www.sassofoni.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:5b:c4:f5:10:53:bf:ec:d0:cb:e7:e6:c2:38:d4:e7:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sassofoni.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:5b:c4:f5:10:53:bf:ec:d0:cb:e7:e6:c2:38:d4:e7:b8
Serial Number (int): 332918137256962440211694111482084171507640
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:4f:01:ae:1d:db:37:5a:0c:b0:40:c7:00:d0:4b:03:70:fe:5f:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:e8:1f:36:c1:90:bd:f2:d6:7a:fa:3a:27:a3:9f:0f:c7:14:83:2b
Fingerprint (sha256): 11:dd:05:e5:34:10:ff:01:d9:79:6d:a6:59:5f:ae:ff:57:70:93:b8:c5:9a:b3:4f:c0:4f:d2:7b:2d:22:3c:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sassofoni.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sassofoni.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sassofoni.com

Other certificates including the domain name sassofoni.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sassofoni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332918137256962440211694111482084171507640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 01:43:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 01:43:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sassofoni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782494627957880049557780550798409478917650911097588604910887054464287813077281238218230258153661482308283100919765169803513057029839641629950645677236536743350965509466384733981000283472013564500586600126186397622397522867754504582868651560608095693805579533866890101273568329280083818281465837309264222619276151351516740281147487118297254749747873108114743116104585444621542151867293599510478362099529550854924323459746134205591019544180266002383476378161020310624416191649104328024738347156699872118775036196592674184579398152613721896776057176402308933574990021175313356204986877131792831704773010776598476640330639034387205505389144523682167149128882539876102634772813707556270665009682744118293054648880767769341912492660710122371297310106135742470812797546207493886781200790097183497636894370698817739275598236868541088278047631396234268452031894720600688186379373217803273974027387564627341268506691788623008446842409465088686199832012175889391442062982792247691924456926387442032719908188599590056230764430141057155132093911340877748196870355900123303519184171713261823588659980897452184254914948344632514990186249242609151048719243365747130998700878038665556632387867501132464943651107120732269409946794026134785601741444023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							524f01ae1ddb375a0cb040c700d04b0370fe5f4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sassofoni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d75c0937c0000040300473045022100efa7cefec8aeacf79743868c9935b486554039caa71c64f6b93612d2b1d81109022048a4d00cd404aba8d7f4c9790bfee8362b0a3758418c9b981b472e0d64ae22f5007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d75c0939e0000040300483046022100e874973b4ae60e69a101c507749f54f472d915c6401cfc464e797afc886d0a64022100e00824209e81415cdf4a70901c84a863ff4c586a23ca8894f9e98a7653f2a51a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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