fmtab.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4f:d3:88:24:a8:29:96:5a:a7:f9:ff:93:fe:43:64:01:54 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fmtab.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:d3:88:24:a8:29:96:5a:a7:f9:ff:93:fe:43:64:01:54
Serial Number (int): 375612624716768450872086140752802947006804
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3d:c5:2d:20:92:a5:e7:f6:90:7e:6e:bf:0e:04:67:ef:a3:dc:c2:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:ba:e1:51:ea:76:2e:fd:47:4b:d0:1f:34:a4:9e:a9:1b:e3:29:ca
Fingerprint (sha256): 87:70:0a:ab:03:9f:88:b5:c2:29:a1:f7:51:7c:bf:ef:4d:10:80:32:e1:3a:56:db:5f:72:f1:46:cd:9d:19:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fmtab.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fmtab.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fmtab.com

Other certificates including the domain name fmtab.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fmtab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375612624716768450872086140752802947006804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 19:07:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 19:07:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fmtab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758361050213199711446526026948652315760667014733150854503523897783756616764460363771629175538697243636410236875104475718818259590245461907529814552187424201168685126859089731276584959925036767377522733283854435815378058628292869869480835310985083723591704713449535087810830382464497456498487094699498884962014766404991316266342718431900400868908481047069443931005286661778946717131383765177201190088980260383825661391940538283250707298361418014399004665214565184853721938094182996391402487294647605678327290536382048231116242333595007654452409794888425358966774770211253614155063526956792347716132389159566145630952409795813471539985159964215813880874519684529135079722741228575614792237499042661729156105377421605361644501311328500184177702776997131583148636450861711942383441611969511615447134931875022836963667223786462416688615101941262655278834673121031123626576540306857247808172930370964369857502654100136931014906573368306628266765937613855748018966900317816903711211971277558328105330577683017200000651618671634605216478587691069794177982261179773586285004560572292834919898234725185984965289813923202193807629959510148704002967898951927858599909997772074214808281364335133339004699094441145294079598001429990935205199674293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3dc52d2092a5e7f6907e6ebf0e0467efa3dcc2b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmtab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4c88f5a80000040300463044022025ba2ac3361c67b742cf236544ba37e16e95601b771d3bd373af65f7a9752fa302201254b37a07278237c27a030f9a65b1ae1638d6789b6429319b0620d597972e33007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d4c88f5ba0000040300463044022000933bd6b9cd2b492c790a5a07be8988c3faf57508fa9ee944cb6ae7ebdbfefb022010201306056cd9139e25ec375a769051d26785208a591ff8df8ac7a5b127a352
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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