farmingtonfair.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:f4:36:95:7e:f1:08:de:b0:64:44:70:ef:37:70:db:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farmingtonfair.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:f4:36:95:7e:f1:08:de:b0:64:44:70:ef:37:70:db:ea
Serial Number (int): 262342037576260873251767829253403811306474
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:c1:e4:1d:44:7e:2a:cf:b6:e7:a1:e0:aa:37:1b:f6:5a:05:a9:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:d8:ba:ee:4a:fc:98:30:dc:a0:68:fd:96:da:10:86:12:0d:d6:71
Fingerprint (sha256): 5e:2b:a6:b0:2c:b9:b1:e5:7e:e5:1a:70:09:c6:9f:f3:60:cb:49:40:6c:18:2d:6f:fa:fe:13:f3:ff:96:a3:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farmingtonfair.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farmingtonfair.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

farmingtonfair.com

Other certificates including the domain name farmingtonfair.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for farmingtonfair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262342037576260873251767829253403811306474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 02:33:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 02:33:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farmingtonfair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713613231916145869515518421436025314502876431083326613157471452618071362205998486490213783326504421097588332697363327063386436424267128768397259081762755274253128105125629192800684060965090370675745876759470572922685009992512467041305536918602094676354640789456612699342550235039001706670622157911516350359535620948541623117615129909580932132910869947620485376686397736649834390575048989165715654742020217135424905503145983124705874314934418490995186263146792713306484517242724070777054665223048849538763299092259968095483854580151853354283829277166828458686312151128353640172974404398672667254661545085420673193594563607217724663187885529443611547595541047316553105152609601276042814388352292341999050720726383475214817292272411019652112649391657122126149705581929835144510437241983116095761530203478801167994906076015651343848350423280562529606226698438830966909072484154378853649815306966941999649883459904609138949466981910400209055157997247812921922973327145964897820154091055688839794657464806789269820761348588547617794542554200748426166780090193329250011867417902063879717759278144850653617642100789512880433179169870358637104289916605246109624428361797200616229395467395951305604053316242225468104469781141476585562626418631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ac1e41d447e2acfb6e7a1e0aa371bf65a05a95f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmingtonfair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170f0da67720000040300463044022004183a64f9f96f3c7038d11519079bbaf1ad8653c19ba3be1aa6bd515a1f3dda022025eae971e42c74470db8f0a9fff29f8935194a1632125ab5f22e0452ca78e64300770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170f0da679800000403004830460221009f75028112fed157d37897a4b59c3944b225275e1319b36e917364d37ef0ee68022100f5ba209dc2f64179a580156a6474c01b4fbf76fefc679d321381f696cf30e90a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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