sangano.com

Issued by R3

About this certificate

This digital certificate with serial number 03:da:41:cb:a2:41:85:ba:6d:73:4b:be:d5:99:03:5d:ee:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sangano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:41:cb:a2:41:85:ba:6d:73:4b:be:d5:99:03:5d:ee:73
Serial Number (int): 335605870930975200315005960151517976456819
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:29:38:7b:c9:6c:4c:66:00:fb:d9:e6:d8:51:4b:91:d5:9c:09:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:cd:f8:0e:fe:35:3f:e0:cb:87:0e:7d:ad:1f:db:24:52:c5:3f:a3
Fingerprint (sha256): 24:36:ea:7f:c5:75:1c:7f:d8:f0:cd:61:41:b1:73:ff:f1:cf:59:d0:f4:75:b2:14:9d:25:b0:c7:ef:52:13:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sangano.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangano.com

Other certificates including the domain name sangano.com

(limited to 100 certificates)
www.sangano.com
beurettevideos.com
nonprofitstore.com
sangano.com
www.dodcase.com
bcmga.com
robocard.com
www.internationalrighttolife.com
sangano.com
lincolnstemcell.com
sangano.com
www.kookiecashier.com
tike.org
www.destinfence.com
tabisko.com
tabisko.com
bluegrasscasino.com
www.abcnet.co
www.bionicduck.com
sportsdoctorsminnesota.com
www.naturalheavan.com
productreviewsearch.com
www.oumco.com
www.leafscrush.com

Certificate

The complete raw certificate details for sangano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335605870930975200315005960151517976456819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 04:34:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 04:34:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707598805780388699248443445861851505232733510509394384933634611925494359860463945426664314556989701049885317770467405255045071077896870622732221446926962792644479183554069823780400180417829933534299399630114707287037147756548599854232695437065385182833691410431997282362977064709244753892116178121751629228862947592009012914457892163919684489768880748214154278218925266866399293975955560824822629810528825330310373310830046993732480055142052340241049443496984773425912174348274687856599365362408648434554449096358916336608436949110666830055690501789011257334150151747106949130826921743596999121857676390173240750839540286606258583632370257388838653001958500852073788879683785370271388781304763341868155626647200275332991329261844466501857066459365290052253943398320482508121421220680151710245776344910114757233524279377653682556610138040183477891301026644555595614754479480896679476848733052304333952035902772740897351579981980138032320651838746548152563667165137163461450071525921226832722784716379107311218514666355149441903059429969799342281065077499031503472834331984277140285070078530918952612546700979808228411842511118352424466889918808651676089581107372632108491608929518832473424234636911264706272679633458807549243701837417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4529387bc96c4c6600fbd9e6d8514b91d59c09bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ac5ae7648000004030047304502207ef29d82c65d326e543f089305009056bf198f7e963490b55efe742e74906c5c022100e5db72640e62d0a9e1a328c460c27b31d931a625775ddf26cb7de4d5ad8a49d2007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018ac5ae76810000040300473045022039a54398357d4be1a31fb24b967bb6577770b90c5d7b80f63c668d7c660a551002210095ff834413e89a4b62bcb92285a61b3956e5278662a28dd397e06d3b92001e0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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