fr.am

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:26:3a:c9:94:ef:0b:b8:6f:33:24:4c:ef:bf:fe:99:a7 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fr.am

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:26:3a:c9:94:ef:0b:b8:6f:33:24:4c:ef:bf:fe:99:a7
Serial Number (int): 339652618092718287832215558658754757958055
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:9e:b6:f5:58:34:86:22:5f:3c:15:61:5d:c9:b3:cf:2b:bc:1e:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:cb:3d:ba:54:75:cc:10:80:f8:56:e3:de:1f:65:02:aa:e3:2d:4b
Fingerprint (sha256): 55:37:ee:a7:5a:f0:6b:1f:fa:4a:c9:39:90:11:f9:6e:ad:df:f5:70:28:bb:51:15:42:37:43:ce:98:0f:f3:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fr.am

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fr.am

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fr.am
mail.fr.am
www.fr.am

Other certificates including the domain name fr.am

(limited to 100 certificates)

Certificate

The complete raw certificate details for fr.am in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2u0wqwIdjk7PZiRWqlVa
q2S5RRN89UtdMaQydR+Zgky/liD5yzCGNS5xPvIHQ71EEbjm2YixKg/2taPIv9R6
cKwcEdcMv5smJ7HRpcb8xY3TKriOLkaENPgfrWMhBgj08F2dWwNEz8F4qCZKlHjb
TdTc1x+XT3uX70/EIO8rrua0AIA5LSouaqeIJXVe2Ki2PXt3XqxSy/xkWYxprJDv
OENd6xdgcprmVMxqyhfxK+Lu/r1g15dYgjF4XumZk+jFfGCwISF3IN0z55EaQm5D
2FvcqP/OdU9KOB8UI3F+xwwkZXISIzIklAz3P9tIudpra3WVoBCGsnI99Pc13Kek
McW+eOv9ztea/DNui+GOCWDayqnx4cbIL2zJcoUiLsRixsORaNXhlMJs2sv2ojD8
Uatfdwm7nyGE055umuaOw0P4hHM73DVit16+Jo7P1oAgunzhxiWWfR/ze3P6Npe8
dloIVV8+xTjYLt8jiZkCNAamJHCAVTQJjmdS0thiN8c+mWQemK+4KCeiX379UNqs
6kW4bFx+jMcujemJnIWRHevtf5uV7GnMI6BlWKPrQO2HvhGipERyLSfvULSM7V2X
Jkk7chhyMDiOwL09g1PgeqFgm131IxZ9wWPWZM5Scb/VNg+RoekqtpHJ/03uqWzZ
R8lcieQEoxqnCPcWhrPEhJ0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339652618092718287832215558658754757958055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 02:16:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-15 02:16:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fr.am'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893142294417142236332134531838703367459838152938674308221479423143933447281729553408324221330219579590412931801245000905465952610367699711836341302214215604554508975833879162928392260916220699330492173111138222170149862628030420607005655394495352987201547471277708599722087562293909957169931929465008997970326088751090633667709499127999714029960697975893492510824734931580818587685013120056468051221629312861733993103663191507568964477400851056299510739789599265550762452515982781541379547049739266918575061744120489008571942439887480873002955965456064735422462731053237205535099056538295865188558027079338141656162172900065079161968913127282101504242255831246301387311714427522292426756244918822871911392670983175099051295408795481234772015178960279251444496453649264897562232428378253459200120817182996223062497631513430892039687917053950343392287039731114697037345897858434050654141301071037177273951348746901755056009817123775203046639933359994607976890526872712876826059913162275400474677096143363928771018576073417732051363514243566689697931588069176675628495772290361842575383293952630585338750389027936342593551555391525457483650202530456351966665912288182252243578085621268257260064693230958345608565556842922683542324675741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a9eb6f5583486225f3c15615dc9b3cf2bbc1e86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fr.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.am'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016989a6f7760000040300473045022100ca358af5f3bb8d40ac9864295725f2938cf0a4a66d5f5351087c7c9fe00107af0220731f0d10cb9672198614f1639411efb09a4b8acc32ded1bc70ac46cf2215596c007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016989a6f76e0000040300463044022041cc94e08085141c351fdf50795febad7f473ef350d8bc66d6591c0900dcafd4022046017d1667275e812b5758e2954b3d663ae5d0af77e53fe95977a88975050ff1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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