fundit.co
Issued by R3
About this certificate
This digital certificate with serial number 04:a9:be:9d:b2:a3:3d:fd:e0:7d:39:12:7d:de:95:3b:5a:5f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fundit.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a9:be:9d:b2:a3:3d:fd:e0:7d:39:12:7d:de:95:3b:5a:5fSerial Number (int): 406210235869687796339369243996027138824799
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 9d:d4:03:c4:1e:51:cc:ba:21:58:c4:e9:79:79:49:07:d8:1d:c7:90
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 9e:56:44:5a:8e:26:af:ff:60:16:d9:8a:3d:ab:de:3d:d8:08:c5:47
Fingerprint (sha256): 97:69:5c:13:47:ff:81:22:7d:96:aa:ef:bd:7e:17:7c:4d:e3:3b:38:0a:c5:43:b8:1f:1f:4c:54:d9:89:43:90
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fundit.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fundit.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fundit.co
Other certificates including the domain name fundit.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for fundit.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgISBKm+nbKjPf3gfTkSfd6VO1pfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MDMwMTE0MjJaFw0yMzExMDEwMTE0MjFaMBQxEjAQBgNVBAMT CWZ1bmRpdC5jbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbNCt8m Uhtc5XjMbfHdta5ObkbTLMV/vP09Wy99sJnejZnPGUJBe0UAYzeUfOwToCWA1EuX 0pxy1QlC1IpHd/ddUYd3OVtoepm7VxJYvva5K+vZgLp4ShGNXO+CYV23PSbvjJOO jpQ1IQ1peLN+yH6+73mc65pf93iP7qM41dnkPYuGdk8aRzm2bh9NontTP17OCHBM 4WgpXiH7PRSuPpYowKaIKExouS3RKf3QqrCoeWLCLaE7NKZdW6+5SUaySuIAmPJm N3DQlW+W814Zygq5HXqMTKvhVj0lAzhyoL3NjEQHZVwbt08ttKP2L/dIixIIUaGo 8HpjLgFtEvHeM30CAwEAAaOCAgowggIGMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU ndQDxB5RzLohWMTpeXlJB9gdx5AwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wFAYD VR0RBA0wC4IJZnVuZGl0LmNvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS 61IAAAGJuSy14AAABAMARjBEAiBtWykIfyH5ADxmDNLl6Vz1n3ScV0tS5EE9s7p/ +BWnIgIgVnKmv5upd9qDkGn4PirkD8XkaApOPI7KbkIrWolOwakAdgDoPtDaPvUG NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYm5LLXUAAAEAwBHMEUCIQD4Ypv7 YE3dFwfzmviHVa9hSdQ3S7BnwCNadYVqwfvkugIgSz06G9gXIpSFjDJ4vBZ0RIAT txpvH1gXgjh2HzYY85gwDQYJKoZIhvcNAQELBQADggEBAGVP05LohICT6TxFp0xB 6thGPYEETAjncTd7bknaJFG6cMhVgmft3D17mV3wGGL3bw6rv8idOMbqxoAYzxoN A/7F++Gh3RFI6YsfJQHkgIYhv2D8OghO3wPrBRvQeOcvWdt3xfvrmaf4XIPq8+mu G+e92tyQ3Uj58rtPn4q/UesrX8xpDNZqhnV8sdYSRqVCHYQtHBaPyMTrlm6hQkwU tZfZwaj+kaMFF2Ef+OBrvtzt252xyymt22f+g0g7tuA8ahuf38Z76D1J+Yj3aonk QAby1o2SNfnTduKIucQy0n6iVGYwjQjJ7FhJhXW9whftvAvnc7eLfiPiGckyVnCn A0M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts0K3yZSG1zleMxt8d21 rk5uRtMsxX+8/T1bL32wmd6Nmc8ZQkF7RQBjN5R87BOgJYDUS5fSnHLVCULUikd3 911Rh3c5W2h6mbtXEli+9rkr69mAunhKEY1c74JhXbc9Ju+Mk46OlDUhDWl4s37I fr7veZzrml/3eI/uozjV2eQ9i4Z2TxpHObZuH02ie1M/Xs4IcEzhaCleIfs9FK4+ lijApogoTGi5LdEp/dCqsKh5YsItoTs0pl1br7lJRrJK4gCY8mY3cNCVb5bzXhnK CrkdeoxMq+FWPSUDOHKgvc2MRAdlXBu3Ty20o/Yv90iLEghRoajwemMuAW0S8d4z fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 406210235869687796339369243996027138824799 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 01:14:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 01:14:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fundit.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23076481712973089588819708313709266168476446374699578006415162790746778497511378751351299230436291595799409799231750408251054445341760777880036664106951588420677875896943457244080509491825139647430816168242843490060929714996277301614491247781875238336602647304842691486955446675231077664628841925020698776050250996907948998534298263497533953095647231969878976600090379495627847364892373069695890638845754074705426777041037671344208730217722142157808291893979729498533527119558374607345381914813801859702981759053010307844468466374650252784737042816618319898816039037666327539416065122369159454770285219152665258111869 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9dd403c41e51ccba2158c4e979794907d81dc790 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundit.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189b92cb5e0000004030046304402206d5b29087f21f9003c660cd2e5e95cf59f749c574b52e4413db3ba7ff815a72202205672a6bf9ba977da839069f83e2ae40fc5e4680a4e3c8eca6e422b5a894ec1a9007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189b92cb5d40000040300473045022100f8629bfb604ddd1707f39af88755af6149d4374bb067c0235a75856ac1fbe4ba02204b3d3a1bd8172294858c3278bc1674448013b71a6f1f58178238761f3618f398 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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