DV SSL/TLS Certificate for fespaco.bf

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the fespaco.bf DV SSL/TLS Certificate

This certificate with serial number 06:44:24:de:8f:63:10:fd:d4:c8:5c:3d:ee:b0:03:b6:24:30 for fespaco.bf was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for fespaco.bf provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:44:24:de:8f:63:10:fd:d4:c8:5c:3d:ee:b0:03:b6:24:30
Serial Number (int): 545861924347169567132739175127581480854576
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: e9:7c:f1:02:87:0f:89:4e:e0:44:11:a7:12:4d:8e:a8:3e:68:e3:dd
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): a2:86:d0:75:6d:39:1c:fa:37:8b:ad:5c:b7:7d:2b:45:95:f8:90:72
Fingerprint (SHA-256): 03:a5:45:4c:7a:bb:df:ae:4b:8e:12:41:72:d2:ef:59:2a:b8:29:0f:a5:2d:26:9a:2e:4c:e3:fd:70:9f:85:de

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/49.crl

Check the revocation status for certificate fespaco.bf
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for fespaco.bf

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for fespaco.bf in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISBkQk3o9jEP3UyFw97rADtiQwMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjUwNjI1MTkzOTI2WhcNMjUwOTIzMTkzOTI1WjAVMRMwEQYDVQQD
EwpmZXNwYWNvLmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvpb
HtdbvLvnwLYd2i61vzxu6eVGIfoxLvHIRN6nmfOo6p6tnZw78P3EYEosR3dkX+h7
u042W+pFBY1shdhTw52OZBFt2l9ihvSY+rteQFOthEQlO6pMw8WpCiSx2Czg6pWv
VOkt/RQd3H/NoFsWtxufpdIrO0nra/deY126EyMfW/3o/90KMFuq4AVEVoktlY5P
jqhSV3U6XYzXgsEPbMJVloS02q3eEItO4UkZJxMEN01Jhm8LcVRyuv0dO63xa+dt
b9P4X9QveukyHp45MT3trVJcCdMjcS0xBP4CkxUvC4irDzA3EM8g7EPtIW6R7/gv
xOHA9cKJ+S68e0wtAQIDAQABo4ICRzCCAkMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBTpfPEChw+JTuBEEacSTY6oPmjj3TAfBgNVHSMEGDAWgBS7vMNHpeS8qcbDpHIM
EI2iNeHI6DAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTAu
aS5sZW5jci5vcmcvMEMGA1UdEQQ8MDqCCmZlc3BhY28uYmaCC2Zlc3BhY28ub3Jn
gg53d3cuZmVzcGFjby5iZoIPd3d3LmZlc3BhY28ub3JnMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTAuYy5sZW5jci5vcmcv
NDkuY3JsMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUApELFBklgYVSPD9TqnPt6
LSZFTYepfy/fRVn2J086hFQAAAGXqM/AaQAABAMARjBEAiAB6FqQQ8WgnnLpN+zZ
8kpFm497W0Tr4Nxor6RP2j0/0QIgc+GhJHIztPmzNlLQyotxJNHStRSvE3jclgCE
JelQIsYAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAZeoz8CI
AAAEAwBHMEUCIEaH7Y//KTa60hGH7fS2QbFdN2G7JBU7VvCiWbbodFYYAiEApTPu
exK/yP6v5WJQqFCsYbAgNZZrlZVkrvMKA1u1S6AwDQYJKoZIhvcNAQELBQADggEB
AFC6Udi2Hw/U/Dscoey7tenmF7nst2iBAqrBKDWkQuYcYbZg9WjoXmdygt03zLmx
gwP5R7SZbpn2/J+Q1J+TYPJEaf/tCg/R9Gn+YpIzrnIZrBOYSdJPhtUIxiPBq7RW
8rp6JTAyMm6rb7mQnScrf4Eg7RjPM31gN8BTHZKFRH6OKGOpdXFnazzyPrDNFTUS
hZwT4wcOgDsiRlbQh4/pA6qwY5LnlRArX6yrSf5l60eppCQg9LVP5OBcgTSERA9G
Mlv6JAVO9syb82f0zJkWI3XINi+oZNELdoyD6bZOqQbmK7pRnVYEJqAZp6AZoYkZ
CySZzPNbDs7Yq0NU0zT065s=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvpbHtdbvLvnwLYd2i61
vzxu6eVGIfoxLvHIRN6nmfOo6p6tnZw78P3EYEosR3dkX+h7u042W+pFBY1shdhT
w52OZBFt2l9ihvSY+rteQFOthEQlO6pMw8WpCiSx2Czg6pWvVOkt/RQd3H/NoFsW
txufpdIrO0nra/deY126EyMfW/3o/90KMFuq4AVEVoktlY5PjqhSV3U6XYzXgsEP
bMJVloS02q3eEItO4UkZJxMEN01Jhm8LcVRyuv0dO63xa+dtb9P4X9QveukyHp45
MT3trVJcCdMjcS0xBP4CkxUvC4irDzA3EM8g7EPtIW6R7/gvxOHA9cKJ+S68e0wt
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 545861924347169567132739175127581480854576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-25 19:39:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-23 19:39:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fespaco.bf'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21583966959158610828339149809194299083847656470743403060953916628663503729363224690393426319622581279462218827039491540474072201389970359257556732078194812934809304668530789890098927544771029226200167353499399234090656118714574731669774409575686344357421185618013978967847233905892888632243165218683173918654198970846264143614266571353373215241520217447644208039339210725399429225796798202101309127934839890414535268238708065659826230622703870186800031031929389821032361665411846845889565818359825223146656833477102547707449436241876675020959926447005556253472273090323509635163634514870937523658559269244203403324673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e97cf102870f894ee04411a7124d8ea83e68e3dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fespaco.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fespaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fespaco.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fespaco.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/49.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a845400000197a8cfc0690000040300463044022001e85a9043c5a09e72e937ecd9f24a459b8f7b5b44ebe0dc68afa44fda3d3fd1022073e1a1247233b4f9b33652d0ca8b7124d1d2b514af1378dc96008425e95022c6007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000197a8cfc088000004030047304502204687ed8fff2936bad21187edf4b641b15d3761bb24153b56f0a259b6e8745618022100a533ee7b12bfc8feafe56250a850ac61b02035966b959564aef30a035bb54ba0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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