funteso.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number fb:ff:14:60:e2:5d:4e:80:6a:43:56:d4:b7:3e:ac:46 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=funteso.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): fb:ff:14:60:e2:5d:4e:80:6a:43:56:d4:b7:3e:ac:46
Serial Number (int): 334960675965092352581189847194827402310
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 20:dc:1a:22:a1:7b:6e:d6:30:2a:d6:89:1a:16:68:25:57:dd:76:42
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): be:1d:a3:63:ff:22:b5:4c:f8:08:40:1e:5d:d6:1c:2b:ae:eb:68:e5
Fingerprint (sha256): a4:d5:a6:c3:16:b4:2d:10:d6:31:25:7c:5b:3a:14:70:d6:e0:f3:ae:eb:24:94:d8:d8:cc:03:72:5c:6c:84:17

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate funteso.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for funteso.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

funteso.com
www.funteso.com

Other certificates including the domain name funteso.com

(limited to 100 certificates)
enriquevarela.es
caminodelossatelites.org
funteso.info
funteso.com
funteso.org
caminodelossatelites.org
enriquevarela.es
mail.funteso.org
funteso.com
enriquevarela.es
enriquevarela.es
caminodelossatelites.org
enriquevarela.es
enriquevarela.es
funteso.com
www.funteso.info
enriquevarela.es
enriquevarela.es
webdisk.enriquevarela.es
fts.org.es
caminodelossatelites.org
enriquevarela.es
caminodelossatelites.org
funteso.com
funteso.com
enriquevarela.es
enriquevarela.es
enriquevarela.es
mail.enriquevarela.es
funteso.com
funteso.com
funteso.com
enriquevarela.es
funteso.com
enriquevarela.es
funteso.com
enriquevarela.es
mail.funteso.com
funteso.com
caminodelossatelites.org
funteso.com
funteso.com
caminodelossatelites.org
funteso.com
funteso.com
funteso.com
enriquevarela.es
enriquevarela.es
enriquevarela.es
funteso.org
funteso.com
funteso.com
funteso.es
funteso.es
funteso.com
funteso.com
enriquevarela.es
www.funteso.org
caminodelossatelites.org
enriquevarela.es
funteso.com

Certificate

The complete raw certificate details for funteso.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBvW0VGoM88KO90zp3Pm
mTz/jBxiz7k/PkQ3CY18GZTLUbjMIjcSzhpg455KKTpA/UwAwMPkGykOF2avKuiv
rFJAnC7Ri8Xo6pAcbLB+1t92Opr4m4V3JJzkb+pQhs7R6qpgYgEYKBt8HKeQtxDR
2lSbsaHYUgaoQR2ccifo/MLgI2C6Uh5iY4kDmzrNBmAVQGGokzViJokdvjTlR94P
g3fK2uDW+NrQL1ggw7/PViYH2Vdw056m8OBUxP1qJMjK4wRJi6++0J9f2t76BGEa
YUbKmzu0oYp6+DSbfDMSWJJ2CAVasxmLj14IzJzd8vfUz8xGRvWUbd0MUQDVSxcc
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334960675965092352581189847194827402310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'funteso.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25766342200445048521756380601334371264641504764347732547810142052178469963094026873974555415835795001045778700905306097895179714672517555520302651773716568837684145846917180534544104842394978745294721984097224844375768695046930347120313292786850500570305809117155974175617511703762300558884223488468664649478701071619041937345348538207418535240543114876885330812224341161692717766559230142712187797401606145984325145453659342568331005904124529189326184278816980464012353789688120271874152016072572091909151115515927680723352102330197213121707305739431697521590957826855336023237911779654819578584384884154997327469753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20dc1a22a17b6ed6302ad6891a16682557dd7642
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funteso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funteso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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