fundit.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:ab:2e:1d:f6:75:d6:e0:2c:59:15:dd:14:87:c6:55:ed:52 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fundit.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ab:2e:1d:f6:75:d6:e0:2c:59:15:dd:14:87:c6:55:ed:52Serial Number (int): 406698728533745425792280132608082721500498
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 04:41:a0:87:9e:2e:96:62:2b:cf:21:3c:44:8e:7b:56:48:c4:ee:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4d:0c:da:c2:82:b6:c9:f9:d2:b8:7c:0e:02:bc:86:ae:23:bb:30:20
Fingerprint (sha256): cb:12:02:2e:55:66:71:ec:47:ab:02:4c:ee:83:f2:91:2d:a4:78:68:e8:0e:b5:ac:25:94:f2:03:bd:36:b0:ad
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fundit.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fundit.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fundit.co
Other certificates including the domain name fundit.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for fundit.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISBKsuHfZ11uAsWRXdFIfGVe1SMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDQxNTAxMThaFw0x OTA0MDQxNTAxMThaMBQxEjAQBgNVBAMTCWZ1bmRpdC5jbzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAKkHA3AbYBg9FlyQ0swX3CvgsgDgegUxfGVR5FIG 8IKYPilSpknmDubdct2xGSMcuXYM6p85WwNtns26RbHzM0Dej++4Qx+5e0CiAwrO B6c8WuQSfZG9imDPLaMuWfvlH3CGmaQ/Y1NIFalf3ZHvYGyOJ2/ZOOQQhM8eYQWe vSsZnoEuzRAUN4xfU/GhlS3wHJBtHcl/oQQNIYHxSC5rBbbjVK+k5XUi6ORkTVnR dhOdRUM/gD+X7bFqkrfZb58NOVj3tf8GqBBpsJldl+Vrkl+7Q7vQB+b4xFrLQCNQ JIawwxyH4fR0FADcyj0lsb01hY0oInc8HjwQSA00lngr8NVfZcqB769NM28lZT6T QzL7ke9Yuh8TW5MbAcVckPM3TaI4NGSnRQLl7Av+bmFjgqrekQe/HHdUciyvkXpX kq9BA8HYm3TDwKeshsxnKlvXIAkmHR4ka8jGBX2TSBy2brlcXHVR4nXxS6c5et2Z 9gXcpiupQBXXZAK9r+Z6zhsO1L10UpiZ+4Nbz/bpk1+BWfvlytkbgzACv78T+xvf Ql6ySKn/xI4KsYhSUQGC7KqNyKID5i6uXdv+WI0GTIvZ2Mj+m9CdNDISKeqdfi73 lfIsogJKaqaiXIsnWktcyZWc8IBX5hI6DEiK5xKPP4v17tXdB3rAY2A4xWV+aX2X LJYHAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFARBoIeeLpZi K88hPESOe1ZIxO5OMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJZnVuZGl0LmNvMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFoGZjsYgAABAMARzBFAiEA /PRJQcBZCvyWZFUCIF6N7Q2Pi5LsFNWg/jDFUBZBqL0CICo9WL/N7HattVNnrV6C g5oVtoJLRWb71OIBKWEp5O9RAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFoGZjsXgAABAMARjBEAiBuxINZz6FgY6lU+m37+Trl3HzIQFSjPyq6 ghs6cIhOOwIgFujlNplVwjm+5H3p02zFTeBbwpmeSQzkD4Y7sYkhFWIwDQYJKoZI hvcNAQELBQADggEBAE6ZMQ9+KXoQutSM2WjI7LaGKiyYNB7a5RUCQuu6cjSs95ia RwmsjmvgYuiueauvOwPWsSmXgvB6xThmQGb6tdS1+vaQbNEes+0Z+FqnZW7KU3l2 gY5X9fvWJ0ca2NKLfHBLI28aghesXVnUgGU8FIp4w0fi2QbA2ySDInrlIUzgRktU Tj4eBqeP+DGuvoxa4wERZi1vHiVZpaixiMxyuLyAI2i1s+VIIbDVe2mQgnolM0u5 J3SZRVMUNulTydqsfMZtHgl5exkBxfZRleYc4Q8lnmNDBF3wZl17DVbc99WPXNSo +vCxBC9RmYOfNfqHTisXYvNCSyo0dr/2R3yHbj4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqQcDcBtgGD0WXJDSzBfc K+CyAOB6BTF8ZVHkUgbwgpg+KVKmSeYO5t1y3bEZIxy5dgzqnzlbA22ezbpFsfMz QN6P77hDH7l7QKIDCs4Hpzxa5BJ9kb2KYM8toy5Z++UfcIaZpD9jU0gVqV/dke9g bI4nb9k45BCEzx5hBZ69KxmegS7NEBQ3jF9T8aGVLfAckG0dyX+hBA0hgfFILmsF tuNUr6TldSLo5GRNWdF2E51FQz+AP5ftsWqSt9lvnw05WPe1/waoEGmwmV2X5WuS X7tDu9AH5vjEWstAI1AkhrDDHIfh9HQUANzKPSWxvTWFjSgidzwePBBIDTSWeCvw 1V9lyoHvr00zbyVlPpNDMvuR71i6HxNbkxsBxVyQ8zdNojg0ZKdFAuXsC/5uYWOC qt6RB78cd1RyLK+ReleSr0EDwdibdMPAp6yGzGcqW9cgCSYdHiRryMYFfZNIHLZu uVxcdVHidfFLpzl63Zn2BdymK6lAFddkAr2v5nrOGw7UvXRSmJn7g1vP9umTX4FZ ++XK2RuDMAK/vxP7G99CXrJIqf/EjgqxiFJRAYLsqo3IogPmLq5d2/5YjQZMi9nY yP6b0J00MhIp6p1+LveV8iyiAkpqpqJciydaS1zJlZzwgFfmEjoMSIrnEo8/i/Xu 1d0HesBjYDjFZX5pfZcslgcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 406698728533745425792280132608082721500498 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 15:01:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 15:01:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fundit.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689571614274736548369856002288063618788572178795236834196145809538231675509793158697934967523637018055755524720961439947496218042417895160051914393795444252820670353892533059658797715277013392813038275475984648953551793107468269565277491372436940468915587038623685277310476797146534254485188933429676854813020782551583367950694900403861954476539598780720918970426841229386200104393953771934567649656430909738929348774102297644918213430219714560569577681135231983246681008675298551240364468619139447981078007300696848571422991211169000030289032141472306096416890906667538309118500872639603295905673298899270658823916374809099944066206519532107717719549214426283762563227665902527788273255476683504589435284869192289001229912190121786261929178462494810016237207185637965064759867308745935840233498455282051807256153151899210755250325564956495451965916710648085631876985728666571597583184507848883649158438242134606280370705064934687325990698390420548085242675446398652729212361374604765501938824645817393738177240258332044771188961110697542597463613628331791240745904475129958188669790166616155263945044745454077232039986312340036593176650549396115247646243141797079643294585991430228142339901657535407272579110825679536620757087720967 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0441a0879e2e96622bcf213c448e7b5648c4ee4e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundit.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001681998ec620000040300473045022100fcf44941c0590afc96645502205e8ded0d8f8b92ec14d5a0fe30c5501641a8bd02202a3d58bfcdec76adb55367ad5e82839a15b6824b4566fbd4e201296129e4ef51007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001681998ec5e000004030046304402206ec48359cfa16063a954fa6dfbf93ae5dc7cc84054a33f2aba821b3a70884e3b022016e8e5369955c239bee47de9d36cc54de05bc2999e490ce40f863bb189211562 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004e99310f7e297a10bad48cd968c8ecb6862a2c98341edae5150242ebba7234acf7989a4709ac8e6be062e8ae79abaf3b03d6b1299782f07ac538664066fab5d4b5faf6906cd11eb3ed19f85aa7656eca537976818e57f5fbd627471ad8d28b7c704b236f1a8217ac5d59d480653c148a78c347e2d906c0db2483227ae5214ce0464b544e3e1e06a78ff831aebe8c5ae30111662d6f1e2559a5a8b188cc72b8bc802368b5b3e54821b0d57b6990827a25334bb927749945531436e953c9daac7cc66d1e09797b1901c5f65195e61ce10f259e6343045df0665d7b0d56dcf7d58f5cd4a8faf0b1042f5199839f35fa874e2b1762f3424b2a3476bff6477c876e3e