sorprendo.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:fd:57:3a:5d:44:44:f0:68:4a:d8:33:b1:cf:a4:f7:d2:f2 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sorprendo.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:fd:57:3a:5d:44:44:f0:68:4a:d8:33:b1:cf:a4:f7:d2:f2Serial Number (int): 347544242506802197702997195800936399229682
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 62:f0:b7:4e:6e:95:4d:1d:d8:96:80:d3:6d:42:51:c0:94:2e:4a:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d9:eb:3c:2c:fb:7a:52:35:cf:7e:9d:49:90:b3:cf:3d:de:70:ad:15
Fingerprint (sha256): 2e:91:45:3e:85:8f:d1:86:d6:55:48:8c:f7:b0:39:25:c3:6d:de:b3:2b:80:2d:f3:e0:e4:2b:16:00:12:95:d9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sorprendo.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sorprendo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sorprendo.com
www.sorprendo.com
www.sorprendo.com
Other certificates including the domain name sorprendo.com
(limited to 100 certificates)
sorprendo.com
sorprendo.com
sorprendo.com
delinda.live
sorprendo.com
sorprendo.com
www.wedogo.com
www.fishingscoretracker.com
cashlp.com
werwif.com
sorprendo.com
sorprendo.com
www.flexible-hose.com
www.sorprendo.com
sorprendo.com
sorprendo.com
sorprendo.com
www.sorprendo.com
encryptwise.com
www.presenceofdignity.com
bitcoinplastic.com
sorprendo.com
sorprendo.com
delinda.live
sorprendo.com
sorprendo.com
www.wedogo.com
www.fishingscoretracker.com
cashlp.com
werwif.com
sorprendo.com
sorprendo.com
www.flexible-hose.com
www.sorprendo.com
sorprendo.com
sorprendo.com
sorprendo.com
www.sorprendo.com
encryptwise.com
www.presenceofdignity.com
bitcoinplastic.com
Certificate
The complete raw certificate details for sorprendo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISA/1XOl1ERPBoStgzsc+k99LyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDExMTIxNDBaFw0x OTExMzAxMTIxNDBaMBgxFjAUBgNVBAMTDXNvcnByZW5kby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDCTTTcvkfB3AARuVzcY6L3iNdH4lsPPQMa LVFj5HAT102fhtITQNtf1B7o5Zr3Ylyum/Zbol9cCQ297d+YS8Md0zFgv+emZnrg OBYi6HlZ/5vLT7PM2wlOoVJnMuWI/9fJro5/h5nmYDfBi9T+pE/nfCwc8n53jr3+ 41zjEE5P15SHWdSqYniJJCqQTBPKQgh+1yzLzROO/+RNwX2KTfsgsGYVuYogOHeT t9scALi75Xx3+3NLiuhMzKjmtCpvATEiAQFmylkadQh3DgHJkSV9wVwBUA+sUBEC UJOgpA7+tIs7xRU+Sv9C9b6RLNm/DrltasvpnnxYmFNruxTt8KqcAKOkeM1eTpoi aXG35aJwxYDig+FSddnVwsWAhcCSHLYmeKvzD2r7NNIuC6xviTVuxMsDU3I1DChD EItAFf5ln3kSlzcTj4BfMa++tulzhBQvqHyH6AELF9t2lzhlCnoI7n2nJeB4Ouep O70AouqvfJV92ZmJM6olxuZ86D0TITpzrmFC0hzeRszDc/BIpbYUYKqku/Szsj8X F9uR0cszncopQjhZ9kH0ZKcsHPamRutQEr/lFMlk2QbRAWgvSdFqAQjsc7G+dhmW d+ZM+KS6wxTwg1llsG7phw1ivQeIsIyvETZoanvb1f7ke7vjgU4TqbYpsp+IpnIq aFwJdCcd8wIDAQABo4ICdjCCAnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRi8LdO bpVNHdiWgNNtQlHAlC5K3DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXNvcnByZW5kby5jb22CEXd3 dy5zb3JwcmVuZG8uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SP KJMBnd3x2/4AAAFs7MYU8AAABAMARzBFAiAkCHiU1jRuSyajMRyRRvJEMdWZ0alw 1yJLlIM+gaNhzgIhAKRlqCfFbRBiJsiDBs6zHAvF7il3BN5t+XYKYPsKIjKxAHcA Y/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFs7MYVEQAABAMASDBG AiEAk+/XFrcjG1jPIT9rHXwM5C1o1ur92gfhc3T6oiVS8JYCIQCH6j/3y2MraY4Y iqXAYIZBChn7zXjziL7B93g3Z4jQijANBgkqhkiG9w0BAQsFAAOCAQEAkNTkdDi/ k0SxTyDj0uL4k5JaCWPRS5M98jouaFrlG2O5VHbQpQD2TtnWp+04Zi4wXoW2xWJs MX/60yFH84nc/fszhqL96/VIdj8W/MFRcQl71UjLAqoovddU+zZg+XDimzTYaD2l F21LSNUHWOtXkW0WIv92UYPQ0HiwwtETXhoBf9uEuWH/Y3i/O6DdK9S8L4H4tAzJ 6VcIGNunoiKyfw0wZjX4bQP0VQSmTLcSocrAFqu4taM3+m6lVUztEPQrhHpVkh/2 nrw1G/gxJt0yVIAVVKIbkzOV+rHQn2/Q/VBXpdYXQqruLnCKyOS2gsapCmx8Gi0p uXUO5WRB3UsYQQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwk003L5HwdwAEblc3GOi 94jXR+JbDz0DGi1RY+RwE9dNn4bSE0DbX9Qe6OWa92Jcrpv2W6JfXAkNve3fmEvD HdMxYL/npmZ64DgWIuh5Wf+by0+zzNsJTqFSZzLliP/Xya6Of4eZ5mA3wYvU/qRP 53wsHPJ+d469/uNc4xBOT9eUh1nUqmJ4iSQqkEwTykIIftcsy80Tjv/kTcF9ik37 ILBmFbmKIDh3k7fbHAC4u+V8d/tzS4roTMyo5rQqbwExIgEBZspZGnUIdw4ByZEl fcFcAVAPrFARAlCToKQO/rSLO8UVPkr/QvW+kSzZvw65bWrL6Z58WJhTa7sU7fCq nACjpHjNXk6aImlxt+WicMWA4oPhUnXZ1cLFgIXAkhy2Jnir8w9q+zTSLgusb4k1 bsTLA1NyNQwoQxCLQBX+ZZ95Epc3E4+AXzGvvrbpc4QUL6h8h+gBCxfbdpc4ZQp6 CO59pyXgeDrnqTu9AKLqr3yVfdmZiTOqJcbmfOg9EyE6c65hQtIc3kbMw3PwSKW2 FGCqpLv0s7I/FxfbkdHLM53KKUI4WfZB9GSnLBz2pkbrUBK/5RTJZNkG0QFoL0nR agEI7HOxvnYZlnfmTPikusMU8INZZbBu6YcNYr0HiLCMrxE2aGp729X+5Hu744FO E6m2KbKfiKZyKmhcCXQnHfMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 347544242506802197702997195800936399229682 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 11:21:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 11:21:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sorprendo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792681320337712205786027868185074100773543254574950267293111469463384021892376002189749720915284406782362770759871689168577315799394100455129296816709267725922931756356216559760024694313437543604353078631378651495298893612899527690566171724526651005907002362944393063547767976767113720683018681901020460173132507035894928716861876834825436515287210549080590445513350061041298141986155192185990862684049877403703807467044082402323869319814385681852384350901507071292387831208012741064816032259130643365995238222843869253042464132372336104305627747291864026229734571149046744948138371845137788744869839033801727209901554475921239010632764281445862279171088169725939821141307189106651290651700915601417813163865860948201475982314525460998033874168319614891257050345900289917903910734773322223778838517343066873908097707138658245845816759064824594046657545934703843664840213741028489526355107360907075722265939803979904890006478467338203589449544354770591146403716960985364370387034353459578209722749525379839934885868140518865729318476531087310184034459945974379783320098715021898050865328083036463353982603523844761125507967521696762195959342924299046843839639345393705011255768799968228983176382358210196417296707923990063981374414323 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62f0b74e6e954d1dd89680d36d4251c0942e4adc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorprendo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sorprendo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cecc614f00000040300473045022024087894d6346e4b26a3311c9146f24431d599d1a970d7224b94833e81a361ce022100a465a827c56d106226c88306ceb31c0bc5ee297704de6df9760a60fb0a2232b100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cecc61511000004030048304602210093efd716b7231b58cf213f6b1d7c0ce42d68d6eafdda07e17374faa22552f09602210087ea3ff7cb632b698e188aa5c06086410a19fbcd78f388bec1f778376788d08a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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