fizyr.com

Issued by R3

About this certificate

This digital certificate with serial number 04:34:65:08:fa:1d:c7:b6:18:5b:60:f6:b1:51:58:ef:f3:60 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fizyr.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:65:08:fa:1d:c7:b6:18:5b:60:f6:b1:51:58:ef:f3:60
Serial Number (int): 366278125445840756750682715928267076924256
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:ad:db:a5:30:b7:6e:3f:41:cd:6c:c2:67:b7:37:7e:ab:38:94:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:f0:57:01:96:a8:15:06:64:81:39:9f:8c:01:cc:5a:03:5e:64:69
Fingerprint (sha256): 9c:1c:67:03:85:5a:ec:52:c5:17:5c:66:bb:4d:be:d3:ad:00:1e:df:7d:da:cd:1f:83:44:47:c7:2f:8c:28:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fizyr.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fizyr.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fizyr.com
fizyr.com

Other certificates including the domain name fizyr.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fizyr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366278125445840756750682715928267076924256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 14:17:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 14:17:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fizyr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827114386014007541711958755850944934715704637397589161377723763602618962260772296528597491408723715731353154252239106441243952672331471623346029099074659446373642728226800819814668377153190629597267693589903563371513027232066724209648007864051271261841626129123595190589242017342550895466854691520322571798937694320771117802838221909881678791602492464745748512155888883508859466944484213415375765369017236724147765216494432490174977327385536398879162585809272405821974953516759478406509330493771753997070091733263660391506467582947856164638042211494095347022764182594545419730001702278709938721848756762474935675964141438220377920014601661591689278466337584729198711607021212762001542385928742777830755565375341164932931946056244870780687491844199866314615444369076155728277657422811494156682174089519280876261324972361169404154851898704912920604655461845777960855004546598350478519524343804227993360968009634054916724989773478254656861038079569943826614852166812392875078999163215022348817936445868526738469076687054061235085017504609442227291920103278714178981482757467221073545997830571952363504686818218895914375215750567312934145479622167250338894397383167027836969217290657239697550730184750499614847741341983696188315683877191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57addba530b76e3f41cd6cc267b7377eab389410
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fizyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fizyr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abd77f648000004030047304502204d1cc53a0dc6d9a128a34fb1b8237329e8cc5293c471c8d52899f85198895a64022100fb8907b4527a8ebee02d9872fbb625fb804adc2cbf55d64b4cabae2277d0f6560077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018abd77f65d0000040300483046022100fc88b413a9e8c0259cbef18b462d9563a8d88a74bfa553a28ac1ac30dab84361022100c406b0364a588cbb9f47d8df09270e0141bc23470f1b0eebf19623f9bb34eb8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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