www.cfuco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:f3:22:20:3c:4a:cb:79:52:97:4c:7c:ac:22:f1:50:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cfuco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:f3:22:20:3c:4a:cb:79:52:97:4c:7c:ac:22:f1:50:f6
Serial Number (int): 315424651363671886851647236428221432025334
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:80:ec:97:90:c3:55:91:17:38:13:54:f7:3a:48:27:7b:67:23:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:a7:fc:50:53:90:08:fb:1d:61:de:70:fb:4c:92:67:7c:65:b7:8e
Fingerprint (sha256): 2c:b7:70:fd:6e:f7:79:be:7b:b1:37:da:1c:5e:cd:13:a4:d6:80:5a:57:47:5b:8e:5d:2e:04:b5:e1:dc:fc:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cfuco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cfuco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cfuco.com

Other certificates including the domain name cfuco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cfuco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315424651363671886851647236428221432025334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 10:42:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 10:42:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cfuco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933681614316939533175807915085170806805606697170736012062611975082450417230559778208978094991874446523480315046873688125045609560770675280253817971997712533064500227717121155326622687041554746238433023387749568481310371714112111784991908728825599389561299852942859899466958082263962303803737282068991982011648500767376619227317375484536854510822120462407218649352618260248135177096574075528160393052197642925438440828449346505345511306981202700486259439068668006255366946813298457746179569405788589212300397592615777265753062664974918102906611402027076857389398474947561293978351419623864230135217063711145179417120700187817808719521335136562266766239853134382049891961515138259240212721969809705299357275459030980644568885904963192426765824957972113701697599434961378277473118662501498283555035696171560902994527565271434551769197410281795623245419627917496529866314062880169062905160414198725763359490877311026672084176614196153122482547303786797420154635315207068964048745084401651231313661343692445681446498862053935137324794932188590167338829265777190674559451587556667701797369370337366896442191796807817571795298876797090447139975120687209609496935600560394995826820967985356299833901322468800847053243012290141614398531235209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c80ec9790c3559117381354f73a48277b672319
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfuco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f472a6ae9000004030047304502206a0ef9e2c87960811d643f9e92b23f10fd004add39258c1c5abf042e07155590022100c28401d055649fb46dad93d56c92c02104185994f537e92de3b863ae6b8333a900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f472a6aec000004030046304402202267eb7ce007885ee81e6208c76ca1874d54e1fd8a5e5e3eb981105dbb6952ab022026e60839e3f1e7f576aedd903b805e3beb5646243d03066bfa4a391b4fb26597
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f0caecc5f5bfe5fb1837d374041fed9e06cf9ca3b7b2a12911e2b0dc2626a3c7267a3d1c0ce37e4d981a7640c3659ee1564dae2cfba305d6f9d7a7326a045f87ccebaf06572c3349542fbf9d8a15ed80c53bfcc8074ebebb59262c93c15a24bf82e71f890349c9ba6c03c013e76a02bb2001161cc4b14f9fa91ca81bdc04ce54622a26d0a62b72c1a9adb42211a86cf713a6e5cd56e620f353bfa964e87646449550a977155251463a8df6cedf698585af1aa1fd36b099500a88483c7028539968651da13aa1fa06b5a7dd7806b719e5283ce4201116cb418bbf34a5fc4b80f60be9919fb485cc5ec864718ebfa540262f1288a34c1cd2e6e937c762f3e5af0