fairfoodprice.com
Issued by R3
About this certificate
This digital certificate with serial number 04:3f:22:a3:6a:2f:e5:6c:83:66:f0:07:6c:19:e5:07:e0:10 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fairfoodprice.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3f:22:a3:6a:2f:e5:6c:83:66:f0:07:6c:19:e5:07:e0:10Serial Number (int): 369932975093034882978284346458471594975248
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1e:a2:66:fa:5d:b9:88:86:b1:e5:2f:33:7c:db:c0:56:74:0b:a9:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 80:bd:66:60:d5:56:76:6b:12:62:0e:39:0a:60:3c:3b:24:24:cb:f8
Fingerprint (sha256): 74:77:5b:6a:95:c6:4a:8f:de:a5:88:cb:c6:04:61:61:42:1a:aa:4f:de:de:46:c9:3c:a5:f9:be:7f:06:61:93
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fairfoodprice.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fairfoodprice.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fairfoodprice.com
www.fairfoodprice.com
www.fairfoodprice.com
Other certificates including the domain name fairfoodprice.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for fairfoodprice.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgISBD8io2ov5WyDZvAHbBnlB+AQMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzExMTUxOTMwMzZaFw0yNDAyMTMxOTMwMzVaMBwxGjAYBgNVBAMT EWZhaXJmb29kcHJpY2UuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEA0SyUxpptUCODCuUJqIHNRbV9UPrmJJO0dKfDw6xiptHcos/KzKDWKYmHWbFd axa8Ed1WsH6W9aFQqGLdk+Dm6JjcfcrDi3PgNeO4Ok1+2+M9y1JnytyqY1KOR2G7 7b+HhaNppVje5SiX1ZrLZXBUsG5Yye3qCRgxaGtWs5XtvdLJzMsUNa07ZRlmm0Tl vVRg24IFwYeRIsYlIPx5uoabMdab6ujuO5IcwgQIHTKZW5bPGZhu80gvztvYz85c LkzxU15ihaCFtBiVEZ4MbWOOOaPNDYOIH2AoK4i/aGQk/eqAHqbQFY2NbiOzkzl5 nJLjKgRdtbAbE3rqwI7qgOfQSHpjKn+ufpsdhn2/GvvM14bZoDZdFdVyMEHm4+Hq VO1DmeYMMK61S8g19Inbh0BVZd9CAo8QRT9eQeEtiqQBGsOE4xmoDyr14zKi+zBF em+innsppbdFJ6SDwbMFXPURKMrckLod0+1PtrSGiNuPXviNHODE9cX13dKH0GG7 rkcyDjIK7B7kR4W8DQ811o02pKpE8PdqNWfRyHpQWH1Z8dvN/OPP4Lj3bUp8mzLl JZCWSnWNVeEPnsYWk4iSeNM1KlY5gyZUtPeCEcVhg8nBZx05SKlBt0GEFcz3Oh2L V1nwb/SNTj9O4gNC1o9/1rApBJLeAeRfTKGpsRB+kSTbbrkCAwEAAaOCAiowggIm MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUHqJm+l25iIax5S8zfNvAVnQLqf0wHwYD VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0 dHA6Ly9yMy5pLmxlbmNyLm9yZy8wMwYDVR0RBCwwKoIRZmFpcmZvb2RwcmljZS5j b22CFXd3dy5mYWlyZm9vZHByaWNlLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCC AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s gdm7v6s52IRzAAABi9StuIMAAAQDAEcwRQIhAM63zagZj74OSlMzYYKp1c4OlN4f POhXn5bruTIQpXIPAiAg0rftI2unhVGPk7XIfudOQQomwYLo/iwJoS4v1Z+umgB2 AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi9StuLMAAAQDAEcw RQIgVq+XF3cbFoCxrMXWmJ46pglMbt+Pr22F5WwwrnUP0pACIQCpj/nLtxrJIY2w a3+7qyE5qswPCwio6BwsFjzWdwxdwTANBgkqhkiG9w0BAQsFAAOCAQEAlPmAKne0 N+S/wiuYA6IMpH4VNxDkQaHsO8V7vDdK6OYr/g3Jar8RjuKET5FeHPY9KFLeTaFf qokCSUyl+r/8V0XvagKqyjhURdgZUCxesxmBZBufKsarRj13Y5kRsPeM8Aq4uvvu RugdwLmLZ/dWwv09VE3jRPPcVNTaxp4eQDNG/xRNC5gAyEnk9xUQb/VkB7rlaW2N 72JQ/dMpGFN7LWx2GZhRsWhbnS3psuVuav4tlpIou4JHaPtmD4+jiux7hZWmLF4x NhTQCM4zZ6hZuzPoiSLDE81MNUlkBUGfQom8Q9zacTN4rx4e7QpO8wrz40y3Md/c sfyZS714WNYSHg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0SyUxpptUCODCuUJqIHN RbV9UPrmJJO0dKfDw6xiptHcos/KzKDWKYmHWbFdaxa8Ed1WsH6W9aFQqGLdk+Dm 6JjcfcrDi3PgNeO4Ok1+2+M9y1JnytyqY1KOR2G77b+HhaNppVje5SiX1ZrLZXBU sG5Yye3qCRgxaGtWs5XtvdLJzMsUNa07ZRlmm0TlvVRg24IFwYeRIsYlIPx5uoab Mdab6ujuO5IcwgQIHTKZW5bPGZhu80gvztvYz85cLkzxU15ihaCFtBiVEZ4MbWOO OaPNDYOIH2AoK4i/aGQk/eqAHqbQFY2NbiOzkzl5nJLjKgRdtbAbE3rqwI7qgOfQ SHpjKn+ufpsdhn2/GvvM14bZoDZdFdVyMEHm4+HqVO1DmeYMMK61S8g19Inbh0BV Zd9CAo8QRT9eQeEtiqQBGsOE4xmoDyr14zKi+zBFem+innsppbdFJ6SDwbMFXPUR KMrckLod0+1PtrSGiNuPXviNHODE9cX13dKH0GG7rkcyDjIK7B7kR4W8DQ811o02 pKpE8PdqNWfRyHpQWH1Z8dvN/OPP4Lj3bUp8mzLlJZCWSnWNVeEPnsYWk4iSeNM1 KlY5gyZUtPeCEcVhg8nBZx05SKlBt0GEFcz3Oh2LV1nwb/SNTj9O4gNC1o9/1rAp BJLeAeRfTKGpsRB+kSTbbrkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 369932975093034882978284346458471594975248 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 19:30:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 19:30:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fairfoodprice.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853356060397284140142816037295002052811495770560372149514286588772091851186199759402453874637435829120062395445733464057083203661456381875216759000664251382513076317353557022615351282966804451964724627100043558192050059242506098765057486437268548977499261076334829128345778541195378591147187912145072231571980560173601084319593770085505236744861036652799875080115092950221030614333207807959458984788620372523188656915725903486685508884924220264659089250293456946511547676358843209277003957071970594042979502388972267606467274758194433408425159242751173509650974070009813477692320174382659495325657978063128617791393969999205971369400326555158230979311504917390126349800091241819887182944680437175412065402026128688772433432807443346385419120730878432971065785117071823836867756290576883650146406216846560704810307371587866897052525581241112444727204020665141032396204992023502200544455537696096737815193406839107696845206703258776859381446784387307519881671628183274704228527442960681083399932516914496038296236424598132848558033004886872030980907857821603190991639875087301238668039939993214538302599075032909351334541450443019826713950711713023053581184630195422766686221883836781520276498961059946675698630119181962205628385160889 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1ea266fa5db98886b1e52f337cdbc056740ba9fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairfoodprice.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fairfoodprice.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd4adb8830000040300473045022100ceb7cda8198fbe0e4a53336182a9d5ce0e94de1f3ce8579f96ebb93210a5720f022020d2b7ed236ba785518f93b5c87ee74e410a26c182e8fe2c09a12e2fd59fae9a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bd4adb8b30000040300473045022056af9717771b1680b1acc5d6989e3aa6094c6edf8faf6d85e56c30ae750fd290022100a98ff9cbb71ac9218db06b7fbbab2139aacc0f0b08a8e81c2c163cd6770c5dc1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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