fundit.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:3b:db:41:d1:6b:88:23:63:af:4f:a4:28:a8:a3:42:1d:d0 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fundit.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:3b:db:41:d1:6b:88:23:63:af:4f:a4:28:a8:a3:42:1d:d0Serial Number (int): 281704960121531963920885581516911495224784
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 46:fc:ad:f6:ca:91:16:3f:cd:56:57:ad:1e:ad:a6:02:c5:e9:aa:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c5:eb:02:6a:66:f2:a9:6a:f1:c4:49:1a:84:b5:e0:e7:2a:01:3d:a9
Fingerprint (sha256): d0:93:83:24:2e:0b:12:08:7f:6c:43:2e:80:0d:92:50:99:2d:53:41:16:9a:69:02:84:92:fa:3c:12:8f:59:2c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate fundit.co
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fundit.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fundit.co
www.fundit.co
www.fundit.co
Other certificates including the domain name fundit.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for fundit.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISAzvbQdFriCNjr0+kKKijQh3QMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTEwOTQyMTNaFw0y MDAyMDkwOTQyMTNaMBQxEjAQBgNVBAMTCWZ1bmRpdC5jbzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBANbcBsNZRkqYNbbTYLeoVQf6D9xj89NIz68nfwzt aYKrsbQGmK+Tyw6t1pQSdqSRS6unDWObWtYFQl3Zb/zCtq2VuIeXmHCrWRe11ID7 1Ey5bv6sZuAWECB/zPgDnazkyhYaHo25HwZp8j7y35ITQHHPELdA2hDdB91dSCbC dqa48690Xz9hUGDrbFNc/Ge1HsEav77ZY0ImmiHJMmNrM6DFT3B19PVtVSMDCQt1 4ZgrQATbkfxyj6uJLM6wCkaz7P1YgavYwfnbv68zR77mprdnH2lZHJ/tizx3htRL uu5dyqU3XInpV1GP/EMA1QuEcGpzjZ/yqzeHH3VRARjPfP3qWTbbDU9hU5fRnZwO mCapeZsZ/da8fdiDMzXLqArBtIq3LurfCzTRFd0dxVt4KN7KTrTvCrLkeCKvgnJz TH7g8gjPgx7k5+THnSh6Q/E6eUanxm68GNIzqkNAeBFqjiYASogNCronh1qfs9Ki qgwVu2Z1Fbn+97nxkC4pIq98aXIKciAzxqjClOrXtvX/udkKJla3ed/4avOeLH6n wkTcb4HOK5xrs8TsoNibTX5w+A8vXb7hZt4gPLDsLfWZ7d4W+KKDRpykY96uH0kL oipRfHHMVQV147IaOJzwKKMCfSyvtQrDmsZLn07ZnrVVyp632dXKHt3st4Zng3iN +dkFAgMBAAGjggJvMIICazAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEb8rfbKkRY/ zVZXrR6tpgLF6aphMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJZnVuZGl0LmNvgg13d3cuZnVuZGl0 LmNvMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIE AgSB9wSB9ADyAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFu Wg6N2wAABAMASDBGAiEA6s7P70hNss/AE9iqfkM5wByY8zjWZDHkXfIh0pS8YC8C IQDkB1/XXRjweohwNj0mQx1npOsXjAdH0chBjL2HrDXkYAB3AF6nc/nfVsDntTZI fdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbloOj30AAAQDAEgwRgIhAJX/Qu6Lwclc Q2SkA9aqCWb3z0NMHwiClGsgx7P6TEfGAiEAoK/k8bKxflGAY30mg6tfk6x7xqYE f4z4hP80gEjLL4gwDQYJKoZIhvcNAQELBQADggEBAIaY3JxVGEgKEjrNkCLn8FLB tnmGg0HVccrvdA2x7oUX3XXdAhA75bGb8FOtt217MYmHBgAhsIGZweUzdQoG0KJB Zy4NevxYpHId43US2AaCeYdISNaPSNiKnd7VR5ofDToVASPD1YBrI8nCuK1IoWlm c3XWaaWTPplcP9L97B2bu56YmBdTvtazRmqG/FQXkzCi41iunWP7qfDbyJDHNr7W pVzYXEYU1X8KDsQcqZVNbhWgQhqhzd0gOqS4Jy+aPNN/WKUTVwT/qbk/8rzCXlVx aqff6X5IoLya1WS6JyaED1hq1PS9XZvaqy/vkzafJhpMJ/GyWHuP1z5DYxTvZ/4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1twGw1lGSpg1ttNgt6hV B/oP3GPz00jPryd/DO1pgquxtAaYr5PLDq3WlBJ2pJFLq6cNY5ta1gVCXdlv/MK2 rZW4h5eYcKtZF7XUgPvUTLlu/qxm4BYQIH/M+AOdrOTKFhoejbkfBmnyPvLfkhNA cc8Qt0DaEN0H3V1IJsJ2prjzr3RfP2FQYOtsU1z8Z7UewRq/vtljQiaaIckyY2sz oMVPcHX09W1VIwMJC3XhmCtABNuR/HKPq4kszrAKRrPs/ViBq9jB+du/rzNHvuam t2cfaVkcn+2LPHeG1Eu67l3KpTdcielXUY/8QwDVC4RwanONn/KrN4cfdVEBGM98 /epZNtsNT2FTl9GdnA6YJql5mxn91rx92IMzNcuoCsG0ircu6t8LNNEV3R3FW3go 3spOtO8KsuR4Iq+CcnNMfuDyCM+DHuTn5MedKHpD8Tp5RqfGbrwY0jOqQ0B4EWqO JgBKiA0KuieHWp+z0qKqDBW7ZnUVuf73ufGQLikir3xpcgpyIDPGqMKU6te29f+5 2QomVrd53/hq854sfqfCRNxvgc4rnGuzxOyg2JtNfnD4Dy9dvuFm3iA8sOwt9Znt 3hb4ooNGnKRj3q4fSQuiKlF8ccxVBXXjsho4nPAoowJ9LK+1CsOaxkufTtmetVXK nrfZ1coe3ey3hmeDeI352QUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 281704960121531963920885581516911495224784 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 09:42:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 09:42:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fundit.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876550195681948991541410499816544701097445644968987631432783451446287269416759104746559746356676052944942837121622417201300464184628834100404910744441326910861819453052297483020475407946971209511023999433141140505634637661349150766094538322354028105470939808884043719966791109254398410892992642877787238370004895163022747576152611912895202045930546937953531160060796967270879121190163036370782858619501643520935091098327406465441407524095775555131527796468066998531723456224310722747254158223824109607874301805025207373067273736303539819081921437325118635376657216028943868163369524382112408845627001200014533692908742987271543053414064683643273744318481912587301356333927420449061004916027254025826934641706778280113805499853394330842416990159054616867615402705754861459982497119079952116844280385714139716825922870346149604741090520328747755284820594705807264183093812082447982593647723264661274817206437453560630347221672449393203627940940722587557435364065889825144273312699015514290296840363780032639746893961748304611812475622795499392714912977951046944730558293661156387930789881423670332141199944904352380818415194520164663879384478800506642730233866249545060501815834460696398734137026564790968689304224991281523248617609477 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 46fcadf6ca91163fcd5657ad1eada602c5e9aa61 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundit.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundit.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5a0e8ddb0000040300483046022100eacecfef484db2cfc013d8aa7e4339c01c98f338d66431e45df221d294bc602f022100e4075fd75d18f07a8870363d26431d67a4eb178c0747d1c8418cbd87ac35e4600077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e5a0e8f7d000004030048304602210095ff42ee8bc1c95c4364a403d6aa0966f7cf434c1f0882946b20c7b3fa4c47c6022100a0afe4f1b2b17e5180637d2683ab5f93ac7bc6a6047f8cf884ff348048cb2f88 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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