fcer.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:95:66:56:85:d7:31:c9:f1:6c:16:30:f6:a7:e1:79:eb:e5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fcer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:66:56:85:d7:31:c9:f1:6c:16:30:f6:a7:e1:79:eb:e5
Serial Number (int): 312174960974210407536020914154806105992165
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:cf:56:c3:3b:74:dd:b8:4b:bc:67:50:be:ba:13:55:25:8c:72:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:35:38:74:d9:0e:7f:b1:54:c2:86:e3:87:80:ff:8a:0b:3f:66:5a
Fingerprint (sha256): 29:a6:78:2b:dd:c9:59:67:86:fd:08:7b:9d:5b:6d:4d:fd:b7:66:cd:c5:d0:a3:c9:4c:79:b7:90:a8:9f:2f:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fcer.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fcer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fcer.com
www.fcer.com

Other certificates including the domain name fcer.com

(limited to 100 certificates)
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fs.fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
bmw.fcer.com
fcer.com
mail.fcer.com
fcer.com
*.fcer.com
mail.fcer.com
fcer.com
fcer.com
autodiscover.fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
mail.fcer.com
fcer.com
fs.fcer.com
mx.fcer.com
fcer.com
mail.fcer.com
mail.fcer.com
fcer.com
fs.fcer.com
mail.fcer.com
fcer.com
fcer.com
fcer.com
mx.fcer.com
*.fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
www.fcer.com
fcer.com
fcer.com
mx.fcer.com
fcer.com
fcer.com
fcer.com
fs.fcer.com
mail.fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
mailarchive.fcer.com
fs.fcer.com
fcer.com
mail.fcer.com
fcer.com
mail.fcer.com
fcer.com
fcer.com
fcer.com
*.fcer.com
fcer.com
secure.fcer.com
fs.fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
fcer.com
mailarchive.fcer.com
fcer.com
mail.fcer.com

Certificate

The complete raw certificate details for fcer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISA5VmVoXXMcnxbBYw9qfheevlMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA3MDIxNjIyMDBaFw0x
NzA5MzAxNjIyMDBaMBMxETAPBgNVBAMTCGZjZXIuY29tMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEA25/vYUmzsBYNG/JdofG9tExgELLgqkC5D3szxB+y
UHkY/LRHfQx18S6F7FZrjsCR2iHKIyyAivK47N4r9K7HKl17QstmwrU5erAMl1iT
7Fuie9buTe85Fmul59tLm04KTYOvpVYq+qZHShnNaEDwmVsLtETMVju0WYW0fZrQ
qhNpR1+951NucgikTqtg3b1tE09/TCrSvR6CULkFY7S7dSgSuj2AcXTC8OLCtDiK
ApOk6ZDKd3QLiXJlSdvyR8gImwY90reFot+y/MWqfyy/iBqD08PYrZdIw7/JhQhy
mtcaW1RGHDCJ8tlFZZtko8IwbaHnxbdRY2YYSJOqnBmCRPIq31bQHAcliY5LVz4u
4BtiNuaL22A2iQpiTei7KsMBoWRjp/0BWm4HkCWtXz2HUEqLaY/R6oI+WqytRPxy
tdUw9B7/WqK+dAiaKdK/hb60gqo9hJXG4l+5OlQeVy70sZaePaXoUozfkjymrsZA
3Cqr6RWGhcgKkotXdfVlgm2WQ3QJLmX2LTUZx8P+sHQ+/S9OO5LI7CXiiNgnmws3
pgK2QnnV/40Ck90VhM0/BwpW0cOzCEaycpVLhzQZy+AQ54hLNAXBuIT6ZSlb1z/O
fr1JRs0saanSe/ERmTgFaFJm/zbJS435gYlLmnf3MHUEEhGbzK9PdtQOr/nnuCVZ
FUsCAwEAAaOCAhYwggISMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUy89Wwzt03bhL
vGdQvroTVSWMcpMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYgghmY2VyLmNvbYIMd3d3LmZjZXIuY29t
MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwIC
MIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBi
eSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRo
ZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlw
dC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBADBIq60qoBUitkej
n8Ag6nxStPaVrw7Pk9II7HgApA5mgrDeohkm6lBcFl5CM3lQmK97/JV5HmxrRw8A
NCVb3qR6UOJoHIKr2CicHs1cywt+gFLIOd8cLiAg0yBf6B/90gIItG0+HHHshKji
6VW4sXDV4SaEn/CyIS5GrdvKhwDv5l3KNXJd8vbi2PRUGRPFHwZsz0wi8ME6/tDP
G7ZMzhv+wW9zJ0nO5teMThDwaKWtTir5AzddZBixahjieF8esvA7BtNkrx2sFLl/
VUfHPt9kfOPhVmlPCGwEUgT+KC6fQ6yfCadHsIqVLg/oKbScmRLBKD6IsY33xkse
upipwPE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312174960974210407536020914154806105992165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-02 16:22:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-30 16:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fcer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895990793838722847472771591757841203090976476881211287689613766104206879916784897642123080854992461753601320852199461793296904345655189805189072830533417594248485507487740679603226481765460310862325015087219147522027014984642360004458709291677454426355598217401657780620490899797688289851438106258479281373741549555268566155503425304977415454135332350184475411757172768965116438152666282505819906518680515822953878930132678550676891764552568736051266055510079464538905958181770417296630675776977054662721164744376099816400677118755379786491059723010294527420494229368787234860582912532518521513282622206089145229522366791547711782471976376959905244034507887342113379496247881058286807756451982019588438828557952098147755688197786729674201618680631694293340279530981330948766312995912422109497989866011450359160385364074412428949949563837886637769662553691114587841198282578977393453103993759184176780381659572906611068985838217591978029963697892475495233794039082870357835954620689327531858360764650612258287362682081496891960817524012875520797823548091276130307984309102547257368222552794503538705649023260115435010358712080294531465818339033400001760864693942733378570942921021016862051047504196102923814895202090095552153165305163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbcf56c33b74ddb84bbc6750beba1355258c7293
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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