fizyr.com
Issued by R3
About this certificate
This digital certificate with serial number 04:34:65:08:fa:1d:c7:b6:18:5b:60:f6:b1:51:58:ef:f3:60 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fizyr.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:34:65:08:fa:1d:c7:b6:18:5b:60:f6:b1:51:58:ef:f3:60Serial Number (int): 366278125445840756750682715928267076924256
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 57:ad:db:a5:30:b7:6e:3f:41:cd:6c:c2:67:b7:37:7e:ab:38:94:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1a:f0:57:01:96:a8:15:06:64:81:39:9f:8c:01:cc:5a:03:5e:64:69
Fingerprint (sha256): 9c:1c:67:03:85:5a:ec:52:c5:17:5c:66:bb:4d:be:d3:ad:00:1e:df:7d:da:cd:1f:83:44:47:c7:2f:8c:28:64
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fizyr.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fizyr.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.fizyr.com
fizyr.com
fizyr.com
Other certificates including the domain name fizyr.com
(limited to 100 certificates)
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
office.fizyr.com
fizyr.com
fizyr.com
fizyr.com
Certificate
The complete raw certificate details for fizyr.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISBDRlCPodx7YYW2D2sVFY7/NgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjIxNDE3NTBaFw0yMzEyMjExNDE3NDlaMBQxEjAQBgNVBAMT CWZpenlyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMq95qyH oxiSgMK3PjL8RvkyY0+0ZGy9nRpc6vtMtoj/mFJC0UKScWSOzB8Llj4b2UZ8wwUk oU9AiNMHK4IhJsETTyUAWOPSiqYxA4mrLMtw5semNXjVgkEOsy5kHxJ0K0DMmTEQ lSNsZojYEoruD+pR68VUWkPB/NACmu87buKY5xEEjOF6uiJKtnwdKlfrkzpvFikR kgdOPxboh9EPe2CmItu1i91A1nwBKRwFmI9KXpDVWKvH0IiNVmSuFbruvEC9Pdmg 0z6E5AZIbX/DbviNKjlXW2dQ1tiP0fNL+rNEqilQXCmJ6V+GdDc578MNNozM+xQo kwSukIUG3GmcPHFwf6uX3dLrakg+Jh73qwS6PCW7Uip86Vpi8oRFWmx5Mjt0viQz /he4u9/WnCh5IcZlLNSmbE6jtksOw52e9sgMhXdiDu714vD5HsEk5TmuHoE629z/ P1O2Q3xYD4+5FgIQtk58pY46Cdd11Tpj59RGdZSur1xmml0Y+BllTyqPEGFViol5 65Y4v0CFHqnCg5Lksy3b1No8J9uT66qkOCdIOFKZJ5qMwn0d3YzHkVeP6mqeoXd6 BSH5F7ayq98o+xDXpS7ehuiUFMSFYOZuT/xvbbz5yi3eY4dri5Cu+lzJlrnILoc2 FagIZktgBrBrh1uaSd06V3k1tfzc/okOOXFHAgMBAAGjggIZMIICFTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFFet26Uwt24/Qc1swme3N36rOJQQMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMCEGA1UdEQQaMBiCCyouZml6eXIuY29tgglmaXp5ci5jb20w EwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgC3 Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYq9d/ZIAAAEAwBHMEUC IE0cxToNxtmhKKNPsbgjcynozFKTxHHI1SiZ+FGYiVpkAiEA+4kHtFJ6jr7gLZhy +7Yl+4BK3Cy/VdZLTKuuInfQ9lYAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir wTpXo1LrUgAAAYq9d/ZdAAAEAwBIMEYCIQD8iLQTqejAJZy+8YtGLZVjqNiKdL+l U6KKwaww2rhDYQIhAMQGsDZKWIy7n0fY3wknDgFBvCNHDxsO6/GWI/m7NOuNMA0G CSqGSIb3DQEBCwUAA4IBAQBxY7eZPi0OSRUcfd7Uniks1OcyZbrQ3aFUrhfvqeLz vo0sk8waemCFPHrlbH9qMEbeQzvwrQMejI5A3MTlPnmFfqYBSoOjpdUMWz1MoC4g K46hQAAnrPDhmP9ErEiyutfZQZVUiwWW0sB1NMLP22x8HvbArTzZyN+ZRZR2wFN1 SEatBNbYd/eLlsHcF/UFk4zC9C4M3/NXz6gZvVxMTUmS5OF5Ru2tIXdpBY94/KKu JCQBa9IKE+gqccM74Lp+LhwfbFDDe/hplBy6nlMb/yxSQQdyLlafILhFDuy4ukUE 9R+an3iBw/mPF7/kUHyNCq3s695MREwW532ti0KAa1Nm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyr3mrIejGJKAwrc+MvxG +TJjT7RkbL2dGlzq+0y2iP+YUkLRQpJxZI7MHwuWPhvZRnzDBSShT0CI0wcrgiEm wRNPJQBY49KKpjEDiassy3Dmx6Y1eNWCQQ6zLmQfEnQrQMyZMRCVI2xmiNgSiu4P 6lHrxVRaQ8H80AKa7ztu4pjnEQSM4Xq6Ikq2fB0qV+uTOm8WKRGSB04/FuiH0Q97 YKYi27WL3UDWfAEpHAWYj0pekNVYq8fQiI1WZK4Vuu68QL092aDTPoTkBkhtf8Nu +I0qOVdbZ1DW2I/R80v6s0SqKVBcKYnpX4Z0Nznvww02jMz7FCiTBK6QhQbcaZw8 cXB/q5fd0utqSD4mHverBLo8JbtSKnzpWmLyhEVabHkyO3S+JDP+F7i739acKHkh xmUs1KZsTqO2Sw7DnZ72yAyFd2IO7vXi8PkewSTlOa4egTrb3P8/U7ZDfFgPj7kW AhC2TnyljjoJ13XVOmPn1EZ1lK6vXGaaXRj4GWVPKo8QYVWKiXnrlji/QIUeqcKD kuSzLdvU2jwn25PrqqQ4J0g4UpknmozCfR3djMeRV4/qap6hd3oFIfkXtrKr3yj7 ENelLt6G6JQUxIVg5m5P/G9tvPnKLd5jh2uLkK76XMmWucguhzYVqAhmS2AGsGuH W5pJ3TpXeTW1/Nz+iQ45cUcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 366278125445840756750682715928267076924256 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 14:17:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 14:17:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fizyr.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827114386014007541711958755850944934715704637397589161377723763602618962260772296528597491408723715731353154252239106441243952672331471623346029099074659446373642728226800819814668377153190629597267693589903563371513027232066724209648007864051271261841626129123595190589242017342550895466854691520322571798937694320771117802838221909881678791602492464745748512155888883508859466944484213415375765369017236724147765216494432490174977327385536398879162585809272405821974953516759478406509330493771753997070091733263660391506467582947856164638042211494095347022764182594545419730001702278709938721848756762474935675964141438220377920014601661591689278466337584729198711607021212762001542385928742777830755565375341164932931946056244870780687491844199866314615444369076155728277657422811494156682174089519280876261324972361169404154851898704912920604655461845777960855004546598350478519524343804227993360968009634054916724989773478254656861038079569943826614852166812392875078999163215022348817936445868526738469076687054061235085017504609442227291920103278714178981482757467221073545997830571952363504686818218895914375215750567312934145479622167250338894397383167027836969217290657239697550730184750499614847741341983696188315683877191 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 57addba530b76e3f41cd6cc267b7377eab389410 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fizyr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizyr.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abd77f648000004030047304502204d1cc53a0dc6d9a128a34fb1b8237329e8cc5293c471c8d52899f85198895a64022100fb8907b4527a8ebee02d9872fbb625fb804adc2cbf55d64b4cabae2277d0f6560077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abd77f65d0000040300483046022100fc88b413a9e8c0259cbef18b462d9563a8d88a74bfa553a28ac1ac30dab84361022100c406b0364a588cbb9f47d8df09270e0141bc23470f1b0eebf19623f9bb34eb8d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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