sotayamthuc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c0:7b:1a:98:3f:07:ff:99:34:0c:1e:36:14:64:1d:83:73 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sotayamthuc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:7b:1a:98:3f:07:ff:99:34:0c:1e:36:14:64:1d:83:73
Serial Number (int): 326834705375220900870812617815840190727027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:5a:c8:b6:c9:87:16:c0:7c:78:65:4f:a2:d3:f2:b2:1a:8d:c8:76
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:34:06:c4:de:d6:0d:a4:e0:c7:19:5f:22:03:ca:0b:df:95:19:1d
Fingerprint (sha256): 22:d3:a7:0d:c1:9d:20:c2:9f:d7:2f:eb:2a:29:e8:78:b0:88:1a:08:c7:82:1b:10:ce:35:0d:0d:eb:fc:d4:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sotayamthuc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sotayamthuc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sotayamthuc.com
www.sotayamthuc.com

Other certificates including the domain name sotayamthuc.com

(limited to 100 certificates)
www.hocnailcaptoc.com
www.betweensundays.bible
tape.id
www.yxc77.com
www.614leaf.com
sotayamthuc.com
andywarholpopart.com
www.thirstygrove.com
www.up4.coffee
www.eagle-case.com
fishfriend.com
semwire.com
rulenumberfive.store
www.loslagosgolfclub.com
www.eagle-case.com
angiomed.com
luxxelli.com
ourhousespice.com
www.festeprivate.com
coilchains.com
sotayamthuc.com
armorofgod.bible
www.texascomingsoon.com
www.bluepacifica.com

Certificate

The complete raw certificate details for sotayamthuc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326834705375220900870812617815840190727027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 17:03:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 17:03:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sotayamthuc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668809308794494902873988951705164173162037396524232699317437232613550732093904126382594328289130576931373759374170181338883891638893752975218289232867874375400329692431693617269198221595613153879545527138511228532554482019590392075550191160562741464904201652032962017620682102721756319967873939539102342169720365678900877775005832429900567514193827613705007664358687861928584077845358092420859691908450648014260051327501040742107218962361751140626495107326277708529335826764556699754833313189426700100236595070734613982412531706553189273050453057604488273552287066863330485785701759726265704602352099533706456501636034749588489647592532806151198604383867180023254883128697255773369154960944365428898488143838681871733734524478935242523503294768555411471106011222303110648376050156574661689940568031345942720132694089686257920168785357768760700052332324494468826974911758271591899959097409834686948670720177810221872333385986227840313602544495292840017106912508183996414136129844516079008657565230336592508556981031383332128150744324609307328641662218004877821845368185685445127631779506476368945422344366965977010327732315964751160140843824282043995028774347738631176496539083653752932673503785308214743212006334189948439770606355403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e95ac8b6c98716c07c78654fa2d3f2b21a8dc876
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotayamthuc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotayamthuc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c97d8fb1c0000040300483046022100f1cf2001a6ebd3f30bfe5af89e41c3300e602e89b8eef5747843ac0ce7c90b5d022100ca34e11282d6bd232876c43fa64ced988d34b1ef2e9104c8e754a32261f6ea4800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c97d8fb9d0000040300473045022077bceba0f6cd7283a7584967f911178aa7b85768e508548ac41a6bfd7ae9d5310221008d0be28048ce6724ac70303ebb751046a6ea5565aeef0678a3fa2801acc1d28a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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