fondep.gob.pe

Issued by R3

About this certificate

This digital certificate with serial number 04:58:0b:d9:8b:4e:f8:6d:7c:ca:39:b4:ac:45:74:b0:e7:ae was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fondep.gob.pe

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:0b:d9:8b:4e:f8:6d:7c:ca:39:b4:ac:45:74:b0:e7:ae
Serial Number (int): 378409743077967123731818579608576537454510
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:a2:c3:9c:de:af:3a:1a:99:48:cc:ab:85:a2:28:f1:34:92:08:46
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8e:06:ca:e3:80:c4:f5:ff:d6:5e:66:04:2d:90:43:d2:32:bb:0f:4e
Fingerprint (sha256): 4b:d5:c2:8f:a5:7d:d0:aa:e6:b0:c2:e5:1c:45:5d:28:25:bd:b4:b4:6e:fd:2a:a7:97:42:72:4d:1c:30:c9:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fondep.gob.pe

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fondep.gob.pe

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fondep.gob.pe
www.fondep.gob.pe

Other certificates including the domain name fondep.gob.pe

(limited to 100 certificates)
web.fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
web.fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe
fondep.gob.pe

Certificate

The complete raw certificate details for fondep.gob.pe in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgISBFgL2YtO+G18yjm0rEV0sOeuMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDcxMzE3MDdaFw0yNDAyMDUxMzE3MDZaMBgxFjAUBgNVBAMT
DWZvbmRlcC5nb2IucGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/
bslqAPI9rgQwq0Mk+JBCoX3VYBUvuLun7dPJ7hTYQDLSn6Hiw9HIfv4cVrUO2WFO
AjsTkNE9d7wiMiYIgNmPAHG3rNLOKtzl4yE0RM2LFcvdrzrN6vbN5Z2/jwqmv50k
MtgsmWbP2aKXUom+Soi+OmoScprIhm2+VmK9Y1vJI0KnS4XCsx8U74IbzvgZxnBo
p8aZYpMib8dDsBdbOn3HcsNDw/UG9ego59IYev+DYyKnm53AttsEHVG1SZuohsOs
K8lZjTncrtrClzvWCMjHYY7YZUqPBgdE5G3+11xzX3wzNyvDr8a/0WzqHzDj5RG3
XVXB3X/lAZxqMn5SNZuNAgMBAAGjggIjMIICHzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFNSiw5zerzoamUjMq4WiKPE0kghGMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MCsGA1UdEQQkMCKCDWZvbmRlcC5nb2IucGWCEXd3dy5mb25kZXAuZ29iLnBlMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAO1N3
dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGLqiTpsgAABAMARzBFAiEA
u85Tp70oBYH0Vq2KK467q7AiyqDg+zQF4eeHy8BIo8sCIEVR7wBceCPAnaEfVitG
Khif58OpWNWYBAWnK4my7guVAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/m
Z0xaOnQAAAGLqiTqWQAABAMASDBGAiEA4z+3a53vqtLrG05yMgr//FjMWHVIvG+I
TUaRc628WKQCIQDNIM+wdC0HEueJ4QSVOdVtO9WNs0VDmaeSjqrZkzOL6TANBgkq
hkiG9w0BAQsFAAOCAQEAATqnOEOC39U5TOHuVnYafGbwpA5QIG9Pg05R/N+nLkOv
lBaY4w8EmMaF13RMYbTsgm9cvgOjVy+dQgDhOctUMqyHvrFGuI+F8O6+tkmyst6Q
P0ryZbql9slPGA4znwB9FJIytJ6EfT6Kbjd9O4Cd3BO+i0gwPy9tA3E2EazxC9NO
sDYkstLrqe+AYnsopnaiIUvOJ1XU5fh9YPtJX/zdHE+eeEU+iPMGinruSej9SXqH
GU2klSUyHvxWfY96/3PBQZYCZ7G/Y7eAsk5/Mq6ah3HYrBJaHVR6O3I3Npdn1vsR
bYxNUdgaKNMbW1TstuE72rWUZDKs+bINEB7oyO4mcw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv27JagDyPa4EMKtDJPiQ
QqF91WAVL7i7p+3Tye4U2EAy0p+h4sPRyH7+HFa1DtlhTgI7E5DRPXe8IjImCIDZ
jwBxt6zSzirc5eMhNETNixXL3a86zer2zeWdv48Kpr+dJDLYLJlmz9mil1KJvkqI
vjpqEnKayIZtvlZivWNbySNCp0uFwrMfFO+CG874GcZwaKfGmWKTIm/HQ7AXWzp9
x3LDQ8P1BvXoKOfSGHr/g2Mip5udwLbbBB1RtUmbqIbDrCvJWY053K7awpc71gjI
x2GO2GVKjwYHRORt/tdcc198Mzcrw6/Gv9Fs6h8w4+URt11Vwd1/5QGcajJ+UjWb
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378409743077967123731818579608576537454510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 13:17:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 13:17:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fondep.gob.pe'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24166147242772465006825950341663682623249518363146914677433154470597493250824397157188601877345572201129017226447606420299623497076975308650480748260264425934874793847283850136807728288798943296561804811830851595100485204117248184341096445977333745133901025561943679967456033147279642436757741611368260579901178898504021577886675660387862854277397516565456016964479029646921910264946236163132731006589953197031431880865267271603546856144012456150493929695289760591365898677172755447432779302829286163438365012650368366506051486417651780086496150281807635674795800980131275304518115186889518252943263382449701311060877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4a2c39cdeaf3a1a9948ccab85a228f134920846
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondep.gob.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondep.gob.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018baa24e9b20000040300473045022100bbce53a7bd280581f456ad8a2b8ebbabb022caa0e0fb3405e1e787cbc048a3cb02204551ef005c7823c09da11f562b462a189fe7c3a958d5980405a72b89b2ee0b9500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018baa24ea590000040300483046022100e33fb76b9defaad2eb1b4e72320afffc58cc587548bc6f884d469173adbc58a4022100cd20cfb0742d0712e789e1049539d56d3bd58db3454399a7928eaad993338be9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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