farmingtonfair.com

Issued by R3

About this certificate

This digital certificate with serial number 04:3a:38:c5:18:4d:b9:cf:d3:63:63:6f:4f:c7:93:5b:77:04 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=farmingtonfair.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3a:38:c5:18:4d:b9:cf:d3:63:63:6f:4f:c7:93:5b:77:04
Serial Number (int): 368260981151636409091249532761759068944132
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:b2:0c:d2:8d:01:57:cc:21:60:9f:c5:6f:76:0e:44:8f:8c:b7:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:ae:52:d3:4f:be:e5:bc:13:14:21:16:48:10:ea:90:47:07:18:a5
Fingerprint (sha256): a9:ae:a4:5e:b0:a0:41:0b:21:c0:32:42:fd:db:ed:81:7c:71:5a:1d:56:f0:ec:ec:8c:60:8c:83:36:37:75:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate farmingtonfair.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farmingtonfair.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

farmingtonfair.com

Other certificates including the domain name farmingtonfair.com

(limited to 100 certificates)
bestdentistinchicago.com
www.farmingtonfair.com
farmingtonfair.com
www.sydneytiler.com
farmingtonfair.com
farmingtonfair.com
www.farmingtonfair.com
judgements.ca
farmingtonfair.com
www.farmingtonfair.com
farmingtonfair.com
www.farmingtonfair.com
www.farmingtonfair.com
feestlocaties.com
www.farmingtonfair.com
farmingtonfair.com
farmingtonfair.com
69491.com
www.farmingtonfair.com

Certificate

The complete raw certificate details for farmingtonfair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISBDo4xRhNuc/TY2NvT8eTW3cEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTcyMjA3MzFaFw0yNDAyMTUyMjA3MzBaMB0xGzAZBgNVBAMT
EmZhcm1pbmd0b25mYWlyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAKgHh7LTSHrrOuRqHcGsv+j2gG9sySWutKDWtlwotOsaxfU1S8NCSRgSv/GU
gw65492wsRMfswpJ/EcyjoZcbqlTzpzdL+A7WO3KqAULu3ddszeEfnmog4xE8DVQ
NkFy4Ecrc9PqFJfHJA821FTinDsqPU7G8mVrB4onQRiPBzpxA+JIOv4gBn7Wxjdp
4QsIR1ApL4fLPnastWWFTpZzUTfBo54T69RdmrRl0ea310mQiUX4+F/QaI5GV5I+
ZYdP+seOE+tWlGikmpduIDaBVWQz0tiIMXGVI0TuOuKcwZKs5VwQrU2wzRXoqK+E
LDSr5T46vFBmCCMK6K1MVzJTZaJAOwyea7itEDGNbWdi9VQ+Hh6j42LXBuRcCgGE
1lPFYT5jwO1vgZTK5CWmi1ANkabt5noHVnyZBYvGw8W+g2wKXqvD+ZU2k63zIfvb
+46wqOsXSNz5x+0tfRqV0tse6F5o7F1gADVYzin1vq0LCTDCfFI4iOxfkPuV2g9Y
7AGaviZd7kn6n/lzIyyO/XGfg0BYwd0ip4407/D5seQQ9Nmm6PGUhWAqe3G9mnCa
THvdLVIEmLvVIGBqzbpTnvF3mT7EV3gs/2PqQmuQ15Zq2HgIGck9mi1xXpfpKCCV
d8YXZWwAHMHdqNGz42evKLX4hepdmGmthuAX+ijJswIuc/blAgMBAAGjggIWMIIC
EjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAiyDNKNAVfMIWCfxW92DkSPjLf8MB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEmZhcm1pbmd0b25mYWly
LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA
8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi9+KGgoAAAQD
AEgwRgIhANJTgICDCnxJhK8t5ZX3GpLZu2FQ02hNGZ7lLD0NgXxzAiEAhKH2N6ik
tZYG1FdnVHf493/azmIUV9OAqY+QQhB0c9YAdwA7U3d1Pi25gE6LMFsG/kA7Z9hP
w/THvQANLXJv4frUFwAAAYvfihoPAAAEAwBIMEYCIQCdEmeKtVtpjWUlvonDd1wV
UbrHzQ8sqde3dDOdQxhCVQIhALTA1ddjZwskLFd3sCHnX/nKHK1o4CxLFfcsMNYe
sWGiMA0GCSqGSIb3DQEBCwUAA4IBAQA/tBZ8XjxYXrWya/WWxjAamUTKfU8rGqyb
JcGEtX3jCQ9qs1B27K4/n9eiBO/l68o3MsG9sm1zrB8Gdf31xatXgyfTV0ZwlOoV
t5+TDi3hjXFz8LtYTuzDb0sw+8R3MaIGBvxvSaFPU296xpZupoyxNdtPyTNrIx/c
+BaW/zwR7PSYf5Dcf/RGZ01N0A6hWPz5i1jrbyHMkqTaPL5DlQhocsO1j6ejpxfJ
PJLQwq1wYMMw+Bg131aVF4tU3aj+u9zP4MYkxMGvljipNNO/1mUgOCNr2ffPMaIA
mkqGCBUW6JEdYrg083blJke8faV5/Vsu3ygd36CVtqGGoovILdK9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 368260981151636409091249532761759068944132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 22:07:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 22:07:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farmingtonfair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685500203486876203843427764047277399333863173126528531187706465871043197302313921699344661417679543932272258503267587564499033298220753277878931522340126581212370292988565327133347223583280117814350256376773470217792716633525443741584437540119106528001082453360184878441264181195214523816304221099833140180860526595202673436842420744397647215108914617236654156488282643694491375170040914540570540544949701045889204975849287678207619550311999396121331676654861875229691572544294149941235453726266516999260180961078836256763448479317767920671485394937273278454837041736021155044081881328716012910843680385129950397679320183897392165397021836633468056114119018193650558781775092702806197313021809839865332611671837746657931941898364001595986347716881608351770025817577257832056941223543882832530951103085823789818099065138616335456069786135925760579630564397137856383720820116794797996827490666569764433909134276521178376887870907626818655989739300934024108455435235688329131704603313291030213020228137163431470906906117497293199486791470117439773111178473013448954841913769287088456347019809696443753531134446968932518383781326225109809957233447639557353938901099024499312625205348209269373645756731726989334200275858287877653227894501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08b20cd28d0157cc21609fc56f760e448f8cb7fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmingtonfair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bdf8a1a0a0000040300483046022100d2538080830a7c4984af2de595f71a92d9bb6150d3684d199ee52c3d0d817c7302210084a1f637a8a4b59606d457675477f8f77fdace621457d380a98f9042107473d60077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bdf8a1a0f00000403004830460221009d12678ab55b698d6525be89c3775c1551bac7cd0f2ca9d7b774339d43184255022100b4c0d5d763670b242c5777b021e75ff9ca1cad68e02c4b15f72c30d61eb161a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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