latvia.sodra.com

Issued by R3

About this certificate

This digital certificate with serial number 03:dc:71:39:77:c8:6c:40:b1:69:7c:e2:a5:5c:a1:60:aa:7c was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=latvia.sodra.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:71:39:77:c8:6c:40:b1:69:7c:e2:a5:5c:a1:60:aa:7c
Serial Number (int): 336349479671817711808146651683299996510844
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:ae:bf:66:eb:96:6a:3f:a8:1c:32:6b:18:78:fa:2f:e4:44:36:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:c4:ab:37:72:e6:85:99:27:f3:0b:2a:58:63:c6:28:2f:0c:3a:09
Fingerprint (sha256): 38:d5:18:98:8a:81:35:38:cf:01:5c:fd:3a:b8:11:29:32:ff:42:48:f5:ae:5a:03:2f:1e:53:1f:fa:18:d5:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate latvia.sodra.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for latvia.sodra.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bergvikskog.lv
fragaria.lv
granmark.lv
latvia.sodra.com
myrtillus.lv
ruda.lv
sodra.lv
sodralatvia.lv
sodramezs.lv
www.bergvikskog.lv
www.fragaria.lv
www.granmark.lv
www.myrtillus.lv
www.ruda.lv
www.sodra.lv
www.sodralatvia.lv
www.sodramezs.lv
www.zilupemezs.lv
zilupemezs.lv

Other certificates including the domain name sodra.com

(limited to 100 certificates)
webmail.sodra.com
energiprodukter.sodra.com
pptest.sodra.com
ehub.sodra.com
latvia.sodra.com
lrf.sodra.com
support.sodra.com
VPN.Sodra.com
oncemore.sodra.com
*.sodra.com
redirect.sodra.com
latvia.sodra.com
guider.sodra.com
ucexternal.sodra.com
energiprodukter.sodra.com
latvia.sodra.com
karriar.sodra.com
psol.sodra.com
skog.sodra.com
sip.sodra.com
*.og.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
*.og-test.sodra.com
karriar.sodra.com
energiprodukter.sodra.com
*.og.sodra.com
medlem.sodra.com
el.sodra.com
oncemore.sodra.com
servicedesk.ecm.software
*.sodra.com
energiprodukter.sodra.com
career.sodra.com
webmail.sodra.com
career.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
support.sodra.com
servicedesk.ecm.software
latvia.sodra.com
support.sodra.com
pellets.sodra.com
ucexternal.sodra.com
b2bwood.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
webmail.sodra.com
entreprenor.sodra.com
pellets.sodra.com
karriar.sodra.com
lc.sodra.com
latvia.sodra.com
PULPSERVICES.SODRA.COM
*.og-test.sodra.com
wood1.sodra.com
energiprodukter.sodra.com
oncemore.sodra.com
ehubtest.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
career.sodra.com
support.sodra.com
sip.sodra.com
*.sodra.com
latvia.sodra.com
pulpit.sodra.com
workplace.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
energiprodukter.sodra.com
energiprodukter.sodra.com

Certificate

The complete raw certificate details for latvia.sodra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336349479671817711808146651683299996510844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 07:01:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 07:01:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'latvia.sodra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3804270702034431152545873772361652391222784822947416977329927309331945940395308483992751661513850801185117537724369258126890294921327926257912106167187863390927499799863685193316490369701790652915900714395250593334412926893755179600358200091859372234916158288193560459989550672270301770167679334927079620829847784116312617405212759829826988499584639977518823374960012227763393793525622985557202290033723281142379462920006358761265940818903303274212614305900503846369665443433302262925424243245238059414955856079947656643559361173374717197727941510908246912310104278799332221238344075282234962913251230950938646483924272982548334387522801302701080264187098478798308295023093142866409819121364190808156323718014219238168836617683540348034662120853714040304165832813654624271686702241941957621278618824468391442086707565312562214456862155811095158557134309752061755634514536523557689547425511006624307291747586505760578556200273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6eaebf66eb966a3fa81c326b1878fa2fe44436fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergvikskog.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragaria.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granmark.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latvia.sodra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrtillus.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruda.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodra.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodralatvia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodramezs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bergvikskog.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fragaria.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granmark.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myrtillus.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruda.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodra.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodralatvia.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodramezs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zilupemezs.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zilupemezs.lv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018caf71c6c20000040300483046022100830cf90ca14155dbdcaab5fb63b1b8a2db53b7ae94d940f3cabda187063b8dd9022100cc748af00b988b2786e0f95f2d30ae10c755a2fdf0519513f12a62dc94db770c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018caf71c7200000040300473045022100f67571a2016908e89be67c831ce8e8121c160d76d0b1b15c3c877bb54f6d091102204ef2bb8a3b9748fc245d4e69087161b64c3a47ff7a34df1c9c7f39dc2068810d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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