fny.me
Issued by R3
About this certificate
This digital certificate with serial number 03:28:e6:4a:26:83:da:02:53:d7:e0:b7:eb:7d:dd:70:f9:30 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fny.me
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:28:e6:4a:26:83:da:02:53:d7:e0:b7:eb:7d:dd:70:f9:30Serial Number (int): 275254259922294265480482527198390873291056
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 42:8a:42:e8:07:d9:1e:c3:13:df:9d:06:70:06:71:6b:ab:4b:af:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 87:78:3f:db:09:17:dc:10:25:aa:49:3c:63:8e:bc:ea:53:c6:c6:b5
Fingerprint (sha256): dd:a3:85:d1:32:9a:84:09:cc:62:39:69:c1:1f:92:e5:49:b9:41:ae:5b:ab:c1:cb:42:c2:4c:35:e0:52:eb:b9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate fny.me
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fny.me
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fny.me
www.fny.me
www.fny.me
Other certificates including the domain name fny.me
(limited to 100 certificates)
Certificate
The complete raw certificate details for fny.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAyjmSiaD2gJT1+C3633dcPkwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTkwMTIwNTNaFw0yNDA3MTgwMTIwNTJaMBExDzANBgNVBAMT BmZueS5tZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMwGjeRMk+A6 faYDacS5W8WJKW965hCwlxOuv25f3FM78+RBNFfrX9ZCE7E2WLTMPs+C3A1Qyzv1 kZl1C6zioSyZ58EDHPI+z9zBy/q1EVCT1oa3G1h8QpRatlZUykDsodyl121HK0px ips+JfP0sLYbFBl7AH3lMt3cNwsxYEdE1+HhHdkaQUpru6hofQAaOiVJz40lkOej kYryYSZ+l4cstCUyYRsy0a+76o0e1X8fVzVZLmRn6+DZY2ckPwi+PhGSIolJVimb GIWBw0NGa8KvAE9DFUyP1efCvKTa7eU2IxSN2Wgl7UAUZ4plk8m6fUb7V06nnM6Y S0tFAqri3cA9NOe9qr+fe2ODyCfkVlvAvnTxSasA50ZDdMnGRQoDc/BQHW/c6EPX Xo0mupggHrWMBYJyM+aSySANqtqQ/Q/u7gTCceic7iJfdP4OjXHY8kM6S2dUnn6I uGMWdT11zlIBZUoXeUnJVfkYKtlZsOQiCbkOBSHXpxsGUYjoBgFI9l5Cb6C8wrrV GlALgT2bgtV8/7IF+pv3JFf14mRCkl1fcdlwh5Qj/vLF3UIN0vCXo1zpF+70oboH 42liyvXmVwb0VUO1hfgU1dyqsRxM77/kqKhYIbvEEaXtdPl/EnRt/nhKbzcmFJsB E8mJF+qoffxZ/EQIYm4pxEyHcxTRDuj3AgMBAAGjggITMIICDzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFEKKQugH2R7DE9+dBnAGcWurS68HMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMB0GA1UdEQQWMBSCBmZueS5tZYIKd3d3LmZueS5tZTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjvQoHdUAAAQDAEcwRQIhALK9A6oA 61M6zjVJJN9tgQosubppBOXVWA+/zHPQeGcSAiBgEaJzq5ZVOCyQdMwpJDyoj7+h dezMcqGKZ6etAo69dQB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRu AAABjvQoHhkAAAQDAEYwRAIgO4OdipjftP7FJYBWRpgcFyurSku+V6mYZPRtCnQl adwCIEOtkIDbH8jLmQGN0ksfGaO8vTTY04VAKJOoElj1/kxDMA0GCSqGSIb3DQEB CwUAA4IBAQCW4ox+D+k19e56OLnCEJnbRwJvatEY/tk1+zbm2Oi/SrqjlMjPIk78 TKbaTA/cbdpnPgIksTOPxwXVSbXAQQnlfyMYWf14ZxxJoZQHMH3Eu+tfvMRRSW20 sQW3F3sTYBEzR8eewBcowp/b21Ydes2VkP3IRsKGN+QvM7vN0FutQL6ZVYlTqejB /68IuXf8tftPB+lVf1afPKBYmnwRNc2Mm4CQUlJwHebexv+brS8ZH2jO3Z0rJvnE F0jNtt2ZOnXKF7PiJw6AEE/NObkj+0/1agpDUUUg+30Yee5acr0VGuHTm94HVRGi +U1S4bcwhIdoajMlHYnJW/h1fwk44AMW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzAaN5EyT4Dp9pgNpxLlb xYkpb3rmELCXE66/bl/cUzvz5EE0V+tf1kITsTZYtMw+z4LcDVDLO/WRmXULrOKh LJnnwQMc8j7P3MHL+rURUJPWhrcbWHxClFq2VlTKQOyh3KXXbUcrSnGKmz4l8/Sw thsUGXsAfeUy3dw3CzFgR0TX4eEd2RpBSmu7qGh9ABo6JUnPjSWQ56ORivJhJn6X hyy0JTJhGzLRr7vqjR7Vfx9XNVkuZGfr4NljZyQ/CL4+EZIiiUlWKZsYhYHDQ0Zr wq8AT0MVTI/V58K8pNrt5TYjFI3ZaCXtQBRnimWTybp9RvtXTqeczphLS0UCquLd wD00572qv597Y4PIJ+RWW8C+dPFJqwDnRkN0ycZFCgNz8FAdb9zoQ9dejSa6mCAe tYwFgnIz5pLJIA2q2pD9D+7uBMJx6JzuIl90/g6NcdjyQzpLZ1Sefoi4YxZ1PXXO UgFlShd5SclV+Rgq2Vmw5CIJuQ4FIdenGwZRiOgGAUj2XkJvoLzCutUaUAuBPZuC 1Xz/sgX6m/ckV/XiZEKSXV9x2XCHlCP+8sXdQg3S8JejXOkX7vShugfjaWLK9eZX BvRVQ7WF+BTV3KqxHEzvv+SoqFghu8QRpe10+X8SdG3+eEpvNyYUmwETyYkX6qh9 /Fn8RAhibinETIdzFNEO6PcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 275254259922294265480482527198390873291056 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 01:20:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 01:20:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fny.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832351839358864368325557334199186278703360385935544538161358568995733430021037609635642232066239458030845077572138474973790959210743939367172057071395964990312139327938582487430011821407276586093266684600479544895601929814175621562544983952304686776421639915887524507975372223310787593773762351695717555391514373888407463701887300806422787684063056737228148550044282928504789652938734205570238583651308901907071881015257850571871449153116970729833354542588760430565565847237735729166855210844444513011677453402398345721362296622307014386176636557278113549019689592896665119368054476986030332232305633289358696652726686454070654385178185037412944731003165465885987178043981389850343512599543976405452458626855892990149594985590734269930886743773966277780582497796978646529883711462203882607770609029253063380376241529972473099262271813332508578292122705925458995658598747415022876368524941888123934018131049356536356986407914310305753312724831276815079166371947859510786272913148464196717386298141742717036584820817796835920782288341453203193960654766505664811830293856205101677320670671506217037598567702413419758177072749776842113496666909663334023830030414724957764096844588525413876148406183387341549002250854568141972783082957047 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 428a42e807d91ec313df9d067006716bab4baf07 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fny.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fny.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef4281dd50000040300473045022100b2bd03aa00eb533ace354924df6d810a2cb9ba6904e5d5580fbfcc73d078671202206011a273ab9655382c9074cc29243ca88fbfa175eccc72a18a67a7ad028ebd750075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef4281e19000004030046304402203b839d8a98dfb4fec525805646981c172bab4a4bbe57a99864f46d0a742569dc022043ad9080db1fc8cb99018dd24b1f19a3bcbd34d8d385402893a81258f5fe4c43 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0096e28c7e0fe935f5ee7a38b9c21099db47026f6ad118fed935fb36e6d8e8bf4abaa394c8cf224efc4ca6da4c0fdc6dda673e0224b1338fc705d549b5c04109e57f231859fd78671c49a19407307dc4bbeb5fbcc451496db4b105b7177b1360113347c79ec01728c29fdbdb561d7acd9590fdc846c28637e42f33bbcdd05bad40be99558953a9e8c1ffaf08b977fcb5fb4f07e9557f569f3ca0589a7c1135cd8c9b80905252701de6dec6ff9bad2f191f68cedd9d2b26f9c41748cdb6dd993a75ca17b3e2270e80104fcd39b923fb4ff56a0a43514520fb7d1879ee5a72bd151ae1d39bde075511a2f94d52e1b7308487686a33251d89c95bf8757f0938e00316