sostobac.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0a:5e:73:44:4b:9b:8e:70:87:c0:c7:82:a0:19:f9:80:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sostobac.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:5e:73:44:4b:9b:8e:70:87:c0:c7:82:a0:19:f9:80:1a
Serial Number (int): 264865227395426745784017039110134757425178
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:9f:80:09:ef:43:e8:ea:e2:81:cd:17:3f:4a:50:ce:05:bd:d2:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:9b:da:6a:99:a1:b7:ad:0e:88:51:0b:d2:2a:ad:7d:08:85:ee:15
Fingerprint (sha256): 0e:ef:75:36:10:50:6b:e7:fb:33:85:76:4f:f7:3d:b2:14:3e:d2:ea:f1:67:03:3d:da:61:bb:ab:e7:71:ab:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sostobac.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sostobac.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sostobac.com

Other certificates including the domain name sostobac.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sostobac.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264865227395426745784017039110134757425178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 08:32:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 08:32:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sostobac.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868471436660833134894490565091726159433503167429706697075343388173782697622856189323371004715589006163143930796953915138769361246462269008610869749894693257018481491641106876837437917887593761674553054113707442843294190791510223761179690747433450399526543266573992083021591391576964221136409972277654360331896775105920131975681051883535358165550818619205952695958509826300980243244814091839570248879966569850945138301536444726493972783559151690844085238020881885679631029086040108785643558490533839069056243520211702683648258858398817366251936600247268605996015457604246268374377202043440060653601329164361204144083920625962786252655116880093827176906914673040283870264187627608372210348055992941331914410434692032445657666797674052565317766962105872722395072045967320985431479528473223792122597076531749228007191964619385328423981684947956214511923656404878934775082464289549934472660393620541979966785062123903034435673403925651867646230022017854952836415267603967465613720517075077205600658030472307689430587086306046989474851569561714155608087915988066406461169670197127273276293094979289058114858652671972877623303423123669160541511909555218176222635708698902885086333272313907742620341291779271971729583718664369962480933788799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e9f8009ef43e8eae281cd173f4a50ce05bdd225
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sostobac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fe6588ecd000004030047304502210095c849ac31482c8a9fdac08f5c677b5bcf7a46a4bf912a17031e08c3ec7018fc022022f27ef8fd9b5ac1957a0dba2fa2a9516992058df67bc5f03f293036dd35a31800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe6588ef30000040300463044022026041d85a30e874b803445f81ebd5859a67985b2aa3deacd4b6158afee31e141022021f945f5969f6e644333da8d76e6ce48ba040d7858354f6398ac24ecd615ca6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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