sfiducia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:04:5c:ef:79:66:22:cd:2a:a8:ed:23:bb:52:b4:99:51:f1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sfiducia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:5c:ef:79:66:22:cd:2a:a8:ed:23:bb:52:b4:99:51:f1
Serial Number (int): 262821519659789501017725129431253249511921
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:03:f5:3b:23:1c:3d:2c:0c:28:fd:d7:36:09:c7:79:19:30:1f:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:7b:af:49:07:2d:86:4f:c4:31:09:a9:5c:53:8e:78:9d:66:c8:e8
Fingerprint (sha256): ae:8d:37:cd:ef:df:54:65:e8:aa:2c:d1:1e:0a:6b:3d:40:f8:c7:c2:a8:d9:ef:9c:38:8c:8d:e2:9e:bd:d5:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sfiducia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfiducia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sfiducia.com

Other certificates including the domain name sfiducia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sfiducia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgISAwRc73lmIs0qqO0ju1K0mVHxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTEwMzMyMzNaFw0x
OTEyMTAwMzMyMzNaMBcxFTATBgNVBAMTDHNmaWR1Y2lhLmNvbTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMt4lQkvJhCI/KPKcnIBgqJQ/GmU/p4OfPYd
4o1GhSaPX7O7h1gXZQKWjleg4d56TyhNKjZLFDgWZMIjlu2yoy+aVsfSnvyimk60
dkCHebp50MIVrz7yUtMvcxi9+S7vi5lpNBkw83oS6tvZg8yiHxJMqqJXjcuV45pf
73YYZQaq750151oxTXlvlS1Kq4qruKKU+wl3XUL6ciM0abkSbgHKKn3RTI7Ah1GS
7KudEZH6pNdYX47FvtZGkvTQi+gz649Z96/guR/KDfK6Q3o9ykrpA3/vMGg7FGEx
TaWKYnSh83lGztkZlQq97fPFz2AtVDwnpOAgr7U12OFKf03XzceH4ZerJ54elRRy
pF8BYWTajORGT7aHLaswyUO+WRCAUJdFq1XG0byWeJV1BOPTIIjmdqymi5+PUxkB
y7FwV9TU6fdzbgleVZeNwCxrCjOTGpoINdJQJQujzPCk0dB1/l5/fcTtK1E+eIsz
L0JzT5Y+aGr9HMxJevx/sgZXPO58+OXhsRCkSR0bRITbt19j8fHPlAtnr2/r6kpG
GOVevl1O7RhDCPuPi+GiL9OecB5HVqnnITMbU1/I+AXVR3KsiATTyiXbjELPTqCE
InmKpJ0bOByggeLa+kyKW2s4Lj2eWutPjyhLRZdga4oXslnWGKf01vysn84BujC0
6Jo7ZujPAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNoD9Tsj
HD0sDCj91zYJx3kZMB/qMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMc2ZpZHVjaWEuY29tMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFtHpgytgAABAMA
RzBFAiBK6m2nMtGl/zk94n3rNJ+tWu61cBKzeyFIvx91LAAOBgIhAII8iIVyISZS
PFiaKiNxeMT9QDpKiZi8uAVI6ONiBTv7AHYAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFtHpgyqAAABAMARzBFAiEA3NPBzQYeIZfXLGIrMRICHUxg
ZwfqyCjm7eJduofga04CIH5xM9+2UwDzdeAPVX14D6LuVJa89N/bWGEylnq/zhfI
MA0GCSqGSIb3DQEBCwUAA4IBAQBLx2Jj4Y3ssEwR7YsBTNws9/wfqX0vZBEhOnbU
PxlOcfxaoSxdwxHKLzE/XWeDy1JKbReqpvnohXBYL3gyav74SuKzKZcQGpO/enHf
sLxLrXl8RZZTnW9x2Zdi7PCOVjcG/mgDt6b9TIQrukf+0pshkryT03pjnxSJFLHV
eyvrgu3lBk9+WCAvP14ZFFH1cJtenKlBgeHiqduGW7CCIhR0LcAsBpmMOZNhCCMN
+a4XPmbQrSRXMJ/2lmXkwlqEieYqnxe5E+YBlZJTGyyFslRKUTteZW0GHVptshKl
aPBpePjCf/Xs62e3t9Ey9tiiI3eWwhKJMs5n9GBeL6zLJpj4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262821519659789501017725129431253249511921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 03:32:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 03:32:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sfiducia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830089356512061091113974397181170398838813985303614481544955146516184678238300150804256587523841440691755543944257216739292995363429044110232915921258869799906034208196131282646091578710571915837632667346465926057355767397554473313791900370322221096222417963972073141055938610179477185081435674470132122901516373403470239512232458727188074731928553636244604099389106245019735930593477631832131100595489543407537819484446910228835000707201080812624592875337510216341220240854464604657960803640418669702395620514774224291388937709499709559157885020078972064636529066888173289176922122967990867783624881326244822679687359626764764682701194326807963808427298515184303066930163120623474911708548277580249681084519281746713364899601846390874192488755130963671829312305271372933261358196593480446509468397560356026516515805807316364758792483775219493497511437462468878047233273631329182746164824807584103754885512987831086870212584902077297041223546943517871772670030621057084636665573887991752845205900955385043860810938519468738395922211973818844793643653885159170910928368075918845686719417083371826420716338826875745108812215510473611591245315103603863574587120673256195713878199449735884019288485667047801106657952848390026054710257871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da03f53b231c3d2c0c28fdd73609c77919301fea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfiducia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d1e9832b6000004030047304502204aea6da732d1a5ff393de27deb349fad5aeeb57012b37b2148bf1f752c000e06022100823c8885722126523c589a2a237178c4fd403a4a8998bcb80548e8e362053bfb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d1e9832a80000040300473045022100dcd3c1cd061e2197d72c622b3112021d4c606707eac828e6ede25dba87e06b4e02207e7133dfb65300f375e00f557d780fa2ee5496bcf4dfdb586132967abfce17c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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