sassofoni.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:63:79:27:ab:62:10:23:40:be:b1:94:82:96:19:f7:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sassofoni.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:63:79:27:ab:62:10:23:40:be:b1:94:82:96:19:f7:cc
Serial Number (int): 296518164232232330434766925523716004247500
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:a3:db:ea:b7:b9:eb:73:bb:15:b9:ce:59:17:b6:f7:4d:34:8a:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 62:1e:69:b9:09:55:a5:63:fb:9f:2f:aa:b4:56:1d:fe:aa:d8:5c:59
Fingerprint (sha256): 13:8f:bc:b0:13:ab:7b:6b:92:a4:22:dd:67:b4:8e:d3:4a:82:e2:b2:9b:fd:70:69:ad:4f:48:03:08:a1:42:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sassofoni.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sassofoni.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sassofoni.com

Other certificates including the domain name sassofoni.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sassofoni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296518164232232330434766925523716004247500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 01:13:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 01:13:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sassofoni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717497055583152046944465546683442777607627776348103244494554449817119998919968987965458684939247777753458089338151178105964761729476564322998397105327141423167845968460771993184803938443209979166208894992722502203752843803926378526326434049550712970400285726788000075896566879223611104254913945209107255456738778587687442261165293307279930932450282153124604099092874073599997934358517656891281749321143100473217446963307325877520003429604853994207659255407266941713418141266428702221976082318748392007344825722934480071937741425319904021251041326147412790845935663018317293292169403813519254655735733896104399186415851168321757789094106432756405237705635358408929853504336536574133010205235186923062722236736463606758349071542735807572574273819276469210786701754222437468586974379157291510613523495012818830399271470782110311539219355034855591731836867196117967886570151215666235473483742029153928505861463237425744210077631877486586626521802527756967891173940624209554686301438218284969040014929086852247263534199864056394268952976310822753944803172222390087950667103581757253774416236192309712444443488380532324501398043967396041754599452566529261232396663554327560292219346721425331238185715878338442827842406801142107346695946343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82a3dbeab7b9eb73bb15b9ce5917b6f74d348aff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassofoni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d75a566650000040300473045022051e285f9ccae02e9e3dda26474beb1f27b0b7b546d2c8917c04ee034a25d3b50022100daec950b35b40797cd3b4a4298deb21e98c1d76668355e3cd31409614c3d03c9007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d75a5687500000403004830460221009ad54c191889993d4100c9213b30a5abb86b6787121f5aae11f5c7921e7975b5022100e752aea2e14b798c5275f6212a5780bf62c4a52fc95c3dddb8ebdce0021f7494
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000e9294292def280dc8c79111cb1f1533fb21893961163846a1d3a6cf0386c9977e16f9a438edb9c35ed478370ffeaff8bd1c179719452d205a4b829e6afcfbcdcc2a25f02cd33bab11041514a4b09bf056def0a43400329772118c08ce188755859dc9d165187956b4f4c2784530d22cd19b3f6f5d4835722e472334cf19c37665f712dfbef0228d216e52e3f48d3519eeb36a155a2785c6d5fedce7a15d0e6087c507ae7ab028199e2714c3a25f3b637d47962d9d17f38478d6e8035df2097cf1e3192cc302d9299a084e765b8fa483efbb38ef86780ccf60ca373a56d6d49c968d3680255f0a3f8d923fe7624fbcca9e31567e2c97d5baa97b19544e33f1c