www.cfuco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9e:f3:22:20:3c:4a:cb:79:52:97:4c:7c:ac:22:f1:50:f6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cfuco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9e:f3:22:20:3c:4a:cb:79:52:97:4c:7c:ac:22:f1:50:f6Serial Number (int): 315424651363671886851647236428221432025334
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3c:80:ec:97:90:c3:55:91:17:38:13:54:f7:3a:48:27:7b:67:23:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0d:a7:fc:50:53:90:08:fb:1d:61:de:70:fb:4c:92:67:7c:65:b7:8e
Fingerprint (sha256): 2c:b7:70:fd:6e:f7:79:be:7b:b1:37:da:1c:5e:cd:13:a4:d6:80:5a:57:47:5b:8e:5d:2e:04:b5:e1:dc:fc:8f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cfuco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cfuco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cfuco.com
Other certificates including the domain name cfuco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.cfuco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA57zIiA8Sst5UpdMfKwi8VD2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjcxMDQyMzlaFw0y MDAzMjYxMDQyMzlaMBgxFjAUBgNVBAMTDXd3dy5jZnVjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDk3Q49+z7Ai4sI8Q6THW24VMueiSAfRq7J Vxhv2Z8Xv2yAkBi1ULD++MCb6XH3khe9c09/WDdWt/TCxS6ZRpz3LA8QOx5/AHGQ N7+oeVlO/oKTrTSm8mE9unydksHzJr65FGBjonuYMnf39dDjHms8o+Aw2UBcKQ4h 0co6WukFA7SYRmKDeIzuo1YXIxt/7Hmy7cH4K+BZ7/roULpCVTgKalR1gkWsmdX7 46xBLH906w1F1ADwJ1lwh25KQhjErqQzovOew1uLvzMUPhKNSF4H7+TxQhJRt0h9 9W32yX0QPij0ctKK25VW9c5LTcN0dXvoO5vgJsyvrGvdTpszPVAFWfDYlTRCZ5gb Cztz1eX7DfKu/4GfRMvOm6XQBE07jm7i2b/idsCAYQM+EJ+RXRH0NrkhYmyWA6ZM mm8aV8I3AYNvGwkt4GVovFDydpsTsyuQ5HwBVIzkwHn0V6rQyo1jjV+eEbUyDgmT qlZvCAOqrC+AoKLVQ1mB9wT+gJZMB9V5zMdBg8zXFnhXGJWuwCCnOmKtNaIKhlQv HHDQSoNpCSSxppO3zEmNKW888Z+cmvXyVMYFQJ3IDeyC1S6oyZ3yT5RCaPNjaK+i NPu7Kc7hyDAL8zBPHHxuocXDCo8BCim7MBH7PHPUKDtEEfJflMvxaxDzNzjAE5d3 l6ALOVDtiQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ8gOyX kMNVkRc4E1T3Okgne2cjGTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5jZnVjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW9HKmrpAAAE AwBHMEUCIGoO+eLIeWCBHWQ/npKyPxD9AErdOSWMHFq/BC4HFVWQAiEAwoQB0FVk n7RtrZPVbJLAIQQYWZT1N+kt47hjrmuDM6kAdQAHt1wb5X1o//Gwxh0jFce65ld8 V5S3au68YToaadOiHAAAAW9HKmrsAAAEAwBGMEQCICJn63zgB4he6B5iCMdsoYdN VOH9il5ePrmBEF27aVKrAiAm5gg54/Hn9Xau3ZA7gF4761ZGJD0DBmv6SjkbT7Jl lzANBgkqhkiG9w0BAQsFAAOCAQEADwyuzF9b/l+xg303QEH+2eBs+co7eyoSkR4r DcJiajxyZ6PRwM435NmBp2QMNlnuFWTa4s+6MF1vnXpzJqBF+HzOuvBlcsM0lUL7 +dihXtgMU7/MgHTr67WSYsk8FaJL+C5x+JA0nJumwDwBPnagK7IAEWHMSxT5+pHK gb3ATOVGIqJtCmK3LBqa20IhGobPcTpuXNVuYg81O/qWTodkZElVCpdxVSUUY6jf bO32mFha8aof02sJlQCohIPHAoU5loZR2hOqH6BrWn3XgGtxnlKDzkIBEWy0GLvz Sl/EuA9gvpkZ+0hcxeyGRxjr+lQCYvEoijTBzS5uk3x2Lz5a8A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5N0OPfs+wIuLCPEOkx1t uFTLnokgH0auyVcYb9mfF79sgJAYtVCw/vjAm+lx95IXvXNPf1g3Vrf0wsUumUac 9ywPEDsefwBxkDe/qHlZTv6Ck600pvJhPbp8nZLB8ya+uRRgY6J7mDJ39/XQ4x5r PKPgMNlAXCkOIdHKOlrpBQO0mEZig3iM7qNWFyMbf+x5su3B+CvgWe/66FC6QlU4 CmpUdYJFrJnV++OsQSx/dOsNRdQA8CdZcIduSkIYxK6kM6LznsNbi78zFD4SjUhe B+/k8UISUbdIffVt9sl9ED4o9HLSituVVvXOS03DdHV76Dub4CbMr6xr3U6bMz1Q BVnw2JU0QmeYGws7c9Xl+w3yrv+Bn0TLzpul0ARNO45u4tm/4nbAgGEDPhCfkV0R 9Da5IWJslgOmTJpvGlfCNwGDbxsJLeBlaLxQ8nabE7MrkOR8AVSM5MB59Feq0MqN Y41fnhG1Mg4Jk6pWbwgDqqwvgKCi1UNZgfcE/oCWTAfVeczHQYPM1xZ4VxiVrsAg pzpirTWiCoZULxxw0EqDaQkksaaTt8xJjSlvPPGfnJr18lTGBUCdyA3sgtUuqMmd 8k+UQmjzY2ivojT7uynO4cgwC/MwTxx8bqHFwwqPAQopuzAR+zxz1Cg7RBHyX5TL 8WsQ8zc4wBOXd5egCzlQ7YkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315424651363671886851647236428221432025334 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 10:42:39 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 10:42:39 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cfuco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933681614316939533175807915085170806805606697170736012062611975082450417230559778208978094991874446523480315046873688125045609560770675280253817971997712533064500227717121155326622687041554746238433023387749568481310371714112111784991908728825599389561299852942859899466958082263962303803737282068991982011648500767376619227317375484536854510822120462407218649352618260248135177096574075528160393052197642925438440828449346505345511306981202700486259439068668006255366946813298457746179569405788589212300397592615777265753062664974918102906611402027076857389398474947561293978351419623864230135217063711145179417120700187817808719521335136562266766239853134382049891961515138259240212721969809705299357275459030980644568885904963192426765824957972113701697599434961378277473118662501498283555035696171560902994527565271434551769197410281795623245419627917496529866314062880169062905160414198725763359490877311026672084176614196153122482547303786797420154635315207068964048745084401651231313661343692445681446498862053935137324794932188590167338829265777190674559451587556667701797369370337366896442191796807817571795298876797090447139975120687209609496935600560394995826820967985356299833901322468800847053243012290141614398531235209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3c80ec9790c3559117381354f73a48277b672319 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfuco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f472a6ae9000004030047304502206a0ef9e2c87960811d643f9e92b23f10fd004add39258c1c5abf042e07155590022100c28401d055649fb46dad93d56c92c02104185994f537e92de3b863ae6b8333a900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f472a6aec000004030046304402202267eb7ce007885ee81e6208c76ca1874d54e1fd8a5e5e3eb981105dbb6952ab022026e60839e3f1e7f576aedd903b805e3beb5646243d03066bfa4a391b4fb26597 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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