www.fonzo.es

Issued by R3

About this certificate

This digital certificate with serial number 03:e8:1d:75:ce:a9:12:4a:f7:62:60:0e:e7:c6:33:48:8e:a9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.fonzo.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:1d:75:ce:a9:12:4a:f7:62:60:0e:e7:c6:33:48:8e:a9
Serial Number (int): 340321526223120273774602795897367195848361
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:3a:73:65:6b:b8:cb:cb:c1:6e:80:f4:cc:43:25:4f:34:a6:e0:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8d:ba:96:a1:28:e9:d4:1c:08:f3:f1:57:ca:bb:20:91:3e:88:fe:6f
Fingerprint (sha256): 3d:07:97:33:82:ba:16:df:35:7c:1b:12:06:32:59:c3:ec:35:96:83:c5:5f:11:72:0e:79:a8:8a:b4:46:66:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.fonzo.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fonzo.es

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fonzo.es

Other certificates including the domain name fonzo.es

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fonzo.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340321526223120273774602795897367195848361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 10:35:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 10:35:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fonzo.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824852368304344840805906460279449491350859666236576245157885325144631383656914258910147328901139920627222384349268502035368921696262481100280681645631679787727518292094352335233217047626903116803277119048357910635521967118317921633932040511110229019571061755649630848693994306471245157396239248833350295522350731183898930962290834290683834780995955361846433463973381598291973151468741501249254982910364587173084675076768033813897173448223509104709357590158990996417553160870888497680893348277718551221088088347000784481068232540294477454320071577801809261993120202906617620628888149289227360487283711192612300791303898099270130581795846376784796072020366518903089555081595149912682958656812248907516765867133820673128602062952465759639366892841419854793330337533710838149759438537474527900215575897949364483051140572049766405079174766890924777194306094063410878804018446404326016332043749897601903806499765264128623103666789744877666725900977964053595410967610169172815083352285353235273777756766343194947674655298499803146937501423936520883368212614786220551720926817600456834278608169470202836083104531505923583827587695388253523264603798114139198234418284323308416730759351212542833413143773665421876798645533890160332262127844279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f3a73656bb8cbcbc16e80f4cc43254f34a6e0a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonzo.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c81dc6c4b000004030047304502202e2eb42d5a7502fd4207de28a6665a9e8ac50ccc1f507006c340ba192a20d4770221009aee751a3c88d13a23f69989376dc9a29a72101e813ba045c27eef4e273b88a800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c81dc6ed50000040300473045022055e5470ff57f048025cda37c223939e5de070fcd0881c2dbb5f6ab705ff7b301022100ca5af13ea598462c81f83bbaca26b1d72d7df3e76a698d8698506766b9b5e392
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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