dm.soaringheights.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:f7:59:45:8e:f8:2d:14:98:e5:a7:43:84:19:ef:a3:23 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dm.soaringheights.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:f7:59:45:8e:f8:2d:14:98:e5:a7:43:84:19:ef:a3:23
Serial Number (int): 298416136262934846324538490120478888272675
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:05:84:36:78:de:4f:d8:63:03:96:59:b8:d1:e0:01:6c:07:fc:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cc:ee:16:a2:8e:8f:50:f5:d6:db:48:ea:34:15:58:c5:4c:4c:42:4a
Fingerprint (sha256): 03:a0:7c:a2:19:15:5f:3b:9a:f8:14:bb:fc:ea:f2:81:cb:3a:e2:9d:e2:a4:f9:5e:47:62:c1:24:c4:af:95:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dm.soaringheights.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dm.soaringheights.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dm.soaringheights.net

Other certificates including the domain name soaringheights.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for dm.soaringheights.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298416136262934846324538490120478888272675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 10:14:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 10:14:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dm.soaringheights.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929607209787656661316619471711307695744361354204981155222891666768278240060004620575819860009729655681378585625530793907303496271817667774847942830907336928532253878070891541934121647389969724703066683803216249866926072152358082901800642578133256458310224926534244976318868068998021192024299032389418611971578941833672160303785299350399919664299976963926854713969929237010832679671106765162523153246368881574606182647442932585533484183155214251673969508716319752813359885457865362204919765445717108109118371862590005740295468808211008378584824668830314666564752767049690663730264755448581665538061434776149405718846420587723192676189145415205451776064263919867897717641197524074373592599278632518855162395010998528213420831752912130330696873256868011147826303746240546061199240885136056483562290123066387471859063206862138889837662280517253927189887572507116099748978541311845395400951513835810195881976073488743204069370198563671418988271060940913950805470406816523034168150319728604567779585989369501310282537834998375352614592783303203380727824568791807258507330111404842431541459114538279975373642372619310514875228315570284103073741528984609849042140665937170078507483830383409104518305250567749186291647477559432815000253709707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a505843678de4fd863039659b8d1e0016c07fccc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dm.soaringheights.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa8e9e11b00000403004730450220592f0e9b2a07340059918b9db200c36ab6e2646c6c29bd1fde3cad989e5902800221009ba1688fe135fe90abc8e1ad14110a3e54fb55c76971b874dc67fa90096294690076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fa8e9e146000004030047304502210088be4cd470635387de9ee69262cc63ce49dcd6167f7c468410ba279ac4b0e0d7022072fd318eff0f3f33751a96c51b9c8af6c23cf67648d118bea06ca9b30e6aaab9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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