ffnco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3c:fd:87:e3:31:f4:c4:97:15:2a:e4:44:fe:ae:49:23:0d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ffnco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:fd:87:e3:31:f4:c4:97:15:2a:e4:44:fe:ae:49:23:0d
Serial Number (int): 369203085993371692309325591911458144854797
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:3e:d7:ed:55:e1:9f:03:58:82:a9:0b:2f:35:54:82:64:77:39:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 56:5a:52:6f:9b:40:6e:61:aa:49:f4:1b:3b:31:f5:2f:51:9f:9f:af
Fingerprint (sha256): 26:f5:2a:d0:c4:ab:33:d9:58:89:8e:30:85:9f:3a:15:4a:e6:14:23:4b:97:50:83:ec:64:b1:84:20:4a:36:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ffnco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ffnco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ffnco.com

Other certificates including the domain name ffnco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ffnco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369203085993371692309325591911458144854797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 22:57:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 22:57:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ffnco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 995059204028269403206300231012077898302340039354797918684241623667754986220201470365004292179843021041348753256430138597791571536435202943982720579154331122120673844353440041334708801472197987156492878779371588534394890699684119590009698929606446494822103201202652713896861564322786063778870659784912498606828459279860276206125621989466136444132975877645439083824451636434756853776466927781454503183721632784557604535534601948653554646944064351336887748047312847954586917270428777343643090032768416935115741442713410127493213169234097663271362229627705178289714181485952905351996598551599573284539271213305441743432146425187678785922050242968854907524902691948948694705919258657065432415793661520592529814208740475890988450465679633696581467928369771585016726133118232463782309543724445631565022188198451481718408974854323073222918064346173807904447214037404622287841545084165331021821520056443272125363683999355420722429045138090891193933062685869663014878468144309140016159996086554704137774859850793431979951136202266453240477680536238328347197065945493966926427944294378577517211139503775095447671740352298797995186921955776844335695214432467610317259538743888799065899333475733531667146020368518376227098842463848483034167283813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d93ed7ed55e19f035882a90b2f355482647739f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffnco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc267cace0000040300473045022100c1a6627203d5ce2d221bbe0220b18fb4f546e307a7cc2b608c36e34b0203e4ff02202eb5103501f2ed34fb8340b7d517c445a19cdb128a37e7e5a7fa65d0b69b1ac2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc267cad7000004030047304502201992406826d5a2dbd160102019ab64a057154f3a58c455d0d528984b3599ffcd022100fff1963afe632beacfe4da0834d50798668627b253aef1c643d55fd668ea96ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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