www.cbs.soapsindepth.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:75:6f:4b:30:3f:f6:89:3c:60:06:96:b7:93:17:82:df was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cbs.soapsindepth.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:75:6f:4b:30:3f:f6:89:3c:60:06:96:b7:93:17:82:df
Serial Number (int): 331250840559534725146868277462053068178143
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:05:92:e2:54:3a:e4:52:8b:3c:7f:5e:0a:9f:46:a9:50:92:e3:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:96:f7:89:5b:6f:6b:42:ce:97:eb:54:25:8e:cd:c4:57:66:b5:26
Fingerprint (sha256): 0f:90:bf:8d:6f:09:6d:28:96:e7:b7:40:18:9e:d0:0c:bc:41:8d:95:25:46:53:2f:b5:02:71:d2:69:55:e1:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cbs.soapsindepth.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cbs.soapsindepth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbs.soapsindepth.com
www.cbs.soapsindepth.com

Other certificates including the domain name soapsindepth.com

(limited to 100 certificates)
n2.shared.global.fastly.net
n2.shared.global.fastly.net
winit.bauerpublishing.com
n2.shared.global.fastly.net
winit-stage.winchristmas.co.uk
n2.shared.global.fastly.net
winit.bauerpublishing.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
www.soapsindepth.com
link.abc.soapsindepth.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
soapsindepth.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
winit.cbs.soapsindepth.com
twinit-production.herokuapp.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
winit.cbs.soapsindepth.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
www.sweepon.de
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
www.cbs.soapsindepth.com
winit.bauerpublishing.com
winit.bauerpublishing.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
winit.bauerpublishing.com
n2.shared.global.fastly.net
winit.bauerpublishing.com
n2.shared.global.fastly.net
winit.bauerpublishing.com
winit.abc.soapsindepth.com
winit.bauerpublishing.com
n2.shared.global.fastly.net
*.mail.abc.soapsindepth.com
n2.shared.global.fastly.net
winit.bauerpublishing.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
abc.soapsindepth.com
n2.shared.global.fastly.net
winit.bauerpublishing.com
winit.bauerpublishing.com
n2.shared.global.fastly.net
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
clickswin.eatinmagazine.co.uk
gewinnspiel.sweepon.de
n2.shared.global.fastly.net
n2.shared.global.fastly.net
link.abc.soapsindepth.com
winit-stage.winchristmas.co.uk
winit.abc.soapsindepth.com
n2.shared.global.fastly.net
link.abc.soapsindepth.com
winit.bauerpublishing.com
winit.bauerpublishing.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
winit.bauerpublishing.com
winit.nbc.soapsindepth.com
n2.shared.global.fastly.net
winit.bauerpublishing.com
winit.bauerpublishing.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
winit.bauerpublishing.com
*.mail.cbs.soapsindepth.com
n2.shared.global.fastly.net
link.abc.soapsindepth.com
link.cbs.soapsindepth.com
winit.bauerpublishing.com
n2.shared.global.fastly.net
winit.firstforwomen.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
www.soapsindepth.com
n2.shared.global.fastly.net
winit.bauerpublishing.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
winit.bauerpublishing.com

Certificate

The complete raw certificate details for www.cbs.soapsindepth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoGAiw11HQsHvxGaw+Wx
HEOWOw8TM+XJ0noQ12w7l6lvBlEFD3th/BKjYvIPj7HvRnb0XvSbL4wYq3mevJcv
E+v0DfM9hcIynE98eyI/BWbc0IZmk2F6b5B+9e4WjQQZnU9EXHv0EFqy4UO48CSb
ybhMQ7nxlBfF4+aDixRtuFjFfbwfViAEfR5P97lvD8j3DbzWo3ABJRcCulJ4vPwi
AdOZZ2SydhN7NP3gOSXc+o7Rfefo114ajtskiKTRQzIKhu2Lb7ZARu1OJ8aY9Vev
4OLhm78E6ub9W5Wq1MdVcrNJ8pVKICJg7mtgboT+jrQpyHxF/iGV11RTOqVRo3vm
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331250840559534725146868277462053068178143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 16:46:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 16:46:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cbs.soapsindepth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25563997479480691671468680679321074144345300906810131950095626593098661473301647952152730540673526385681370632139989636017986234432142963100839735422661548387255152131119474411661935947327068102921568374879817853963363239607434920394887197031986153561961557202908888025851373394561857075597263816796848810808327772885953568468180118935945470137156424892357399289335311907415292175867982985240907150908582586470503387373172132675416936223759595801761269274630384614245050585805036409521152014199506704482975162055864364701247430319592059112535427147044725925477781891811411668534513645873572371224593075201626697623077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							570592e2543ae4528b3c7f5e0a9f46a95092e392
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.soapsindepth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbs.soapsindepth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fa52a29a2000004030047304502206f45c1406177cf50165ab37273da58784f7bb12ccd47b23725f18171adfeee1d022100c6f307fa9acfae79832667a53884a4b09731c1127b36880b2749eeab8fea7dcc00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa52a299a0000040300473045022032e74da7a5c34bed0715e611702a437522bd14f82442b2c802c6b62a26401e23022100c738753d3e74010aa14383ef33912e2fbf5375a9a142c2db53b8305df6d8efd4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000aa64cd77d205ee19b58d752075540ddab903c0c050e3d6f924d7c2c57d6696cf32bd3b45a20723f964d4751e8a039eed74fec15630d356778be499e0af04e7fa1fd95246e7016fed88dfdebaed45a1783aa627b25e0551ec8c1da962b099cc804f493e80b5eb0e3fdbfd2600014842ffdf0ffd8eabe8a2b62fe8a7c1378ea55062b1934bce6466113c5ebf24f9388eeb2ea20d1ec50695706ec5ff84a66431df023908736480484acfa245e773f609681ac960f8d886aa3fb711b321d79f4bfb786c992ffae25ab172247c267046efddceb49b497aad62f97bbc6c9b71dcfbfec6ddac643fa67080eb2299b560ca1830c8167b64e30f1978ab32cd37d3c35e7