io-fund.com

Issued by R11

About this certificate

This digital certificate with serial number 04:4f:30:e3:a7:c5:a6:fb:42:81:5f:4f:1c:73:9b:de:60:58 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=io-fund.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:4f:30:e3:a7:c5:a6:fb:42:81:5f:4f:1c:73:9b:de:60:58
Serial Number (int): 375396435711801718659086038611395556040792
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:6a:c3:2b:2d:84:7c:5f:65:ca:9d:23:a1:c0:dc:24:d1:7e:b0:34
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): b2:2d:3c:67:7d:36:c8:6e:c4:f4:6d:6b:88:0f:92:c3:4d:b5:2a:73
Fingerprint (sha256): a1:fb:47:e9:a7:fd:02:85:4d:27:87:99:10:45:74:b7:b5:3f:43:56:79:da:25:c9:20:9c:fa:2b:05:15:89:d5

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate io-fund.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for io-fund.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

io-fund.com

Other certificates including the domain name io-fund.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for io-fund.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bHveDDCS2EATZaoEzjn
b0JJeOwnRzfq9AZJvVDk7LScZDqsE/S1/7XxucA4RGYci6VBJnUvwDNNqvtDMDDU
2JBhHZkVCwKKxLW6cgwm0hOwOkvePL1RisoTjqUdqoyBa73vMu7PO6PFKwNBzFnz
otiUE2JXy+6eqinYHFm21nsDwEXVLhSDUXfWoW1/265tlT+nTyMeerJjWgdYEykf
4DwzWtv3T1jJ+Ly5VPyNcIAUGWOUIeZW3lSKobF4OLwM1C/ysJpW7Yz1ejKSbonu
p8+PoDX/3zI58Lf+LeMiHiPa3wJU4/2o1jMwKV4svCQKTIJ1nPuPz4GP/ZSm4UF7
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375396435711801718659086038611395556040792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 05:47:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 05:47:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'io-fund.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29501268286730880671889228499193509428497402474943641846664167175407439844326684364770113393599327344642810911789524193897203395047763055585021690921455215551587971276159962865533899397315484263759566841645893608250430016322303492273789394402738411318951949046263960691569502594560809225586742353599835434012028363353008537496982227924888476376660166054889748003083399877038756467502016919730887077325381737407788008443591656063209210074439352769285738636189872044209147883753793576475034584425225243809772006606597221180753350783927219993087498278341263309645866916725806321391110948431760611145783345861643374525313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b76ac32b2d847c5f65ca9d23a1c0dc24d17eb034
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'io-fund.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001903eb34d4800000403004730450221008206db1e45c5e7875ab84a838527c106cb0e7ffaa00a19bf41be45f3966bf31202202201b325ac5c8f335bedf866b92f4e54e312cd2af986b38a3707155f8adb6eae007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c000001903eb34e3c000004030048304602210090c092228c27506a203e7a35dd28cbcb6f58093a260a7a803c2e54f50066c525022100c5dcea85839ae8961ba97d7b5daa041440aeda4fcef0333849d5a25d0824db9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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