latvia.sodra.com

Issued by R3

About this certificate

This digital certificate with serial number 03:01:7b:c5:40:a2:84:23:ef:c5:af:bf:36:e5:43:d6:5c:b0 was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=latvia.sodra.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:01:7b:c5:40:a2:84:23:ef:c5:af:bf:36:e5:43:d6:5c:b0
Serial Number (int): 261841659399114426843755157664493571824816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:ca:c6:8a:29:c3:14:a8:20:61:d5:14:14:ba:55:81:a3:83:a6:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:75:54:35:b5:f2:bf:db:2a:8e:45:09:86:ed:a3:ac:aa:8e:ab:f5
Fingerprint (sha256): 2b:31:00:9e:e2:15:08:f4:24:cf:07:b7:7e:7e:0d:e3:b3:80:39:e0:40:13:b3:58:b7:7a:c5:88:a6:96:43:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate latvia.sodra.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for latvia.sodra.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bergvikskog.lv
fragaria.lv
granmark.lv
latvia.sodra.com
myrtillus.lv
ruda.lv
sodra.lv
sodralatvia.lv
sodramezs.lv
www.bergvikskog.lv
www.fragaria.lv
www.granmark.lv
www.myrtillus.lv
www.ruda.lv
www.sodra.lv
www.sodralatvia.lv
www.sodramezs.lv
www.zilupemezs.lv
zilupemezs.lv

Other certificates including the domain name sodra.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for latvia.sodra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261841659399114426843755157664493571824816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 06:01:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 06:01:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'latvia.sodra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4012633127953267187815973397281223367881510998581743035083062699882825976731534308022137222930175837351919012366331008094116048982635833738082828964946825637250011331951416273466557225337786489438156503650989035226299855036342853501262638606552059967206569678755910443671254637799410246362898501786970577687320055165246270840598935649609526190494805069289763631266159338992930932576974887708519942121259650296663768960767012011428203011303629872431267582813124520724271036594281931639570129114559701826914652077661106015026732189877417822316806774642870010772601234580555613264320688293540821344626558021974765401855565230007686077210660397773752237108872493085644096089954879781208479708270311593662598905550917217128361816332025825092843806555024966576216833302105845402124509085410438554701573793406734703324664614914680980057125119719932043511774306783672793054841044784671159046190493200411258078531641035706352993421111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d7cac68a29c314a82061d51414ba5581a383a6ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergvikskog.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragaria.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granmark.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latvia.sodra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrtillus.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruda.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodra.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodralatvia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodramezs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergvikskog.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fragaria.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granmark.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myrtillus.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruda.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodra.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodralatvia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodramezs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zilupemezs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zilupemezs.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef00312ac000004030046304402200dd3d85fd0c000ec5657a8244ccd2f787a84f993292a8c90eeb1fe35b7f7738e02201eb96f3db0cf43e96fa4031a86eed440a1d2d89dbaf418238e3f101f05689520007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef00313000000040300473045022100fe125c9fc7ce5f0d8ffebf153b9414860353123db6d7a4dce61849aae984670302203c586f72047ed4c5270acad11b07863228061e20f610044ec8a172ee6a5517c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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