fennellaw.com

Issued by R3

About this certificate

This digital certificate with serial number 03:07:e6:36:c8:db:aa:3b:b2:2d:bc:88:73:4a:d9:46:ae:21 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fennellaw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:e6:36:c8:db:aa:3b:b2:2d:bc:88:73:4a:d9:46:ae:21
Serial Number (int): 264024841260673773656251020346682574810657
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:a8:01:d2:58:31:9c:99:ec:58:4a:0e:df:34:2f:c8:0a:ad:ac:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:4f:7f:3e:0c:84:3f:44:33:45:b7:9c:55:15:83:3f:90:f2:68:25
Fingerprint (sha256): 7d:a1:50:f2:2b:ce:16:ed:a0:40:ed:21:66:6d:2c:99:bf:86:1c:f5:f4:ac:fb:88:fc:78:83:b8:4f:19:69:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fennellaw.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fennellaw.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fennellaw.com

Other certificates including the domain name fennellaw.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fennellaw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApuIum0DKvE3FHJBx7JZo
foe9fJHWy/3B5CeSBgM7aDl8sNDxkD79ydRZDCeeOZ0rtCdFv2imKglq3BEN0563
EIPo+eTFG7hMAxSY0yCAFSZjB+FRoPhUIcCOQLckgk4qqeJc9O44IlRlzPDlDYfD
brzfK3AYbN8wLUtN+yxLnp6g9PRnk3QZRBgAG0NScibqoTCJKg0OYDCLQgzkahX1
7KLHv8vJi3djNxRYOdARDN6iwIIgN3zghjUh1xDtmK/DmGc/XQCVe3nERzUpmETq
a1dSKM2DBluQKdce2lqwDd5DtdRnnsg9d87pacISNHbwPjMvog2ZJfALlJPc3Rcf
QIDu/JmK6Uw3TR26xe1IUqqeOKDjaVD5pIITMO0lIV7yOV/Gvr9sKcIFHogO8dvs
nW/izBjUcDskTjgYAGvff94hc324Ux6hMEqKKVwpvKD1I8CkyqVsYvyCsJeUXJ8Z
E04p3m70ZkcSAidDtOgDHoUH00xq5JtifvzDjj8ex3/4l3Eux1f9U/C8EsSryQk7
hWYtpMk1HA8I9jXckeoWksEkhxvuhmyvry8AcMjd6ENXq/GkRy5AoHWiHj/+4372
YxuCl5hyWETmQMrPut7hhT3f9ZgkjM97C6S16I78PGetMP7DWw+QSQjYZJ2F9XYI
rE39VOFY/JZX5tzum2oS3DMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264024841260673773656251020346682574810657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 08:38:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 08:38:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fennellaw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680825377342073827788191727769914010619841801933859778154445684235207071572223394758636802182603690873885424387987595281052551886911780600878705053522688043470562637354189825578956953922181234057503710625906136473637140173532503857110040351075893531804511997604326640306311198700845514865328124931886297366569488021357340048912610205448267806011636790985919109339828772233894986340008399831971108762614792976751179931818009801119054913598205126111709164599072263539306396937592492101794466526538685928875428866096717799341843591162050050843782637915842207519395165001542919359346980880324063893161183793265773901542681226717719697809297614610121944058449168949451182770710020420135147375667453347816691014997107809601891369910338242490732420164734456703022318801689609491825323137895289890592579347470868965261755762062966457659659768374599141968173854110336498589309333457825011651976318999870237840649930723110456848158315667513908422487221193095449639211663801503722326971490752705041165511849761439956190606092753443173776801961485326586881763670839705282350789195111802199854428239950097074874160468129886898947828600110148945526523185951261802483083955951107176960945116547898303328868032371237842188285293712087087140362705971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ba801d258319c99ec584a0edf342fc80aadac6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fennellaw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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