ffnco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:3c:fd:87:e3:31:f4:c4:97:15:2a:e4:44:fe:ae:49:23:0d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ffnco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3c:fd:87:e3:31:f4:c4:97:15:2a:e4:44:fe:ae:49:23:0dSerial Number (int): 369203085993371692309325591911458144854797
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d9:3e:d7:ed:55:e1:9f:03:58:82:a9:0b:2f:35:54:82:64:77:39:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 56:5a:52:6f:9b:40:6e:61:aa:49:f4:1b:3b:31:f5:2f:51:9f:9f:af
Fingerprint (sha256): 26:f5:2a:d0:c4:ab:33:d9:58:89:8e:30:85:9f:3a:15:4a:e6:14:23:4b:97:50:83:ec:64:b1:84:20:4a:36:07
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ffnco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ffnco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ffnco.com
Other certificates including the domain name ffnco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for ffnco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgISBDz9h+Mx9MSXFSrkRP6uSSMNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIyMjU3MjRaFw0y MDAxMTAyMjU3MjRaMBQxEjAQBgNVBAMTCWZmbmNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAPPoiNXdR9pqY8OCtppbT7E2fiJdoFTxMTfNe3d2 eZ2JvpD7YvQbehYW7s1ZbILlqcF/LQ0g5X2cbs31P5fOKcJBiR/KUrDte32jdVDz ROsfMboK6/N3EQ0IOoUsBz+wTttmRTKUQAL9+KTl/b3kkqX1oAOmU/1L8yKN8VNC PsFwqy33+Qm8cOY/15HzbVQiIfXiRjxUPgueUJrBqZl6N7VDJVnVbLt+TPDjEUrN H+5Y9mzBN3SWFIuaKcBjlGF575Bjnvyi773CwCdtzmQeFsyb8NsZ4s+OC29ww8S6 5Kr+H/Y78i9VtLsR4/CY6ZukuteBtmqq06jG085rKqlSqRNdSPPgLMx1sFGvDZVk llapjXs0IUXwgMTKh40fOqht8PPHbxq3IX++39qzj+ximAbNH+3DcRpz4gNRsYnn eYB9fzRK4cYv3jrui2pY5duVQgdMxqUYsENCCbQwtlaK9okN1UJUlk94D++5iM8f qlW9IJUghppZL0oedxShd9On5vcwAg+B7EP48E9WfG8tKZTjYbtpg5MQrO6BdFIg DHFjph9CKWrfqhn0k99RiKMqORG4T5aYRj+JyV5i0KrY2WnnKGREtcNdNPj7iZBD kzhowk7y3PMMp7NapghogRNxiJlXvCQOxN/ixOCKcDN2ZTEz4aQSYVHM1l6DhtBL mJBlAgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNk+1+1V4Z8D WIKpCy81VIJkdznzMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJZmZuY28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtwmfKzgAABAMARzBFAiEA waZicgPVzi0iG74CILGPtPVG4wenzCtgjDbjSwID5P8CIC61EDUB8u00+4NAt9UX xEWhnNsSijfn5af6ZdC2mxrCAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFtwmfK1wAABAMARzBFAiAZkkBoJtWi29FgECAZq2SgVxVPOljEVdDV KJhLNZn/zQIhAP/xljr+Yyvqz+TaCDTVB5hmhieyU67xxkPVX9Zo6patMA0GCSqG SIb3DQEBCwUAA4IBAQBVy9MHyxujbecci8ahl4qfV5Bz+fRDmItJhF9H4rNqKmdq JDG29GOo4nzxzc4TZ96Vmi8+U92l6u8lsRrdDOqkC4BqpDkp7OTmPPc/ymoYigUT VM+7AxhqWZ2QhOO+m9rqXPJJDI7Icd59aVB5iWZP5ySCjF3NgzG8OvtCkuxIZt19 hDwEWDWkleUbw1a3aNWB8ZvHqupS2ibFYImPtyC9Wk7Y4F0tEQAOIKQPj5q35Rpv 34XFttkFpEw++ep54hGjIMb3yEFQSFCKg4u2D8wSrqR6ZrEclWHTZ/VzLmfwryvX i7Vvkrk+o8W7Ns//twuFsmgRpLOA2wPCSpi7/Jk6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8+iI1d1H2mpjw4K2mltP sTZ+Il2gVPExN817d3Z5nYm+kPti9Bt6FhbuzVlsguWpwX8tDSDlfZxuzfU/l84p wkGJH8pSsO17faN1UPNE6x8xugrr83cRDQg6hSwHP7BO22ZFMpRAAv34pOX9veSS pfWgA6ZT/UvzIo3xU0I+wXCrLff5Cbxw5j/XkfNtVCIh9eJGPFQ+C55QmsGpmXo3 tUMlWdVsu35M8OMRSs0f7lj2bME3dJYUi5opwGOUYXnvkGOe/KLvvcLAJ23OZB4W zJvw2xniz44Lb3DDxLrkqv4f9jvyL1W0uxHj8Jjpm6S614G2aqrTqMbTzmsqqVKp E11I8+AszHWwUa8NlWSWVqmNezQhRfCAxMqHjR86qG3w88dvGrchf77f2rOP7GKY Bs0f7cNxGnPiA1Gxied5gH1/NErhxi/eOu6Laljl25VCB0zGpRiwQ0IJtDC2Vor2 iQ3VQlSWT3gP77mIzx+qVb0glSCGmlkvSh53FKF306fm9zACD4HsQ/jwT1Z8by0p lONhu2mDkxCs7oF0UiAMcWOmH0Ipat+qGfST31GIoyo5EbhPlphGP4nJXmLQqtjZ aecoZES1w100+PuJkEOTOGjCTvLc8wyns1qmCGiBE3GImVe8JA7E3+LE4IpwM3Zl MTPhpBJhUczWXoOG0EuYkGUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369203085993371692309325591911458144854797 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 22:57:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 22:57:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ffnco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 995059204028269403206300231012077898302340039354797918684241623667754986220201470365004292179843021041348753256430138597791571536435202943982720579154331122120673844353440041334708801472197987156492878779371588534394890699684119590009698929606446494822103201202652713896861564322786063778870659784912498606828459279860276206125621989466136444132975877645439083824451636434756853776466927781454503183721632784557604535534601948653554646944064351336887748047312847954586917270428777343643090032768416935115741442713410127493213169234097663271362229627705178289714181485952905351996598551599573284539271213305441743432146425187678785922050242968854907524902691948948694705919258657065432415793661520592529814208740475890988450465679633696581467928369771585016726133118232463782309543724445631565022188198451481718408974854323073222918064346173807904447214037404622287841545084165331021821520056443272125363683999355420722429045138090891193933062685869663014878468144309140016159996086554704137774859850793431979951136202266453240477680536238328347197065945493966926427944294378577517211139503775095447671740352298797995186921955776844335695214432467610317259538743888799065899333475733531667146020368518376227098842463848483034167283813 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d93ed7ed55e19f035882a90b2f355482647739f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffnco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc267cace0000040300473045022100c1a6627203d5ce2d221bbe0220b18fb4f546e307a7cc2b608c36e34b0203e4ff02202eb5103501f2ed34fb8340b7d517c445a19cdb128a37e7e5a7fa65d0b69b1ac2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc267cad7000004030047304502201992406826d5a2dbd160102019ab64a057154f3a58c455d0d528984b3599ffcd022100fff1963afe632beacfe4da0834d50798668627b253aef1c643d55fd668ea96ad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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