fancom.com

Issued by R11

About this certificate

This digital certificate with serial number 04:9c:d1:f4:5c:bf:d1:7f:74:d8:4a:1a:69:78:68:f9:0e:0f was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fancom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9c:d1:f4:5c:bf:d1:7f:74:d8:4a:1a:69:78:68:f9:0e:0f
Serial Number (int): 401812270419439015830754561976046278217231
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c8:1e:14:25:7d:1c:93:fe:f7:1a:4c:dc:f3:04:2f:db:dc:97:9f:45
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 45:47:66:fb:7c:81:ea:10:28:f1:90:db:45:a4:cd:08:3f:41:09:a5
Fingerprint (sha256): f2:53:e8:4d:24:69:c5:30:60:30:71:2d:1b:1b:69:dc:a7:b2:5b:46:e0:d2:4a:60:f5:85:a2:b4:2c:51:7a:76

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate fancom.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fancom.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fancom.com
fancom.es
fancom.fr
fancom.nl
fancom2022-es.fastforwart.nl
old.fancom.com
old.fancom.es
old.fancom.nl
www.fancom.com
www.fancom.es
www.fancom.fr
www.fancom.nl

Other certificates including the domain name fancom.com

(limited to 100 certificates)
assistenza.edilbruny.it
fancom.com
asup.fancom.com
assistenza.edilbruny.it
fancom.com
fancom.com
fancom.com
fancom.com
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
fancom.com
asup.fancom.com
fancom.com
portal.fancom.com
support.portmanlights.com
helpdesk.itconsulting.cologne
portal.fancom.com
asup.fancom.com
assistenza.edilbruny.it
fancom.com
fancom.com
fancom.com
fancom.com
fancom.com
assistenza.edilbruny.it
hseq.naturalpower.com
fancom.com
portal.fancom.com
fancom.com
support.ti-medi.com
fancom.com
portal.fancom.com
hseq.naturalpower.com
support.les7royaumes.com
fancom.com
*.fancom.com
fancom.com
assistenza.edilbruny.it
fancom.com
support.skorfactory.com
hseq.naturalpower.com
asup.fancom.com
fancom.com
helpdesk.itconsulting.cologne
support.completelostpropertyservice.com
fancom.com
hseq.naturalpower.com
portal.fancom.com

Certificate

The complete raw certificate details for fancom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401812270419439015830754561976046278217231
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 03:13:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 03:13:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fancom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806118237610206935125932437324382516912424719720843525375698128109899945199210550415565189561026305380604349218429879289641615079205643323435578183885665417524848332630450371099501473095172485750663916366490494209750176012292261918048379007837371522124484524932343450700273369437268857018945537126454154237473963992652709969797355498351526452919445878801202202673967668383711140113065264808627267276673308568544589827721744882584034023690439072975104261169142635739742609797553372500061091380064878239361079905653527900517104403317083607681962299696132948492968225518474985594608384977625556356306859470622117122737442645838656078565136503298917951457021215585539318560071744740479216212252471368185589448091090419798497534167280598509615161275565410166595136229668563820170199286002244954725468216080118177066404637013141952208647126885541816181488433660640360043359416792091703169992800553128912824986767014117428083189815233472347663139576992543369051849545489247857822574562917331101250190162373167612675880692405921923530009272494804695224068680007562072659506583168936736882048364316874371598682969053180551563675618700780506151198888631015663408999617741912362142298098037752873612071784112438265670463373012477798056234716811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c81e14257d1c93fef71a4cdcf3042fdbdc979f45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancom2022-es.fastforwart.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.fancom.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancom.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff0e6ac89000004030048304602210088b990e99011da62bb31e92f605cbfb04dfd3eb4058dd910b6115ed6b372725e022100bef3c14d398c560323d8f70b6e79bb93ab6c86ac0d82541fd49aad0339275b97007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff0e6ad43000004030046304402200db9304c8ca55e17f8d27588ce17a652810338565656d1cf7f4989bb59b38d57022020c7b843276a88f212360a4ea77aa23a9aa2b0fb668d53b5f769325f3a68eaff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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