fyc.cc

Issued by R3

About this certificate

This digital certificate with serial number 03:5c:91:12:c2:b0:bd:63:7f:98:b1:91:01:30:02:3d:99:2b was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fyc.cc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:91:12:c2:b0:bd:63:7f:98:b1:91:01:30:02:3d:99:2b
Serial Number (int): 292835671021529577670974733125473839978795
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:18:f4:fe:5a:b5:f5:c3:bd:24:1f:93:1c:91:cd:1c:9f:fa:11:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:7f:de:fd:30:e9:c4:c8:2d:14:ac:ee:f9:4b:3f:d4:76:56:e9:4f
Fingerprint (sha256): 51:d5:68:cc:c6:9c:d0:06:f4:62:ea:f7:a6:9d:e5:ff:18:fd:6a:a6:3a:2b:2b:3f:d9:a2:4a:0b:84:5d:57:7b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fyc.cc

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fyc.cc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

armsock.com
artwork4vip.com
camp-mail.com
charank.xyz
distinctlymontana.biz
doneverhard.net
flappy-pegasus.com.globalallianceofnationalhomeschoolleaders.com
fyc.cc
help.texnetsys.net.conciergemerchantaccounts.com
ipv4auctions.net
jordan.biz.sciencechain.com
nationalcenterforhealthyhome.com
perceptronbot.com
thatsoutrageous.com
thebloodsugarindex.com
thelibertytree.com.compareourplan.com
wreckinjurieslawyer.com

Other certificates including the domain name fyc.cc

(limited to 100 certificates)
g.cgqaq.com.fyc.cc
fyc.cc
fyc.cc

Certificate

The complete raw certificate details for fyc.cc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwYvaFQkzRMWvC3Tj5sL
9/QrUjco8GH0eRFZQgaKp38Ee01UXzIr8PV6+37gY7WTgTEJ+Z9DtuKE82xkdooN
zUIqOSs5qI/98y6km8Y+X1KWRxzF5pJbZS5QLutZ0H7svypx2KVOL64V6PzX5GIL
bYK6oALbNjXDwBrunbht8gTIgnlmLw9RaPF7+X/DuLUasK+YvThvgRsBGiBDl2G/
slHQiE/XjiPopfRGNn6EMTt28oi0P+91QvUDdplxkx3AdwpwFEHJa3wxX3vHgzZb
1kzT9+UvZ9I3A66gIS43OE1jrq0+vwKhHv1ssAn+r1r4ISx6zsZpZy9VkSuT2dXH
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292835671021529577670974733125473839978795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-21 01:51:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 01:51:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fyc.cc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21589800177930674629040333237663873484349974795044857172515728201026334810738117763652808123187137542722544394539028974232725553812102826108848999216984332848066085633313874316161245392570473655744690049219258726942248711599991228642262736959166404541978951298305484732203820539701048805641351672603466087434432617380198049964906272156165169935374924709491902180188149813808115244737528764911490002974953547341623264037798415231465691430944017883083117993943477434594556872440578604381338905361722623865873408589665451419454994467302661172023179377447216291892654997341187359399054811300818366408884386293003008198591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4718f4fe5ab5f5c3bd241f931c91cd1c9ffa112f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (435 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armsock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charank.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distinctlymontana.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doneverhard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flappy-pegasus.com.globalallianceofnationalhomeschoolleaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyc.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.texnetsys.net.conciergemerchantaccounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv4auctions.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordan.biz.sciencechain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalcenterforhealthyhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perceptronbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatsoutrageous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebloodsugarindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelibertytree.com.compareourplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wreckinjurieslawyer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5024cfcb0000040300463044022007c562d24b315ff5c7e8c7ea290e40474ce9222c4aca815d2a1f30fb935959070220574d8c419d713f0e1f690113290096c932d2cff8da619a245cd1aeab35c40f0f0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b5024cfc30000040300483046022100ea809d38095fdb616e680828ac5bf4a92ae9e9b991ac3605d103c77c51b61867022100cb91f56c6198f8eed23dbc5ddafe6f24528d108dfaf7feb0240f3d57b2fd85b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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