fundit.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:bd:fa:3a:fc:f3:18:8a:5b:20:73:83:b8:10:40:ed:1c:ea was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fundit.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:bd:fa:3a:fc:f3:18:8a:5b:20:73:83:b8:10:40:ed:1c:eaSerial Number (int): 413095124357689638682821774769418708786410
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: aa:56:a7:5f:07:98:ee:ce:b7:4b:e3:a1:03:67:17:f5:54:a4:cd:1d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 20:a6:73:20:d7:56:13:e4:96:e2:7e:7f:5d:e4:90:b0:a8:17:dc:a2
Fingerprint (sha256): 90:e2:97:5c:28:7a:d9:03:d1:a5:80:04:dd:d0:24:be:fd:c0:d7:ac:09:dc:27:ba:84:e8:01:38:ef:43:96:f0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fundit.co
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fundit.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fundit.co
www.fundit.co
www.fundit.co
Other certificates including the domain name fundit.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for fundit.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgISBL36OvzzGIpbIHODuBBA7RzqMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTExMTI3NDBaFw0x OTEyMTAxMTI3NDBaMBQxEjAQBgNVBAMTCWZ1bmRpdC5jbzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBALeVkOd7r/MmB08y5ayB7ePImt8q8R2+H4bVmYCT zZiimVDeW9jE+QM/0dLKyi03u8lXWgVKwMB/Oanxn+I4QipeuvhxEqssO3zO1lS7 idjHr/VEdhTYOT0sI8baQuL7vWcvirFIXacPYNVk4ZMD2Oe64BaF8NFnlkmv5mmC 6fGb7NaEsz1z4U6oRaIA2Ebaxk998EZE1kwDJFqACkoU4WGzCktPmirMrDpxghgK SmCk3LEak8SbLNRCKvuRStpV2Oft9/BtfxBv9wfTxM5a8brqkkknUrC/gS55+yIj EE3R+u2FRSIRpRlmWdvXS3J1kjHmUJUui+7mIeXT6Topv0xd/qRXdO2gYaYnE1V8 xvw0nO9/N3T7O+qb0Igc0hpXrUavz1EedV5sl6gxENxk+w5GofeJ5UFEQOtW+Lv0 9x37e4sWxscJ0/KdnjSFuUpSKFo/k7QKuW/fzRyCZmA712Ji10ctZgoUo1VVp60B OX1Vn7wFKkCNE7upUNcebtDzgZHeDPnZivdAz4iUKL9g3yFRhHLI1H/K2n6g3svF 8/qh/5lsmH4lswysWlHne3CyOlcOKVVmkaCN+wjG+aa2dOz7hurnhJaxCCQsymJp 7covWYZMm5wAy5T14n1myyYoUxSlDYUvtpR7BfSzQRx59a6A1gpdR96Id7RCIo4Y l6lhAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKpWp18HmO7O t0vjoQNnF/VUpM0dMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJZnVuZGl0LmNvgg13d3cuZnVuZGl0 LmNvMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFt IEss7wAABAMARzBFAiEAxmnjU2LOQqeKz+bFJBqYb9S+t5gzbUYFy5kRTT6/1e4C IHp7HwjkRCEDVRomxkHvCmqMrsgG68WUoqOCzRb8avMxAHYAY/Lbzeg7zCzPC3KE J1drM6SNYXePvXWmOLHHaFRL2I0AAAFtIEss5wAABAMARzBFAiEAp2A053QuUK8j 8tl8tCGud1ulQRJ8TxGCWV1NDT9TUNYCIH3/qLpQosfvbuC4ZJGpj7BYC4RALgaW 1lt9G2yFg7t5MA0GCSqGSIb3DQEBCwUAA4IBAQAW8Gmf6p5fX8NbrsuFJaiJwoPE Q8kYIBAUpor77fzTelUx8qAD28fRgkkxdtYOusbJml7TZ/kMCib7s6EhE2+wLlBJ rQoUl951ovEJYjyMTS1LdwaTzKjQl9XhFE1tJxIpjtJ185HcGCC4pjeommawfQ1Q BGyG9MUc++U0mRR8bjpS2uuTeuOk6wa33bIiS3QalBl+Bwa1iqGgTL2Sy0V8PjYz kzkfl6j00SQPG8OpLAggSLTS94BcjZChVpka3vLrIk7HO8IU+yxPRMhHEf/jweuK NDMGHULwEJH+0kM0GglsB4Ys0K3WboDYvp5BPLAbRGdE0H7upBsq0Tr1qLAK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt5WQ53uv8yYHTzLlrIHt 48ia3yrxHb4fhtWZgJPNmKKZUN5b2MT5Az/R0srKLTe7yVdaBUrAwH85qfGf4jhC Kl66+HESqyw7fM7WVLuJ2Mev9UR2FNg5PSwjxtpC4vu9Zy+KsUhdpw9g1WThkwPY 57rgFoXw0WeWSa/maYLp8Zvs1oSzPXPhTqhFogDYRtrGT33wRkTWTAMkWoAKShTh YbMKS0+aKsysOnGCGApKYKTcsRqTxJss1EIq+5FK2lXY5+338G1/EG/3B9PEzlrx uuqSSSdSsL+BLnn7IiMQTdH67YVFIhGlGWZZ29dLcnWSMeZQlS6L7uYh5dPpOim/ TF3+pFd07aBhpicTVXzG/DSc7383dPs76pvQiBzSGletRq/PUR51XmyXqDEQ3GT7 Dkah94nlQURA61b4u/T3Hft7ixbGxwnT8p2eNIW5SlIoWj+TtAq5b9/NHIJmYDvX YmLXRy1mChSjVVWnrQE5fVWfvAUqQI0Tu6lQ1x5u0POBkd4M+dmK90DPiJQov2Df IVGEcsjUf8rafqDey8Xz+qH/mWyYfiWzDKxaUed7cLI6Vw4pVWaRoI37CMb5prZ0 7PuG6ueElrEIJCzKYmntyi9ZhkybnADLlPXifWbLJihTFKUNhS+2lHsF9LNBHHn1 roDWCl1H3oh3tEIijhiXqWECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 413095124357689638682821774769418708786410 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 11:27:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 11:27:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fundit.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748958365134592253098030546606158140220931627114748714048789804593255440616333831386820283557286744804732664847833254222896624213035414251302545204816863491070234278789575492262630470054155311919085569295508149106910195356862635645689544449531155284818450193676023252244015286662413506572505859501414615371096159514142322237797221493036733628082460829879218705040845385831925643184263001927003879064281142689187093152906340939560779957511281733094568321952545505738410766114411832933246640386648216149777886612412276205093475447629754454572010538989434668245049153030960386378290303357321105516073460905781851581622653625274147614957727599383063342142686881048268538863845779722677391029075870988407208360766207454442598000853836276781998352149083650038866918493060849072751916152134690400243596342854790108008099328497000894505246819915224596621265125793345203261938329232132048770669161223896654903281050960181758430387898695984976306499166778944583055146553549926596450825100073344876858904700897644078645644357177907338790398975300526350913400794114215065586419413518687880130555558718494071937625407273229140147768626721084751684403913776723614828761395863680398688868231263786253516054541724828102586383745242302892950196562273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aa56a75f0798eeceb74be3a1036717f554a4cd1d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundit.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundit.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d204b2cef0000040300473045022100c669e35362ce42a78acfe6c5241a986fd4beb798336d4605cb99114d3ebfd5ee02207a7b1f08e4442103551a26c641ef0a6a8caec806ebc594a2a382cd16fc6af33100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d204b2ce70000040300473045022100a76034e7742e50af23f2d97cb421ae775ba541127c4f1182595d4d0d3f5350d602207dffa8ba50a2c7ef6ee0b86491a98fb0580b84402e0696d65b7d1b6c8583bb79 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0016f0699fea9e5f5fc35baecb8525a889c283c443c918201014a68afbedfcd37a5531f2a003dbc7d182493176d60ebac6c99a5ed367f90c0a26fbb3a121136fb02e5049ad0a1497de75a2f109623c8c4d2d4b770693cca8d097d5e1144d6d2712298ed275f391dc1820b8a637a89a66b07d0d50046c86f4c51cfbe53499147c6e3a52daeb937ae3a4eb06b7ddb2224b741a94197e0706b58aa1a04cbd92cb457c3e363393391f97a8f4d1240f1bc3a92c082048b4d2f7805c8d90a156991adef2eb224ec73bc214fb2c4f44c84711ffe3c1eb8a3433061d42f01091fed243341a096c07862cd0add66e80d8be9e413cb01b446744d07eeea41b2ad13af5a8b00a