fizyr.com
Issued by R3
About this certificate
This digital certificate with serial number 04:00:c7:fd:55:14:84:23:35:7f:4e:2b:6f:c4:0b:fe:9e:28 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fizyr.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:00:c7:fd:55:14:84:23:35:7f:4e:2b:6f:c4:0b:fe:9e:28Serial Number (int): 348714975474937668303604643487276825746984
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 55:0f:fd:83:31:9a:4b:7b:26:a9:2a:dd:da:f9:78:38:e6:2e:11:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 29:56:72:bc:96:93:eb:eb:8d:39:3d:5b:ee:fc:6e:a4:bd:e2:2a:52
Fingerprint (sha256): 41:b0:d2:c2:7d:a5:3b:e2:99:95:fe:75:76:8c:ac:7a:eb:6d:3b:72:57:ab:ef:58:fc:97:36:64:0a:a8:56:ad
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fizyr.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fizyr.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.fizyr.com
fizyr.com
fizyr.com
Other certificates including the domain name fizyr.com
(limited to 100 certificates)
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
Certificate
The complete raw certificate details for fizyr.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISBADH/VUUhCM1f04rb8QL/p4oMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMjAxNTMyNTFaFw0yNDA2MTgxNTMyNTBaMBQxEjAQBgNVBAMT CWZpenlyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMb+GgIJ c5pMu/Mlgct0YVXLY1OWGwOaEBpev9+tC+eajhzWns0dL3TvCjwOXA6fz7eSH6Dw HU7IYVgi/CPY53zdnuWfdJq4LdPrpOj+wkqsSjIXfdL3pDQ6+mgWu1Zx4Ec1KsVL 3Fgv5zPGqvDFGr04hEqPJGluavUVzEJe5tMxbZpPDujvOacgBz4FgDtLnWrIbnq/ WBQijeeUF2yk27KvFbALgs0DcOUnNXaYrZIJuZX+p3ICdj5X/Ax6BoetDyaGG9d0 50BeY8IkzB29b6+rcknzjyQiLc/mMnJqpmXRAjDuX+IEeGPuND1yFHf8MwTsFb97 2ebQXVZJOAChiPA/jtqiWbCj+BOSxFPCiJwOhPhTMEbpnhWtKzJGeixCidxKwrW8 hYFk6FKhQKi9PVhgTFzh/zMM2u74C0zidwEf/Ll/Jbp6pnKgN3CIs50vHGpIeK4p ARHrcG/lA04/gjUU0s8WR5H/Ht+uT6wMNTQj/0xD5CzoKry8cp1PUdlwUxYRyUvg xHrJwM8Ju2ErbhnTO1KM7dDY74mGelqKem1H/ne/pJvYHFqzjJ+KjI2tdIm5A7hI qmPJ2WlGTP36+4xTcGMExdDY0hlFh/uRVT2buF3O62xBHMtfjvG51o2QNmbxwW8Z Ku8yR+OV1zEZVlWKjfO4PKssHIifeSwjsxCNAgMBAAGjggIZMIICFTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFFUP/YMxmkt7Jqkq3dr5eDjmLhFqMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMCEGA1UdEQQaMBiCCyouZml6eXIuY29tgglmaXp5ci5jb20w EwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBI sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY5ctVaiAAAEAwBIMEYC IQDNTztfvtPlg6fIxzQYciov33wfwD9O3rDBrVCwEfZeOgIhAIg8wxDRAk6kSyda IOBDIntL4n0fx53dYVsC+d0bBWhfAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70A DS1yb+H61BcAAAGOXLVWogAABAMARzBFAiEAwVr83imf1hTANhPvWUFSf2HroqGv 7QFQxh6Kp9g5o2QCIHM6rEj5FkIjuMSo6z47M08wKa4B60adrCwXu7C88BuUMA0G CSqGSIb3DQEBCwUAA4IBAQANIcAlovAuwKP7CtRPwyCW/4BRLjklJmt8xnFbzblY 27zQinmItqTiHDHDvxfK2zUytp1CmmQVvk7+JrD+jzJrsqti2ZxRBgPno7bVg2q1 e+FRDAZhjt3GFsh7/oAAheLM11nwCDMic5KrOhggy9VsFUAdTsU37lx4CuWlp1LJ PaSKhlG4p1OMGEVScqRw4UK3Wf1e84M5xxWKkHUW/DMbcnVZc3msmXYobsoW8LWY tRiuB+D/FcQNF36vgUnetP5ObazRYzUROG10gL9ClTzIr5ug2KGv/zt9ILBGt6HJ tojhJr+u7Fea7ZX2k2deoAyj4YAet4YJpH+SB+/qpgwc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxv4aAglzmky78yWBy3Rh VctjU5YbA5oQGl6/360L55qOHNaezR0vdO8KPA5cDp/Pt5IfoPAdTshhWCL8I9jn fN2e5Z90mrgt0+uk6P7CSqxKMhd90vekNDr6aBa7VnHgRzUqxUvcWC/nM8aq8MUa vTiESo8kaW5q9RXMQl7m0zFtmk8O6O85pyAHPgWAO0udashuer9YFCKN55QXbKTb sq8VsAuCzQNw5Sc1dpitkgm5lf6ncgJ2Plf8DHoGh60PJoYb13TnQF5jwiTMHb1v r6tySfOPJCItz+YycmqmZdECMO5f4gR4Y+40PXIUd/wzBOwVv3vZ5tBdVkk4AKGI 8D+O2qJZsKP4E5LEU8KInA6E+FMwRumeFa0rMkZ6LEKJ3ErCtbyFgWToUqFAqL09 WGBMXOH/Mwza7vgLTOJ3AR/8uX8lunqmcqA3cIiznS8cakh4rikBEetwb+UDTj+C NRTSzxZHkf8e365PrAw1NCP/TEPkLOgqvLxynU9R2XBTFhHJS+DEesnAzwm7YStu GdM7Uozt0NjviYZ6Wop6bUf+d7+km9gcWrOMn4qMja10ibkDuEiqY8nZaUZM/fr7 jFNwYwTF0NjSGUWH+5FVPZu4Xc7rbEEcy1+O8bnWjZA2ZvHBbxkq7zJH45XXMRlW VYqN87g8qywciJ95LCOzEI0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348714975474937668303604643487276825746984 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 15:32:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 15:32:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fizyr.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811818916323168446027222191432172790919226917093437216618304730443882749463647905637366771073514508918689507296729481269900070019171091555133604556299081243455603641072392601946037198192240376378383891029998001365250445848114610747634637182911037170927350507626650084740529648709324730860138937994266523397997926184238953546476503851594698501398911262470556593436455986311831248572350911453598106940290809031439312439453534112730298713736562161918540770489151739819366960154173136028532135564505883358398545478101312402136468299800744037358015542480989767411081565544408005848713533820625113751169734470463286110142890444316103415094807040487567767446076707637117983527095601794410182715787968207979141811678859194900700873109425483837894473785823219322879433930686628812090413284093254725310744854711004847751293548670212374771325600266265008466757555003038494150662700350484488419110243669406873137894796734065894694639281138783820041254741128505576639441480395709545491624295355845555518783045582704965911523350011820796479502554027296542803044761199379951313024858819294188581397408722484698847696156006459672509992900930216193300974173408642412063126306733341971407659854171426332401277642417463798633635172908140924007351521421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 550ffd83319a4b7b26a92adddaf97838e62e116a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fizyr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizyr.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5cb556a20000040300483046022100cd4f3b5fbed3e583a7c8c73418722a2fdf7c1fc03f4edeb0c1ad50b011f65e3a022100883cc310d1024ea44b275a20e043227b4be27d1fc79ddd615b02f9dd1b05685f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e5cb556a20000040300473045022100c15afcde299fd614c03613ef5941527f61eba2a1afed0150c61e8aa7d839a3640220733aac48f9164223b8c4a8eb3e3b334f3029ae01eb469dac2c17bbb0bcf01b94 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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