www.ynfco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:3b:71:79:4c:ee:4c:40:7c:83:89:01:03:7e:da:f6:dc:bb was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ynfco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3b:71:79:4c:ee:4c:40:7c:83:89:01:03:7e:da:f6:dc:bbSerial Number (int): 281564350035402718867912564387878152887483
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d2:10:31:fe:a9:ef:26:72:01:00:57:a9:7e:d3:d6:7c:9e:93:43:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bb:11:0c:82:df:6d:d5:95:60:09:74:b9:79:4c:bb:a3:eb:ef:d5:0f
Fingerprint (sha256): 63:c4:e0:4d:04:cc:80:66:ec:63:7a:0f:46:dc:4a:e7:bf:4f:03:62:1b:0f:e0:72:92:3e:41:b0:d6:b2:3a:3b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ynfco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ynfco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ynfco.com
Other certificates including the domain name ynfco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.ynfco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAztxeUzuTEB8g4kBA37a9ty7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTcyMDEwMDhaFw0y MDA1MTcyMDEwMDhaMBgxFjAUBgNVBAMTDXd3dy55bmZjby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDZ3tLbOB8gFzjapuGpJ07mogq4rfP1Yfs5 InIr+sjbk9ypfHD00OoHSj37K/mdieTQEr5zvFsIw0fJinXQKTKPVkPMGkGrwc7F a3g2f4JynwMHysYHLwyCHH0sOZXsBiiD0beSNKrRvtZbu6Je9sP4Ngqw7J9SxGZ7 P061EqxB/XMCq4zOHdrBoCeyFKfr9mQH4DINJPQSNHqXNJ+zRW928hf9NXYK+j6W zCOj0KBJEkBrnGFLpalmIkiRDz28MRVICVJcBhVGPzSw9icJMkPWQB8UVODziRl2 1++5QdYbw6CnUhMnB6E+ZY+ITOL0tEPvDXRicsd3xDjPHNvQrSOeGA+PY86JfGiq KNZLuxdyqw1kH2ifcojjf3W1fVVKSLybQdMluT+/RgrUDqSqCmJ0PA6yGa9Hc/vp r4g16UIMUyPLP/7za5hXurhgkmba8FFN3k1bCHi0ZOtMzMPAJFD8opfE38s+nEvY RPAXiitFPSjjhVBJzbf22Bvneoq5gN+9I5GCYi2M8mCfoqKRBtBRYDDb5G+YjcDr JF0hB142JG11Bo10BjhETkE22T9djpvjoABlkQlnBZx15aXx/6C8keC25OS2G9un 4vDyzakQgNofJYdghaIWsLsm141aGX1cK6ZUZqM7LElMqN9pI038tl9Y2g6NAIwO h9tJzOpqIwIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTSEDH+ qe8mcgEAV6l+09Z8npNDSzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy55bmZjby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXBU/KSFAAAE AwBHMEUCIDwxPDRezpm/7E0NzFHz1OSqdmHq5Tcmx8hf62mUREbwAiEA8xZh5ske 5EsynQImoktJGqsKkXfrNGC+rTFxuPHtEpAAdgDnEvKwN34aYvuOyQxhhPHqezfL Vh0RJlvz4PNL8kFUbgAAAXBU/KSQAAAEAwBHMEUCIQDNStqgCAO8qdLr0ReRGy12 2alyGFM3XNTkMss8d9ci2AIgfTInycb/+y38uGX0EPysJzL3y6M9rIf2yBz4dc+l DX0wDQYJKoZIhvcNAQELBQADggEBAGeYqkkrwReXYf/SI6A9gJ3Xx/rDdlQ3C5gJ ptfwCes72bvkyLcBQkhuUoNeP7zNfEnuqt0M/yDKvZ83GdAGEVYdt60JRsvOziLr AO2EapL/HzlTq4wA4bP3exUY02chLOI0O8HP4iQJZf/h4y39i4bFLnOwnlVffJfo 3OJRARxzGoNgVTAbzqoohhXiVhen2aEhHLd3yiYUEAbSaQ9vMaK3l4bODLlTDaG/ kwoWgo5m4PHSrtp8bHeNag7XaPlYHS9Aa04bqtDZ6TNeGxIkzcN14e/dycjTLkU1 TvO1MKpSd0fvWDwvOcRPQDLvhYTUw2usFh/bNhme5xbknFrkVWk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2d7S2zgfIBc42qbhqSdO 5qIKuK3z9WH7OSJyK/rI25PcqXxw9NDqB0o9+yv5nYnk0BK+c7xbCMNHyYp10Cky j1ZDzBpBq8HOxWt4Nn+Ccp8DB8rGBy8Mghx9LDmV7AYog9G3kjSq0b7WW7uiXvbD +DYKsOyfUsRmez9OtRKsQf1zAquMzh3awaAnshSn6/ZkB+AyDST0EjR6lzSfs0Vv dvIX/TV2Cvo+lswjo9CgSRJAa5xhS6WpZiJIkQ89vDEVSAlSXAYVRj80sPYnCTJD 1kAfFFTg84kZdtfvuUHWG8Ogp1ITJwehPmWPiEzi9LRD7w10YnLHd8Q4zxzb0K0j nhgPj2POiXxoqijWS7sXcqsNZB9on3KI4391tX1VSki8m0HTJbk/v0YK1A6kqgpi dDwOshmvR3P76a+INelCDFMjyz/+82uYV7q4YJJm2vBRTd5NWwh4tGTrTMzDwCRQ /KKXxN/LPpxL2ETwF4orRT0o44VQSc239tgb53qKuYDfvSORgmItjPJgn6KikQbQ UWAw2+RvmI3A6yRdIQdeNiRtdQaNdAY4RE5BNtk/XY6b46AAZZEJZwWcdeWl8f+g vJHgtuTkthvbp+Lw8s2pEIDaHyWHYIWiFrC7JteNWhl9XCumVGajOyxJTKjfaSNN /LZfWNoOjQCMDofbSczqaiMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281564350035402718867912564387878152887483 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 20:10:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 20:10:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ynfco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 888833704997147461739637770685783111231068829803937610150256419713487384277345115060841110696345013451916952657832654351862170118869840108258445673505209450196693968668297200813153112993496919336035066439790744856242482720718873805797979138325807982072022423299605387924310949981991913133484803981939238887381053183847793877300378884705381758516418423205675325449519159828044214218278869548593745218822033680951965641829978725641512879581905867992121223624955508618426308796751653170340511310998640599693651244853014949419146034798891162155501200639254692832678394863505637017737307541376742565652885170873685012697048371121832442696062248977366700742774008086981018200620429524820644492968076457306965485044333482767648116255159505583552102660544705757315247401130124004773086782132335477291970612268192204734123741181529585536772933553253799973843668489910437883664242013926177608169877852366250825041029918052752044765231776313804194077003144308112271857883761592626415242444481545211531603309248272654111400356917073627772267613665201590930268819339765061320243328202934157970841108998887561141243516496381364969410945982076835634463463139663869055859190789067513628530759730420332534230139915659632913836946735434540560373410339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d21031fea9ef2672010057a97ed3d67c9e93434b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ynfco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017054fca485000004030047304502203c313c345ece99bfec4d0dcc51f3d4e4aa7661eae53726c7c85feb69944446f0022100f31661e6c91ee44b329d0226a24b491aab0a9177eb3460bead3171b8f1ed1290007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017054fca4900000040300473045022100cd4adaa00803bca9d2ebd117911b2d76d9a9721853375cd4e432cb3c77d722d802207d3227c9c6fffb2dfcb865f410fcac2732f7cba33dac87f6c81cf875cfa50d7d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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