farmingtonfair.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fa:9b:5b:df:96:9d:60:6d:15:6e:91:26:ff:7b:f4:af:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farmingtonfair.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:9b:5b:df:96:9d:60:6d:15:6e:91:26:ff:7b:f4:af:09
Serial Number (int): 346613956898786416145345721544942405594889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:2d:a0:03:23:4a:6f:64:db:e4:75:5a:e8:fe:d3:53:f6:57:7f:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:40:28:4e:dd:96:74:bd:07:17:ec:04:38:7e:f4:1b:e7:10:6a:40
Fingerprint (sha256): 4a:ad:b6:14:de:37:3e:b0:9f:6c:d3:f6:ac:82:b0:c0:0f:e3:f0:0b:b4:b6:dc:a1:24:c9:a7:71:ad:e1:ce:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farmingtonfair.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farmingtonfair.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

farmingtonfair.com

Other certificates including the domain name farmingtonfair.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for farmingtonfair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346613956898786416145345721544942405594889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 21:15:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 21:15:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farmingtonfair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830268248952544766261479328617795765708349083022791300422375908581645426265783680158987787444539991004595024393512113366533304454904471785202871947204812336215882700052619546865653070727507015538378983006477486964668300202971333758406124406567195195620723755834236892529704669348649183293364279077731862110976393365697404141397606600616243896527013803131078634056060302863176154862819096582036053533572892612143529531231689512272740035557529506446272988873024239476227419420251125720866629949452545943255930412007339325634780046094236752387359723113127528908034617320215488210828984578813746591102841369392371483272033521133347357468227127746552234287099434342921357431276459752809543919284306288235143713512766869837898882164467522845780709213358975529415122552355949762484156210217872392418249848377774206381866156894638494960439594276888615769006949750571339630548447394182831701666970879638211133204556662012506921377075871264581212899312324410233836643475899902230393480135522153519503326654259442205060700055051801169596421713457464397054169884843602537572016339503465983891674911947174565696601417772984719758260064796861493435451366255195553499369022531918587225154009168967554973517395242893588668241629905558768489394646853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							542da003234a6f64dbe4755ae8fed353f6577f52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmingtonfair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b90b4e405000004030047304502210097b5b08188c53441e38d20a654e8f0128a90f503bb2adf0b5332693549bc07e502201da8fd72a040905eb1ada9d26129c284449fa850db89f7f9b0642776cb363025007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b90b4e3f300000403004730450220542a502325b35702b0221ed9eef900dc2b2ef50b1381ca6204bf3cd6dbcd7681022100814d1fbd507f161f4d9961330dd3f8ecd6e1bee5387b7b517b0be928d208cd57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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