foqx.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:5f:52:b9:1b:18:91:4e:e4:4c:72:e2:26:70:4d:2b:d0:fa was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=foqx.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:5f:52:b9:1b:18:91:4e:e4:4c:72:e2:26:70:4d:2b:d0:faSerial Number (int): 380885926404674838559890835426983950405882
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 67:e7:21:57:cb:24:17:77:05:24:e5:91:3a:eb:e7:62:8b:48:5d:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): eb:94:ea:cc:65:3a:bc:77:89:83:7e:d3:51:1b:ee:70:56:27:1f:b1
Fingerprint (sha256): 50:96:d9:a8:00:93:83:14:ea:07:29:ac:00:dd:7a:a2:e1:0f:95:df:76:aa:57:4e:22:3f:fe:cd:fa:e6:46:7d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate foqx.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for foqx.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
foqx.com
www.foqx.com
www.foqx.com
Other certificates including the domain name foqx.com
(limited to 100 certificates)
foqx.com
foqx.com
utahprobate.co
foqx.com
foqx.com
foqx.com
www.intellifly.co
www.employeeperformanceappraisals.com
foqx.com
betterforex.com
www.cardiophylax.com
foqx.com
www.laweeddepot.com
arkansasstemcelldoctor.com
foqx.com
www.alternativemenopausetreatment.com
foqx.com
www.jenniferbassett.com
foqx.com
www.foqx.com
foqx.com
foqx.com
utahprobate.co
foqx.com
foqx.com
foqx.com
www.intellifly.co
www.employeeperformanceappraisals.com
foqx.com
betterforex.com
www.cardiophylax.com
foqx.com
www.laweeddepot.com
arkansasstemcelldoctor.com
foqx.com
www.alternativemenopausetreatment.com
foqx.com
www.jenniferbassett.com
foqx.com
www.foqx.com
foqx.com
Certificate
The complete raw certificate details for foqx.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgISBF9SuRsYkU7kTHLiJnBNK9D6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTcwOTI3MDdaFw0y MDAyMTUwOTI3MDdaMBMxETAPBgNVBAMTCGZvcXguY29tMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEA9sbeCeEFMXXg4pzT60uiVNA8x7Vbj+ZxYZGfVi7Y jGWQhi3yKQ0pSwbnS2hX7nz818HqHXuhDOr/tOWDvaYX+bRXnQ83XV2fCQ1XhOv0 u3R+Y8ZOcQiB1kbdGh0RJ8nL8406WTJPla0+ccbOoxd9z1E+UlTnhcY+iDJsttGB E4vReuqrwKDjd5yLrvW3TuZLnAsMFCshqR76vmz3QBD0ezGXL/JYwI+PRk/ONfB4 0WaPularxDz2iPu9bVSRizM1tyL7nXMLyytkDjpnvCyg6xQjqSfkilAHWGVOAR/v t1+TWnDsm1LGwRof8NXwi1RVIRzYBXDmAs0i3Xw942Jzayn6OhtifgtixS2kPYj2 fdP8XbvBH6GtHhhJhj8Zisa45elsMhqcNqmGBxnO2Yh7jm/NVGAmFb5jOBfZBMPu WPOl/JMRrcA7rsynUJMwnImFof/4dLOsrBdL1Dd/4NaMOaDpuC2u17JDXxuqEtHH VczDaPQhnifDgBY0pMXKaFmVO3bS78MvO2WhLYPC2730AydqqmC8oY6sBFz8wFGZ PSKd+IucFyhmKvMxEYBSLFyvh6yFsvHLor06OViOe3QLU4UlryIRgL6CNzPrEd91 1twKeMKApIgVo8IFeJO9R+mqgCfmTzXNDcIKb5q5tNDTqdVRxQiSbmvyTT+iwhVd vy8CAwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZ+chV8skF3cF JOWROuvnYotIXdAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYgghmb3F4LmNvbYIMd3d3LmZvcXguY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB 9ASB8QDvAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFueObi TAAABAMARjBEAiBRYFayawrOLuKDu9pnvQtrqarhgYxINKS6KEFU2mUGrQIgRnFn yJawhpzaYufWTbdE/8UPg8tgTiG4rStTnAmNzA4AdgAHt1wb5X1o//Gwxh0jFce6 5ld8V5S3au68YToaadOiHAAAAW545uJWAAAEAwBHMEUCIQCxHKsY3Miiadj5WrYB 26fYef2eUZlBjjeWvmniT/x+jQIgMV4Z3vbAHpYhMpAiIN2wma/ialF/c5LurgPN G1tC/xkwDQYJKoZIhvcNAQELBQADggEBAHPsESwrPScf1qDn139TaHRe47QF6Mkx ScIGJZJyq+9OSexEoloebav1g+KXomG6QGBaKLF4iI6SRhq3KEvDPJja7dUYZdmf 37RPf4ASrFkqP7JAYY3Sz2S/ElhORcHSYhi+s+rNRbRYxQOlWnd/qFoG1lmeUHlU hkxVW6vKYaDZ5cmEDWCmse+m1WIV3GmKtjAC8bl0wuy8jy5BTEnkysez9rHtWQTG I5X9LNVwX9cimDrLYu/vYTVpeZQdOxfvBHVE0OOKBsuoSOpxKmfOrFi+vc9k+0e5 /FmfM3Au9FQVMZ/pDUv4XfAn4zHTxJ7GntI1YwFy/aqRyMAf7HO75nU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9sbeCeEFMXXg4pzT60ui VNA8x7Vbj+ZxYZGfVi7YjGWQhi3yKQ0pSwbnS2hX7nz818HqHXuhDOr/tOWDvaYX +bRXnQ83XV2fCQ1XhOv0u3R+Y8ZOcQiB1kbdGh0RJ8nL8406WTJPla0+ccbOoxd9 z1E+UlTnhcY+iDJsttGBE4vReuqrwKDjd5yLrvW3TuZLnAsMFCshqR76vmz3QBD0 ezGXL/JYwI+PRk/ONfB40WaPularxDz2iPu9bVSRizM1tyL7nXMLyytkDjpnvCyg 6xQjqSfkilAHWGVOAR/vt1+TWnDsm1LGwRof8NXwi1RVIRzYBXDmAs0i3Xw942Jz ayn6OhtifgtixS2kPYj2fdP8XbvBH6GtHhhJhj8Zisa45elsMhqcNqmGBxnO2Yh7 jm/NVGAmFb5jOBfZBMPuWPOl/JMRrcA7rsynUJMwnImFof/4dLOsrBdL1Dd/4NaM OaDpuC2u17JDXxuqEtHHVczDaPQhnifDgBY0pMXKaFmVO3bS78MvO2WhLYPC2730 AydqqmC8oY6sBFz8wFGZPSKd+IucFyhmKvMxEYBSLFyvh6yFsvHLor06OViOe3QL U4UlryIRgL6CNzPrEd911twKeMKApIgVo8IFeJO9R+mqgCfmTzXNDcIKb5q5tNDT qdVRxQiSbmvyTT+iwhVdvy8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 380885926404674838559890835426983950405882 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 09:27:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 09:27:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foqx.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1006761612439120374537099861994461134485471164400488347115259997954897582995612795000666688554707696762785326713634492891068162248632017303924620208322460589563810850952006699087300662449646792916891073880193543256134150302286582627247411380204067605370094160628512571047399740532789036477263103327365955687677456786834680238276453019542573582392534969272951440644091355707088280324497760519762117063405034314857272903928644360546161769216520470999595868914471124265981469382547932136472008034707208504711387648750169251513781169491491862504284146311583824008092975361037526086847498768793341547869458263237712554106110546972862480338748422439790574127971733176873156177222586253215156467059568890803834763747897094634824352119771237509925013698474141503993920276103070498692980917943139118731546352861368576826742953689633531779426228675800497609246778277091429177844952576212121736301468872844620173168813339179057042086304199182286949436897325148223158324948327274528827651708951331620399767554816411774867253033177486587247119719308099294142540896395218196525193173234220966036182369663748102014851510556840291350327394029009554409932626791910638147469901125696806619298735999533945379961511332038555295944031640916869156555308847 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 67e72157cb2417770524e5913aebe7628b485dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foqx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foqx.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e78e6e24c00000403004630440220516056b26b0ace2ee283bbda67bd0b6ba9aae1818c4834a4ba284154da6506ad0220467167c896b0869cda62e7d64db744ffc50f83cb604e21b8ad2b539c098dcc0e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e78e6e2560000040300473045022100b11cab18dcc8a269d8f95ab601dba7d879fd9e5199418e3796be69e24ffc7e8d0220315e19def6c01e962132902220ddb099afe26a517f7392eeae03cd1b5b42ff19 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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