7:70:43:d9:09:27:db:cc:aa:a5:50:a3:43:d2:d5:0c:f3:ca:19:f3:16:9d:6f:0a:7f:b1:36:81:96
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate found.design
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for found.design
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
found.design
www.found.design
www.found.design
Other certificates including the domain name found.design
(limited to 100 certificates)
Certificate
The complete raw certificate details for found.design in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISBG14rzxLIyqJnpOptY2SmgerMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA1MjIwNzUyNTBaFw0yNDA4MjAwNzUyNDlaMBcxFTATBgNVBAMT DGZvdW5kLmRlc2lnbjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANud Pr86nlXDvbc8viyMlUK7EG6A0FUyB7i95bTDv3/MjUsE661ptA+mfep6zr4bpy4H zHw5F+WlTVzXnNYONFBltWs2k1QA9ntC9MLvLYeG5yC3n8LJ3XVzoyxGHKR7kaAU wofN2rcBgWeKyjKLW1Phib/umq2eP5Ir7QKLsdWmpjphqrpBv8thA1isjLagb70E GRDRRg03ihBoTwGMGUFCm48b0dK5Ua8ErsQVSnRC6IIBkZPZmqBo8vXaTCClh8VB 3yVQEX2UTlI42lMZl86Wd00Tr+CEdcDfT9Y0duvlBLWt34R09KpG1MgphULRoNc4 TaOi+btnVoYFyYpz7cIl1rAn6xrXGplObIgJ7tXsf+6iEByquvq4aurJvkcUj7xe vWGS+goAs0xqkiicDhjTdpMQ/9QtgsCo2aWk2UuLy9rOU0SFwpiRSbIG3jr9qDvU t9WLN8Q3dDRfz9J9QPbrJ9OmVF/bm4e/sHBKmHdyKVslKj3SVtPrDWbFoJUQLQfA w4XwmsFkfSalH1lNxgMrnJYMV2CnBcGg6LmMCs7AJKS6LRJMyaDUGZSNPQwCnIye K4lu2pVPtDo+ymXQCAM7+Vdo9qcANAhjIMMotdn3RjEL84lncqPAsKFGLlOikXDX QFIyz4+AjptCnx7yKs93y7my0hn0AdGElchW7kMRAgMBAAGjggIgMIICHDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFFWYk6s1WOiP2Z0ZfJko5aRKrdFEMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDGZvdW5kLmRlc2lnboIQd3d3LmZv dW5kLmRlc2lnbjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB2ABmYEHEJ8NZSLjCA0p4/ZLuDbijM+Q9Sju7fzko/FrTKAAABj5+A 0SQAAAQDAEcwRQIgVP7dCFrdz/WROKry4vgJizMNgjQHUGeZIZmEAdIAkp4CIQC0 OOcJWiGNM6gZXYMCZuOHX27tUiBSX7PjNb3Dw6SdNAB2AO7N0GTV2xrOxVy3nbTN E6Iyh0Z8vOzew1FIWUZxH7WbAAABj5+A0RsAAAQDAEcwRQIgW7z/++aeUMllj+Fr C9BI7qPTOTcpw6sCflYwNHXirLYCIQDMzk1lrMAhL3cc8MxyXszrzjNRtWaXQUyZ tnEdhFeRJDANBgkqhkiG9w0BAQsFAAOCAQEAZekkDSBAOwflBVTpNM4dxKOHm9FA Wr6/7M67HN3m26ueKvuX/oj4bWahB7WG8jgCTX8uTZymR4XiKSHREQgRnK6uLec6 nQVdWhQ8eCFjTFfF7x/EZizbq1kOE2sVz3qdhHukrPXuKJFq0XvnmVDmNDIV2EQP OtcAMs04VZM6TNBbTZ6zV4G03gaBpz2S0u8++qXYRnUa9IdeWwZ/g1LKNItDsIp9 rOiKcvkVqctNKrRUcUIgM2FWb1NKHb467zgHHu2+cAyYnANUKyqTJxC9MPFCdj1M FzSzthesDWaT8Dmknnqh1lsLBNP3H2dr2klbQ/+dDL7VkyCVvfxDT9jG5g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA250+vzqeVcO9tzy+LIyV QrsQboDQVTIHuL3ltMO/f8yNSwTrrWm0D6Z96nrOvhunLgfMfDkX5aVNXNec1g40 UGW1azaTVAD2e0L0wu8th4bnILefwsnddXOjLEYcpHuRoBTCh83atwGBZ4rKMotb U+GJv+6arZ4/kivtAoux1aamOmGqukG/y2EDWKyMtqBvvQQZENFGDTeKEGhPAYwZ QUKbjxvR0rlRrwSuxBVKdELoggGRk9maoGjy9dpMIKWHxUHfJVARfZROUjjaUxmX zpZ3TROv4IR1wN9P1jR26+UEta3fhHT0qkbUyCmFQtGg1zhNo6L5u2dWhgXJinPt wiXWsCfrGtcamU5siAnu1ex/7qIQHKq6+rhq6sm+RxSPvF69YZL6CgCzTGqSKJwO GNN2kxD/1C2CwKjZpaTZS4vL2s5TRIXCmJFJsgbeOv2oO9S31Ys3xDd0NF/P0n1A 9usn06ZUX9ubh7+wcEqYd3IpWyUqPdJW0+sNZsWglRAtB8DDhfCawWR9JqUfWU3G AyuclgxXYKcFwaDouYwKzsAkpLotEkzJoNQZlI09DAKcjJ4riW7alU+0Oj7KZdAI Azv5V2j2pwA0CGMgwyi12fdGMQvziWdyo8CwoUYuU6KRcNdAUjLPj4COm0KfHvIq z3fLubLSGfQB0YSVyFbuQxECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 385700338955765284411374535504468014401451 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 07:52:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 07:52:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'found.design' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895947926136887087899222946171397477619524815194210742838153350501899624937374344273891041457375753316516779649825436857558037329871637255374510447533907187396116026404437510145096111443253294657225822833146698974261207042337665737926105679410000798278581254989545998638789535614113041427874659271742202010166742006835464659996873649909901436398338735495521349390815138087705459129970525841091407336715712860455348797651547962775665268873176018320070116597064378385334091141532625231388086060155297648204397922743109265378252308403845445421952028192375558686565165712497501203529189837042440181718086760423105708869718105007622843908994060790153063725442340922514388068007787691128705893026996556922259766181007826427658432370235096580796506979965792134752250997415278401007892471882726292717050936405578359142740752539018682212481287831699804021891260611050498760915198050736208716704833181640027248852292691413291902850593138355998493877377036510638777570793592411355674485690053789733253538099083495474962249217150980234444391052559174364874116938199075090018089591494319252344824179297480518788206540448093903289148961693049296555730794838246175365365955244735334283335624775595558268270853113711819331567362999357702026256335633 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 559893ab3558e88fd99d197c9928e5a44aadd144 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'found.design' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.found.design' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f9f80d1240000040300473045022054fedd085addcff59138aaf2e2f8098b330d82340750679921998401d200929e022100b438e7095a218d33a8195d830266e3875f6eed5220525fb3e335bdc3c3a49d34007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f9f80d11b000004030047304502205bbcfffbe69e50c9658fe16b0bd048eea3d3393729c3ab027e56303475e2acb6022100ccce4d65acc0212f771cf0cc725eccebce3351b56697414c99b6711d84579124 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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