fancom.com

Issued by R3

About this certificate

This digital certificate with serial number 04:38:48:5c:97:63:53:b1:e4:98:be:13:ec:58:55:1b:2b:c3 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fancom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:38:48:5c:97:63:53:b1:e4:98:be:13:ec:58:55:1b:2b:c3
Serial Number (int): 367601141452134380242952281552414870023107
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:37:1f:0f:a8:22:fb:6c:de:f9:2a:d5:ec:47:92:2f:74:b6:92:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:f8:12:ac:58:da:44:48:2d:b1:97:e8:cb:35:c8:4a:76:3a:d7:2a
Fingerprint (sha256): de:96:d0:80:86:26:e5:30:a6:65:6a:61:42:7a:2c:c1:dd:42:9f:d3:8a:e6:f0:c0:a5:1d:45:c0:39:a4:d4:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fancom.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fancom.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fancom.com
fancom.es
fancom.fr
fancom.nl
fancom2022-es.fastforwart.nl
old.fancom.com
old.fancom.es
old.fancom.nl
www.fancom.com
www.fancom.es
www.fancom.fr
www.fancom.nl

Other certificates including the domain name fancom.com

(limited to 100 certificates)
assistenza.edilbruny.it
fancom.com
asup.fancom.com
assistenza.edilbruny.it
fancom.com
fancom.com
fancom.com
fancom.com
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
fancom.com
asup.fancom.com
fancom.com
portal.fancom.com
support.portmanlights.com
helpdesk.itconsulting.cologne
portal.fancom.com
asup.fancom.com
assistenza.edilbruny.it
fancom.com
fancom.com
fancom.com
fancom.com
fancom.com
assistenza.edilbruny.it
hseq.naturalpower.com
fancom.com
portal.fancom.com
fancom.com
support.ti-medi.com
fancom.com
portal.fancom.com
hseq.naturalpower.com
support.les7royaumes.com
fancom.com
*.fancom.com
fancom.com
assistenza.edilbruny.it
fancom.com
support.skorfactory.com
hseq.naturalpower.com
asup.fancom.com
fancom.com
helpdesk.itconsulting.cologne
support.completelostpropertyservice.com
fancom.com
hseq.naturalpower.com
portal.fancom.com

Certificate

The complete raw certificate details for fancom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367601141452134380242952281552414870023107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 03:12:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 03:12:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fancom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 970839671312311874994810659059134599647395441493202316589786789857552280531545500972481275648376284338558770055254673349437968510280849711694702037748653044318082830728981734879517623872791592298520702787554774855789622580427094467565327569419858123884123947153200664975413112053891849500904843129614100709316200216499001536156385340806769784648587910181420150090213834080072177605643502501628483585379347811743191909320654378925985470759397284914846066157140839538828114012076453860697969671749161184530585972629808797222270676316828885969714002855553555175348733031247843031245583138759420545635720548933781166489841288833374236732805400084678024015527124000838168680097913160395216093699126092762137643137111041044056284971595900173402839104609328964979620124456175743372837250516800972036289808123567882287275796653206574290731622965791612263691174452087974504739761773688088477845782732630178521719165069748276417569887306019457921183484713103030321055481786944251389161730853100704293105991944792014117746409224717459670429585133335535475373464140604970961616526558076453975009796741488620411941870415530032482118335861763232649852647067440567863974089818036234252190613760781377240866696785204646525030397773793729335872149301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57371f0fa822fb6cdef92ad5ec47922f74b692dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom2022-es.fastforwart.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e834225680000040300473045022100d1e696866f37934a3b298720694af82bf8dbfd76be5e5cabbe4c643f914eaf3c02207a9f42202013197fe32e66e218fc29366b4e452adf48dcdaab328ebb2a03889700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e834225a6000004030047304502201cd3df156fbaa99d0932f333e8b5b7f7e9a56f31047e4e01475b869c20a99e5a022100e9700883e9f95bf807b520452efa7667626c79a721334e5ceae43527309bea64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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