fancom.com

Issued by R3

About this certificate

This digital certificate with serial number 03:03:39:27:71:de:9a:b8:e4:93:67:ee:3b:94:90:f0:0b:ea was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fancom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:39:27:71:de:9a:b8:e4:93:67:ee:3b:94:90:f0:0b:ea
Serial Number (int): 262433675700929599897382307567698074143722
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:30:d9:bf:e5:da:43:8d:d3:e8:88:50:de:6d:56:f8:c2:2c:6d:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:21:37:7d:13:d8:64:7c:ab:bf:0b:70:66:64:67:78:45:a3:f1:f2
Fingerprint (sha256): 22:8a:04:2a:24:ad:58:fb:54:63:5b:3b:1a:fa:a4:b8:ea:d9:f8:44:b2:4e:64:2f:be:e5:98:18:92:ea:e2:3b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fancom.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fancom.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fancom.com
fancom.es
fancom.nl
fancom2022-es.fastforwart.nl
old.fancom.com
old.fancom.es
old.fancom.nl
www.fancom.com
www.fancom.es
www.fancom.nl

Other certificates including the domain name fancom.com

(limited to 100 certificates)
assistenza.edilbruny.it
fancom.com
asup.fancom.com
assistenza.edilbruny.it
fancom.com
fancom.com
fancom.com
fancom.com
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
fancom.com
asup.fancom.com
fancom.com
portal.fancom.com
support.portmanlights.com
helpdesk.itconsulting.cologne
portal.fancom.com
asup.fancom.com
assistenza.edilbruny.it
fancom.com
fancom.com
fancom.com
fancom.com
fancom.com
assistenza.edilbruny.it
hseq.naturalpower.com
fancom.com
portal.fancom.com
fancom.com
support.ti-medi.com
fancom.com
portal.fancom.com
hseq.naturalpower.com
support.les7royaumes.com
fancom.com
*.fancom.com
fancom.com
assistenza.edilbruny.it
fancom.com
support.skorfactory.com
hseq.naturalpower.com
asup.fancom.com
fancom.com
helpdesk.itconsulting.cologne
support.completelostpropertyservice.com
fancom.com
hseq.naturalpower.com
portal.fancom.com

Certificate

The complete raw certificate details for fancom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262433675700929599897382307567698074143722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 03:11:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 03:11:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fancom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853386734788558375775060791384357427573788387027588309943380658815354230254290038521741973941420882998077503163388001336956810887649966224590521130345851932306979948205837273951414749861606327262785481035994021736152498992447750850876072889818854934887271697336985782820316212445955635043372252132212746298009916461112609728408363675518183717509121011837630377835462934998315525640453407498526585935494583713694723427449211471103767409354984570154838852467171892365191869167795372303866081332052255144874271741002029250456854401094343300084542684800224153678489836914520501588428928617369154945049638172164500652876873578463240564513172033157261647601697231300482893560783474332984773906549763437375501497466041407812861633926821281544030414715006475733863799123886547808365962067964786777466308341822514283482883306997820593580865702349574660797670634617130736324960026239258543300407595256506002818223422563545542746576677164268216082218019939848712702238405720227504301794947234815267127742034053426807049088235936820960810609835093242221987125765458646353135932457860759593740724368049530016292986507012737599553888982102509325037305396934710113998457934544147716127976119618128963131776824960396878753794511443463065231779205211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f30d9bfe5da438dd3e88850de6d56f8c22c6d25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom2022-es.fastforwart.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018af8e23a70000004030046304402204ffc4da699d84de7c2850a598b865accf6f473c762b0dfd0544fb278dd7b4a930220490930f999f356daf3b734614db671c034b1f188d4748715e2ee0141a8908a3800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018af8e23ab6000004030046304402205466f91c54c9cfb62dd001e9febd263ff109165de7db43db0acbb2112959807a022030e1bac16fe28bea2ac0aefd53e45bf2b5303735197a5cbd086c8d68b6adb838
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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