fan.news
Issued by R3
About this certificate
This digital certificate with serial number 03:b7:f0:86:76:e3:34:3f:12:7d:66:66:9a:44:cb:8f:a2:65 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fan.news
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b7:f0:86:76:e3:34:3f:12:7d:66:66:9a:44:cb:8f:a2:65Serial Number (int): 323928243839905197821856667228835855442533
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1a:56:78:44:e5:7a:f4:78:5e:b5:24:42:e5:21:40:22:48:5f:f3:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 75:c7:fc:af:d9:bc:f9:90:b1:5e:3d:a7:f2:b7:f6:32:25:71:72:46
Fingerprint (sha256): 2b:bb:e0:37:e9:dc:44:da:7e:a7:e9:57:5a:d9:de:65:43:10:e3:ba:0b:e7:45:91:57:d9:8f:7b:43:3c:6f:dd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fan.news
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fan.news
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fan.news
www.fan.news
www.fan.news
Other certificates including the domain name fan.news
(limited to 100 certificates)
Certificate
The complete raw certificate details for fan.news in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgISA7fwhnbjND8SfWZmmkTLj6JlMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA3MTYwMTMyMzdaFw0yMzEwMTQwMTMyMzZaMBMxETAPBgNVBAMT CGZhbi5uZXdzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2hzAyCM coxb0lsK1KBbtO4xaKXBBNLM+srvCezh7ytM35DKM8nE2IOCw0MQkNfyPpFx0JhN 73SImpn0gRTjpupjLvkVhaXCmrAW+AdgUqIMmtX1480qmR2O4SOltwV/MsAVqkkt lsd6J3PDZUUZ4oUHXyiYVpurOD6uc8Hv+yMGFQvAV9VIwtf3YT0jn7hDSUjGOfbg jragZB2g76RdnZjy3UEYpWhYRof6JaYTKJGhSoCglMW+Mpv4zrC1sHEzeTENP8KC sA4v+PyjgSq0KvbUSh2c/+ZdD86snmG1tIwbq119WwgF7cgNGr2dLN2LIpY3iUh/ q5TntxdJ8d+VYQIDAQABo4ICFzCCAhMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQa VnhE5Xr0eF61JELlIUAiSF/zVTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAhBgNV HREEGjAYgghmYW4ubmV3c4IMd3d3LmZhbi5uZXdzMBMGA1UdIAQMMAowCAYGZ4EM AQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAtz77JN+cTbp18jnFulj0bF38 Qs96nzXEnh0JgSXttJkAAAGJXIr1SQAABAMARzBFAiAJkAtpIMJiIFz3r8rRYUg9 /grwpEUfRp/xgW4sPP/jRgIhALO7HJCaG8RNeORNGyhtZSyRkRa9f4zcnz5t4UTM 8sfLAHUA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGJXIr1RgAA BAMARjBEAiAEmz7tfhwNxQ6cMY0wVK9Wk0OVKb3CJyZIZILDXlaDTwIgCbOyHwyA Twp6Y3mRLjFGf1AJ1B0FWCeP6Np3Y9faQCUwDQYJKoZIhvcNAQELBQADggEBAHBB tH3fcHZMlzx/zE02sYya1UyumL6DoiVWSKQ6SWic2Fd8cMRRmhpvqUeEKOvAOqIi CmGU5hKv9lQByBVkB4wyOiDxEIW3Gb8K4HLrjUcDl/4AMUSk+QXKVe3sGnZtqi+e ZEqC0abiGL1y9n4bTibv5SjXqQNOXGUwE9U0K78+eVQUS0/nYjoctQwQbuy5ZA3m pvG1D8fNjXd1cciXhnTdjwHNZJMuyjzA7+eWjXr4FbqLFPC1p8J3DuixT58OBzSi QBQjvkxyNcLKJBuY2ytaeDfpRpxcjXJ8m9vEQEE+tq4Zv9ks7M+CZ/1DRKbnvq8z JjFMUJGBp/Q3jo9LNnA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2hzAyCMcoxb0lsK1KBb tO4xaKXBBNLM+srvCezh7ytM35DKM8nE2IOCw0MQkNfyPpFx0JhN73SImpn0gRTj pupjLvkVhaXCmrAW+AdgUqIMmtX1480qmR2O4SOltwV/MsAVqkktlsd6J3PDZUUZ 4oUHXyiYVpurOD6uc8Hv+yMGFQvAV9VIwtf3YT0jn7hDSUjGOfbgjragZB2g76Rd nZjy3UEYpWhYRof6JaYTKJGhSoCglMW+Mpv4zrC1sHEzeTENP8KCsA4v+PyjgSq0 KvbUSh2c/+ZdD86snmG1tIwbq119WwgF7cgNGr2dLN2LIpY3iUh/q5TntxdJ8d+V YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 323928243839905197821856667228835855442533 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 01:32:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 01:32:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fan.news' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21638256002140042298732088660158261692060551873638920700687790711251329849804943184451066760301407776570437112890524382658114650035911216819518559213717857363106466069370538893121540623809549253383977918460287488144558921267171958356560507062643852160906362305095423138803258191325432749898991577299972869354359913336008067385897674448796526617779302429449883363824371883354710871708224380501148836879215384328910483983109411880473718939502201351162628307762706453584309791380722597626522801476791987770060766201894947418614880675706762322441670337918896524094163706420250642379438575820086392333765610355451710379361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1a567844e57af4785eb52442e5214022485ff355 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan.news' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fan.news' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001895c8af5490000040300473045022009900b6920c262205cf7afcad161483dfe0af0a4451f469ff1816e2c3cffe346022100b3bb1c909a1bc44d78e44d1b286d652c919116bd7f8cdc9f3e6de144ccf2c7cb007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001895c8af54600000403004630440220049b3eed7e1c0dc50e9c318d3054af5693439529bdc22726486482c35e56834f022009b3b21f0c804f0a7a6379912e31467f5009d41d0558278fe8da7763d7da4025 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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