www.fundgroom.com

Issued by R3

About this certificate

This digital certificate with serial number 04:96:f7:a5:93:50:88:29:d3:c2:68:72:48:d6:9f:ef:80:ca was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.fundgroom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:96:f7:a5:93:50:88:29:d3:c2:68:72:48:d6:9f:ef:80:ca
Serial Number (int): 399820677797016893838404265851360361021642
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:47:43:9f:e4:53:b7:ff:4b:28:c9:68:49:ba:2c:93:6d:af:25:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:7a:db:c5:f2:5a:6a:60:25:4a:48:9a:77:bf:06:34:41:48:93:08
Fingerprint (sha256): e7:d2:a2:f7:23:a1:22:de:c0:c4:03:c5:9d:0d:b0:5e:c0:09:47:a8:a9:ea:43:e8:ee:3a:c6:2b:ba:29:42:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.fundgroom.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fundgroom.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fundgroom.com
www.fundgroom.com

Other certificates including the domain name fundgroom.com

(limited to 100 certificates)
workdrive.pinkertonpi.com
cliq.skylineclean.com
workdrive.pattyk.com
careers.ydts.co.uk
www.fundgroom.com
jobs.ns.work
jobs.ns.work
sni.cloudflaressl.com
careers.pronetconsulting.net
fundgroom.com
bookings.engagesystems.io
mail.cuanticore.com
careers.ydts.co.uk
careers.villaroerealty.com
fundgroom.com
careers.ydts.co.uk
candidates.workvantage.ca
candidates.workvantage.ca
careers.ydts.co.uk
jobs.effizient.ca
www.blueoceanconferences.org
careers.pronetconsulting.net
fundgroom.com
workdrive.peterkatzspeaks.com
jobs.effizient.ca
support.reznet.com
candidates.workvantage.ca
candidates.workvantage.ca
careers.impactmarketing.co
bookings.aitsa-edutalk.co.za
candidates.workvantage.ca
documents.atte.design
jobs.ns.work
jobs.ns.work
jobs.effizient.ca
cliq.skylineclean.com
fundgroom.com
jobs.effizient.ca
workdrive.acd-inc.com
candidates.workvantage.ca
sni.cloudflaressl.com
events.fundgroom.com
workdrive.acd-inc.com
workdrive.acd-inc.com
www.fundgroom.com
fundgroom.com
learn.travelandtradeworld.com

Certificate

The complete raw certificate details for www.fundgroom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399820677797016893838404265851360361021642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 08:53:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-17 08:53:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fundgroom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 580748022279602966428811605825296657970405055605768986511151127740110113566779511077055910287649095066870998738174320640208469354768610785180067955137660415251834125938053238226514753606628502614345423870466397059783753757041926939426140550004604988427957923438806825114519513208605685325688858043204764844014027505340942319118510750278091406624375620983275035178181581408150439642405700847174218283798979553802031345729212523728444055081188035507332952234029468565913547127973444611350585490482917380824588868010495586024439782690233463816539847885641914241287501824232786011246095589872217077998019068304678455328765542219718599580072379487772193351853644859027531910724211533452671677779739084834341553235255196824481199326906883735293102346337281138146699166534434534678991946650395196053921778275030333167476833684684579160233480447643062815021288758414184314508291931834513272688747519790628364097343263294919400565938615650170035839147711021469827828875837312360863114660667024124259839040722223322877153181488120711937408328758129427464813472137498140370878780592774491992234069692961259214790779169584833550677440260428245198757196199190112749588471996169334213960409972439011790615146665015426798595526063891352937289038161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2047439fe453b7ff4b28c96849ba2c936daf2587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundgroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundgroom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f9044e118000004030047304502200503cb8950bd91151757af55104ae4a3b5f41854d3a07316506517b36914e932022100ec14dd505c2a97e6840e3ae70109dfc5113f579d7e9ee824d7cc6ffce4df7ad500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f9044e14400000403004830460221009c4eb495d4adf0515beeeea0b74acac0b6694afe668b19abf945ab39a9f55013022100e8676554502549a47640f028c4c891ffc06b426688800c001984f68334ef89a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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