fsanz.com

Issued by R3

About this certificate

This digital certificate with serial number 03:16:d6:21:90:ef:fe:a7:ee:23:74:ed:2b:2f:e8:cb:3a:75 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fsanz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:d6:21:90:ef:fe:a7:ee:23:74:ed:2b:2f:e8:cb:3a:75
Serial Number (int): 269107698944117015756612595515683249011317
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:93:15:6b:c9:f5:79:2a:82:ff:35:de:12:4f:7b:3b:73:2f:ec:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:6b:dc:f6:91:b7:58:b7:e9:aa:be:92:2e:71:cb:da:51:6c:78:01
Fingerprint (sha256): a6:ff:e0:0c:8c:ea:f4:87:fd:94:1e:b9:20:0f:f4:b5:88:70:7a:56:dc:ee:39:bd:1d:87:43:62:3c:31:e7:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fsanz.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fsanz.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fsanz.com

Other certificates including the domain name fsanz.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for fsanz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269107698944117015756612595515683249011317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 19:17:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 19:17:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fsanz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635105070481600912812554848062877069107408491159539036486113528692243755620241215048354275577321110682920317161784889149615351129721302789739825982538654789680687566561819401237220184372052696662752841511448269257014656251459459340096681958484538157730767897710098574290126939106352140043631053030850296841207414421882058461389424201065519129481406631556569458198199622831391825022087397801044631116288381654666154104955613543427621870017773314847323443509064862070269101896717195030573460857965145911346951424765676762727319948108216284090899318894639848237903131715534680303552827849886187504825425278900842443013994839188941661676803966317924554744178883731314845833958695307706632237699694709646090924679599294630266122350582610828897435373690682510610850627846515021818528755077281838892692154030976809411263971116487336182359814635325847427043966111048361298020302190730215933568969223262793935597438616963628062550257189345885525810192054533761763931570038306150944352180077050730284404359222958071146907097118069537529176013284946619944544200271237841539386002417059066425944405878657467336038445703058934173930050825297413800911207554469470819066973378038612070189159992687305871134488569781595133047740850775202176285695143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f093156bc9f5792a82ff35de124f7b3b732fecb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsanz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4e0fc725000004030046304402202ead0b07bc9cd4872d3445f3803155158bc880d23a886ca0da954cfb0437651f02201f85a9b93e481587c714db5d8e219a399102d0cbf26140a56d878401558b482f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4e0fc738000004030047304502210081be5a23414255ba6dc84c9047a575bcfdb7a8d05353c6ab778bd956c2833f9e02200765eeec4a9fc176b582edff9b0fd0de58239a18b65c77ab1b055d97f2277621
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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