fundit.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ab:2e:1d:f6:75:d6:e0:2c:59:15:dd:14:87:c6:55:ed:52 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fundit.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:2e:1d:f6:75:d6:e0:2c:59:15:dd:14:87:c6:55:ed:52
Serial Number (int): 406698728533745425792280132608082721500498
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 04:41:a0:87:9e:2e:96:62:2b:cf:21:3c:44:8e:7b:56:48:c4:ee:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:0c:da:c2:82:b6:c9:f9:d2:b8:7c:0e:02:bc:86:ae:23:bb:30:20
Fingerprint (sha256): cb:12:02:2e:55:66:71:ec:47:ab:02:4c:ee:83:f2:91:2d:a4:78:68:e8:0e:b5:ac:25:94:f2:03:bd:36:b0:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fundit.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fundit.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fundit.co

Other certificates including the domain name fundit.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for fundit.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISBKsuHfZ11uAsWRXdFIfGVe1SMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDQxNTAxMThaFw0x
OTA0MDQxNTAxMThaMBQxEjAQBgNVBAMTCWZ1bmRpdC5jbzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAKkHA3AbYBg9FlyQ0swX3CvgsgDgegUxfGVR5FIG
8IKYPilSpknmDubdct2xGSMcuXYM6p85WwNtns26RbHzM0Dej++4Qx+5e0CiAwrO
B6c8WuQSfZG9imDPLaMuWfvlH3CGmaQ/Y1NIFalf3ZHvYGyOJ2/ZOOQQhM8eYQWe
vSsZnoEuzRAUN4xfU/GhlS3wHJBtHcl/oQQNIYHxSC5rBbbjVK+k5XUi6ORkTVnR
dhOdRUM/gD+X7bFqkrfZb58NOVj3tf8GqBBpsJldl+Vrkl+7Q7vQB+b4xFrLQCNQ
JIawwxyH4fR0FADcyj0lsb01hY0oInc8HjwQSA00lngr8NVfZcqB769NM28lZT6T
QzL7ke9Yuh8TW5MbAcVckPM3TaI4NGSnRQLl7Av+bmFjgqrekQe/HHdUciyvkXpX
kq9BA8HYm3TDwKeshsxnKlvXIAkmHR4ka8jGBX2TSBy2brlcXHVR4nXxS6c5et2Z
9gXcpiupQBXXZAK9r+Z6zhsO1L10UpiZ+4Nbz/bpk1+BWfvlytkbgzACv78T+xvf
Ql6ySKn/xI4KsYhSUQGC7KqNyKID5i6uXdv+WI0GTIvZ2Mj+m9CdNDISKeqdfi73
lfIsogJKaqaiXIsnWktcyZWc8IBX5hI6DEiK5xKPP4v17tXdB3rAY2A4xWV+aX2X
LJYHAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFARBoIeeLpZi
K88hPESOe1ZIxO5OMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJZnVuZGl0LmNvMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdH7a
gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFoGZjsYgAABAMARzBFAiEA
/PRJQcBZCvyWZFUCIF6N7Q2Pi5LsFNWg/jDFUBZBqL0CICo9WL/N7HattVNnrV6C
g5oVtoJLRWb71OIBKWEp5O9RAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0
5UVH9HgAAAFoGZjsXgAABAMARjBEAiBuxINZz6FgY6lU+m37+Trl3HzIQFSjPyq6
ghs6cIhOOwIgFujlNplVwjm+5H3p02zFTeBbwpmeSQzkD4Y7sYkhFWIwDQYJKoZI
hvcNAQELBQADggEBAE6ZMQ9+KXoQutSM2WjI7LaGKiyYNB7a5RUCQuu6cjSs95ia
RwmsjmvgYuiueauvOwPWsSmXgvB6xThmQGb6tdS1+vaQbNEes+0Z+FqnZW7KU3l2
gY5X9fvWJ0ca2NKLfHBLI28aghesXVnUgGU8FIp4w0fi2QbA2ySDInrlIUzgRktU
Tj4eBqeP+DGuvoxa4wERZi1vHiVZpaixiMxyuLyAI2i1s+VIIbDVe2mQgnolM0u5
J3SZRVMUNulTydqsfMZtHgl5exkBxfZRleYc4Q8lnmNDBF3wZl17DVbc99WPXNSo
+vCxBC9RmYOfNfqHTisXYvNCSyo0dr/2R3yHbj4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406698728533745425792280132608082721500498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 15:01:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 15:01:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fundit.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 689571614274736548369856002288063618788572178795236834196145809538231675509793158697934967523637018055755524720961439947496218042417895160051914393795444252820670353892533059658797715277013392813038275475984648953551793107468269565277491372436940468915587038623685277310476797146534254485188933429676854813020782551583367950694900403861954476539598780720918970426841229386200104393953771934567649656430909738929348774102297644918213430219714560569577681135231983246681008675298551240364468619139447981078007300696848571422991211169000030289032141472306096416890906667538309118500872639603295905673298899270658823916374809099944066206519532107717719549214426283762563227665902527788273255476683504589435284869192289001229912190121786261929178462494810016237207185637965064759867308745935840233498455282051807256153151899210755250325564956495451965916710648085631876985728666571597583184507848883649158438242134606280370705064934687325990698390420548085242675446398652729212361374604765501938824645817393738177240258332044771188961110697542597463613628331791240745904475129958188669790166616155263945044745454077232039986312340036593176650549396115247646243141797079643294585991430228142339901657535407272579110825679536620757087720967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0441a0879e2e96622bcf213c448e7b5648c4ee4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundit.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001681998ec620000040300473045022100fcf44941c0590afc96645502205e8ded0d8f8b92ec14d5a0fe30c5501641a8bd02202a3d58bfcdec76adb55367ad5e82839a15b6824b4566fbd4e201296129e4ef51007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001681998ec5e000004030046304402206ec48359cfa16063a954fa6dfbf93ae5dc7cc84054a33f2aba821b3a70884e3b022016e8e5369955c239bee47de9d36cc54de05bc2999e490ce40f863bb189211562
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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