fizyr.com

Issued by R3

About this certificate

This digital certificate with serial number 04:00:c7:fd:55:14:84:23:35:7f:4e:2b:6f:c4:0b:fe:9e:28 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fizyr.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:00:c7:fd:55:14:84:23:35:7f:4e:2b:6f:c4:0b:fe:9e:28
Serial Number (int): 348714975474937668303604643487276825746984
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:0f:fd:83:31:9a:4b:7b:26:a9:2a:dd:da:f9:78:38:e6:2e:11:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:56:72:bc:96:93:eb:eb:8d:39:3d:5b:ee:fc:6e:a4:bd:e2:2a:52
Fingerprint (sha256): 41:b0:d2:c2:7d:a5:3b:e2:99:95:fe:75:76:8c:ac:7a:eb:6d:3b:72:57:ab:ef:58:fc:97:36:64:0a:a8:56:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fizyr.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fizyr.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fizyr.com
fizyr.com

Other certificates including the domain name fizyr.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fizyr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348714975474937668303604643487276825746984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 15:32:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 15:32:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fizyr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811818916323168446027222191432172790919226917093437216618304730443882749463647905637366771073514508918689507296729481269900070019171091555133604556299081243455603641072392601946037198192240376378383891029998001365250445848114610747634637182911037170927350507626650084740529648709324730860138937994266523397997926184238953546476503851594698501398911262470556593436455986311831248572350911453598106940290809031439312439453534112730298713736562161918540770489151739819366960154173136028532135564505883358398545478101312402136468299800744037358015542480989767411081565544408005848713533820625113751169734470463286110142890444316103415094807040487567767446076707637117983527095601794410182715787968207979141811678859194900700873109425483837894473785823219322879433930686628812090413284093254725310744854711004847751293548670212374771325600266265008466757555003038494150662700350484488419110243669406873137894796734065894694639281138783820041254741128505576639441480395709545491624295355845555518783045582704965911523350011820796479502554027296542803044761199379951313024858819294188581397408722484698847696156006459672509992900930216193300974173408642412063126306733341971407659854171426332401277642417463798633635172908140924007351521421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							550ffd83319a4b7b26a92adddaf97838e62e116a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fizyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizyr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5cb556a20000040300483046022100cd4f3b5fbed3e583a7c8c73418722a2fdf7c1fc03f4edeb0c1ad50b011f65e3a022100883cc310d1024ea44b275a20e043227b4be27d1fc79ddd615b02f9dd1b05685f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e5cb556a20000040300473045022100c15afcde299fd614c03613ef5941527f61eba2a1afed0150c61e8aa7d839a3640220733aac48f9164223b8c4a8eb3e3b334f3029ae01eb469dac2c17bbb0bcf01b94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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