sassofoni.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:02:9a:7d:3e:b7:d2:ee:9f:3e:95:53:1b:84:65:4d:d1:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sassofoni.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:9a:7d:3e:b7:d2:ee:9f:3e:95:53:1b:84:65:4d:d1:25
Serial Number (int): 349335059881414486906235319517876165923109
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:cc:59:ef:f2:a9:da:ae:cc:86:1d:3f:8e:7b:6f:cb:a8:b4:c4:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:22:60:1c:4c:ed:2e:98:c5:c3:c5:ba:63:40:ff:fc:8f:58:91:23
Fingerprint (sha256): 03:e9:7c:f5:ec:b8:56:2c:f5:fd:cd:13:54:cd:e6:d6:6b:79:ea:26:e7:21:f9:2f:b3:4c:aa:5f:9a:a0:4b:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sassofoni.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sassofoni.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sassofoni.com

Other certificates including the domain name sassofoni.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sassofoni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISBAKafT630u6fPpVTG4RlTdElMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MTAwODI1NTRaFw0y
MDA3MDkwODI1NTRaMBgxFjAUBgNVBAMTDXNhc3NvZm9uaS5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCYGfU4qi+cOfoNzWIT4ZYMIHp6Et8MRAqx
rx5//FWVtWBh0o9oG9G4lNmS1JVwwVMdPLeozHJeCdYXK7tN+6W71hDgjdehe4Wg
vbujV5pNRLKpwdjHtU7SEG1Tz4CZywUBEDY56UxgxAZTiK13lxyds+/Fy9LfpiCr
VayOVqau6pMQjqnE2xVPzogDgH9arVV9Dwxc9k042YgrFMKWvyqzl73qioy0qScU
hWBkUufDKHbOk1vyen7u80GgAuEIuyh+PdGfA4AFjd0jFLHUSHI4pXJEYc5cMBBM
Rwx2JMbt47rP8nfWuqWg4w1Er2VaEZFZoa00pFBSerOGB7AelydGesq5qN5MjHa/
79KYr/Uar1RH5vEv/Lky4HiNQr4o72qzuRlJnrPva/Ry5uSsSRptrQHTjFqYpTy6
Sbp3WhSKj18SwtPvyaTLsTaj6cpE8/eQyuoBPXuyxTW6Vo781WtuldK5GYcVISF8
FS1Ac2NMN1X3/f6hmM+WxgwP1TibeeBrdd7OBe3J9X3nlhPTLx3n69OY2+7vPtWG
OlhVh2bNMqgnhtFIy83ddc9IOftZKC3hQgssqDPWG7BByEnMB0G/awbk9EHvu1an
z1lI1yd2lob7dEuHdA4nZaThBIG7UcKWC+1/TeZDF0yLwkXJNzhX0OIKjRSYMTzk
9UdCEXFdowIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSmzFnv
8qnarsyGHT+Oe2/LqLTEsDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXNhc3NvZm9uaS5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXFjaPHLAAAE
AwBGMEQCIBFOM/QDEUxRyQRnGPjwh44tRQymcyxxdi6R+l+dUNTRAiBWmO2kO9Kl
jbLiDFy4TPjwMYLA12xaGgZ17fdNX7+D/wB3AAe3XBvlfWj/8bDGHSMVx7rmV3xX
lLdq7rxhOhpp06IcAAABcWNo8fYAAAQDAEgwRgIhAMjrJzUGrNjOqQ9GQy75EgWP
xdvi/3BTsfLjxPxvxW6bAiEA8TMor15BsQFT+y+r1/2RtyjmckvowMwPAnQyX47f
FgQwDQYJKoZIhvcNAQELBQADggEBACfh0Bvheciiahy2V672DhPYet0kGiq7W4Wb
1OzlmY+czqPUMmJQ9ugHoYz4Ss/nfThgKuH1saGO/Se+bC6Oldt5kNZHzwPPs9OJ
I4nXpgCyTkl0lyDsZANHJFdCFKVPS9iYXH/HsYksQvCgS+aTwgD83mhOQ2NzoqYR
wsgME7W0XJ/HLzFocFlQ5wOecESs8U/guB6iIjwUKFzJf5t5J0roHnVpTLLrg+Tf
CoDceli7o78HRLcqrymaMJRE7OfBjmTPwoSzYWGflxAUyvZLDqruFYaRPiq4fdu0
UzlUlgJ0pg+CU/H3zDSyrTQ4ddtiXpMmNF+7mfssW+90wpiF/qQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349335059881414486906235319517876165923109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 08:25:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 08:25:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sassofoni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 620519566213941558161238334401813911942897344458378819827212652633161404318636668282251264107774883380788638637596832940706713220829037737940056426053644238014253842103201736966975204451050483313466387573788687632554979790945027529463532668576456359163102419298608243860428130513265256368811606860910609267816626497722704856435173323782752192034654729137344541039295780814867771065035224156562125201880242428092354564072161875258739608660288886946562083077925432702616778484149180849345970410691716941213951401951993208915264067840902628701266139255683023179277282368627912743654753208955243055453363953381798101882772658711943149747412999078449649297876351060950321582809254910028830488617694277977467122407651852108970505164583178899331109034483673202025852472450124870888073479840444600833012179230340097054501444718282374290576303323866259657783887576989887157448851769114890542421047142398650635638572607277904171066332527456461366596382441001420976858510769145433837215335919623684416397166369668972588891350902696294200152618651406713316673354158962431563286879130824889169263302389422169055550574276000740296791533386211916065610038500561181809723970582616321465142661764670330416274755034149271952930457867401622367625108899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6cc59eff2a9daaecc861d3f8e7b6fcba8b4c4b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassofoni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001716368f1cb00000403004630440220114e33f403114c51c9046718f8f0878e2d450ca6732c71762e91fa5f9d50d4d102205698eda43bd2a58db2e20c5cb84cf8f03182c0d76c5a1a0675edf74d5fbf83ff00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001716368f1f60000040300483046022100c8eb273506acd8cea90f46432ef912058fc5dbe2ff7053b1f2e3c4fc6fc56e9b022100f13328af5e41b10153fb2fabd7fd91b728e6724be8c0cc0f0274325f8edf1604
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027e1d01be179c8a26a1cb657aef60e13d87add241a2abb5b859bd4ece5998f9ccea3d4326250f6e807a18cf84acfe77d38602ae1f5b1a18efd27be6c2e8e95db7990d647cf03cfb3d3892389d7a600b24e49749720ec64034724574214a54f4bd8985c7fc7b1892c42f0a04be693c200fcde684e436373a2a611c2c80c13b5b45c9fc72f3168705950e7039e7044acf14fe0b81ea2223c14285cc97f9b79274ae81e75694cb2eb83e4df0a80dc7a58bba3bf0744b72aaf299a309444ece7c18e64cfc284b361619f971014caf64b0eaaee1586913e2ab87ddbb4533954960274a60f8253f1f7cc34b2ad343875db625e9326345fbb99fb2c5bef74c29885fea4