psol.sodra.com
Issued by R3
About this certificate
This digital certificate with serial number 03:0e:50:43:eb:4c:96:6b:3b:7e:12:d5:04:7d:df:6f:64:30 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=psol.sodra.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0e:50:43:eb:4c:96:6b:3b:7e:12:d5:04:7d:df:6f:64:30Serial Number (int): 266207501828160343128350168168460889056304
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:c7:08:e7:14:78:1f:7f:77:5c:de:09:00:a8:29:25:09:47:9c:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c1:e3:ae:9c:fc:b7:30:df:0e:97:15:fc:2b:9d:05:df:42:b8:f8:ff
Fingerprint (sha256): 39:6e:7f:a9:b5:39:e9:01:ef:fb:98:fd:2d:97:ea:09:a9:22:03:39:cd:52:03:ba:9d:cf:07:4a:47:1c:42:63
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate psol.sodra.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for psol.sodra.com
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
psol.sodra.com
Other certificates including the domain name sodra.com
(limited to 100 certificates)
webmail.sodra.com
energiprodukter.sodra.com
pptest.sodra.com
ehub.sodra.com
latvia.sodra.com
lrf.sodra.com
support.sodra.com
VPN.Sodra.com
oncemore.sodra.com
*.sodra.com
redirect.sodra.com
latvia.sodra.com
guider.sodra.com
ucexternal.sodra.com
energiprodukter.sodra.com
latvia.sodra.com
karriar.sodra.com
psol.sodra.com
skog.sodra.com
sip.sodra.com
*.og.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
*.og-test.sodra.com
karriar.sodra.com
energiprodukter.sodra.com
*.og.sodra.com
medlem.sodra.com
el.sodra.com
oncemore.sodra.com
servicedesk.ecm.software
*.sodra.com
energiprodukter.sodra.com
career.sodra.com
webmail.sodra.com
career.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
support.sodra.com
servicedesk.ecm.software
latvia.sodra.com
support.sodra.com
pellets.sodra.com
ucexternal.sodra.com
b2bwood.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
webmail.sodra.com
entreprenor.sodra.com
pellets.sodra.com
karriar.sodra.com
lc.sodra.com
latvia.sodra.com
PULPSERVICES.SODRA.COM
*.og-test.sodra.com
wood1.sodra.com
energiprodukter.sodra.com
oncemore.sodra.com
ehubtest.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
career.sodra.com
support.sodra.com
sip.sodra.com
*.sodra.com
latvia.sodra.com
pulpit.sodra.com
workplace.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
energiprodukter.sodra.com
energiprodukter.sodra.com
energiprodukter.sodra.com
pptest.sodra.com
ehub.sodra.com
latvia.sodra.com
lrf.sodra.com
support.sodra.com
VPN.Sodra.com
oncemore.sodra.com
*.sodra.com
redirect.sodra.com
latvia.sodra.com
guider.sodra.com
ucexternal.sodra.com
energiprodukter.sodra.com
latvia.sodra.com
karriar.sodra.com
psol.sodra.com
skog.sodra.com
sip.sodra.com
*.og.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
*.og-test.sodra.com
karriar.sodra.com
energiprodukter.sodra.com
*.og.sodra.com
medlem.sodra.com
el.sodra.com
oncemore.sodra.com
servicedesk.ecm.software
*.sodra.com
energiprodukter.sodra.com
career.sodra.com
webmail.sodra.com
career.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
support.sodra.com
servicedesk.ecm.software
latvia.sodra.com
support.sodra.com
pellets.sodra.com
ucexternal.sodra.com
b2bwood.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
webmail.sodra.com
entreprenor.sodra.com
pellets.sodra.com
karriar.sodra.com
lc.sodra.com
latvia.sodra.com
PULPSERVICES.SODRA.COM
*.og-test.sodra.com
wood1.sodra.com
energiprodukter.sodra.com
oncemore.sodra.com
ehubtest.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
career.sodra.com
support.sodra.com
sip.sodra.com
*.sodra.com
latvia.sodra.com
pulpit.sodra.com
workplace.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
energiprodukter.sodra.com
energiprodukter.sodra.com
Certificate
The complete raw certificate details for psol.sodra.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdjCCA16gAwIBAgISAw5QQ+tMlms7fhLVBH3fb2QwMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDMwNjAwMThaFw0yNDA3MDIwNjAwMTdaMBkxFzAVBgNVBAMT DnBzb2wuc29kcmEuY29tMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA xleuUUVY/+WtmoNS2lfeV/B8U+4s2HOfsQx54l8OKxv+FAOuj4lv2IVoS5PyZVqs nHkCp7B6QSqYuX8CbxCh88uTzGXGvU4rrdbnyXIhYBB7G3RsJoo9kxG4h7pYM5/P xepx3Z13d3fra8WEytIRkc1zRtNSIiy9zHBEOEn6FXqAcX2naWIsKSRsZN2xcGMC k87X2Xj5gQt+vHTHAG3kAHi5SAayYRTz2h3hYXsIlA66jCPU1igzRYHWhysJ2RuQ DbhFN3m+rslksI8JBfWD4yhKQAANch1vg9VvEsWhafcdNReg39y3jdZRBDKHVfvf VcpZvMV9c624Ulya73zzgSD84rzHA57vvvHU2JaJ4FfD44jFbbSYFMplE42/Js4W dIH0mqkkhbobtr73skRLvTj+Qmyt3Iv0uXqqes1HtALnNQCt4jYqmB30TP/sUNRM +MrNUM54W4ncnV23ga0I80C8eN8UzbuuN8Tq8YICb6TZvwlKTVdagibxsDdzxVg3 AgMBAAGjggEdMIIBGTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKzHCOcUeB9/d1ze CQCoKSUJR5wcMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsG AQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIG CCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBkGA1UdEQQSMBCCDnBz b2wuc29kcmEuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwbErp32fUEuLy6R0YSKzLi/RdN7Ue 68vse4iE3gx1jtqecPEaArXVBzaFaRGC05zZrp/JOmV49szofBjynDei020pjudk iWBgb7WIXJQRpIqgQpMH0omy+1II/cPhI8ddwaCD+y7Fz1rowdqXsQ6QoPpPdMTj pIz53m21uAoC2nHjdqTQ2BPU5D7eKCBre8z7pz1ihdtRmkuMmTrrN5Zo+LQwYX4U IVy34Mi4p0iX5f13W9xJ067rgQOB2mw3aYXD76uWHHR5aNGR2tI2Lx7KXzwfDq28 FofsbUpun36cSkuJv7TbYbcsVtcm2LWAtsdHn5aB1vZjQJoNJcESgN3t -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAxleuUUVY/+WtmoNS2lfe V/B8U+4s2HOfsQx54l8OKxv+FAOuj4lv2IVoS5PyZVqsnHkCp7B6QSqYuX8CbxCh 88uTzGXGvU4rrdbnyXIhYBB7G3RsJoo9kxG4h7pYM5/Pxepx3Z13d3fra8WEytIR kc1zRtNSIiy9zHBEOEn6FXqAcX2naWIsKSRsZN2xcGMCk87X2Xj5gQt+vHTHAG3k AHi5SAayYRTz2h3hYXsIlA66jCPU1igzRYHWhysJ2RuQDbhFN3m+rslksI8JBfWD 4yhKQAANch1vg9VvEsWhafcdNReg39y3jdZRBDKHVfvfVcpZvMV9c624Ulya73zz gSD84rzHA57vvvHU2JaJ4FfD44jFbbSYFMplE42/Js4WdIH0mqkkhbobtr73skRL vTj+Qmyt3Iv0uXqqes1HtALnNQCt4jYqmB30TP/sUNRM+MrNUM54W4ncnV23ga0I 80C8eN8UzbuuN8Tq8YICb6TZvwlKTVdagibxsDdzxVg3AgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266207501828160343128350168168460889056304 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 06:00:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 06:00:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psol.sodra.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4501139836669159178913793470946328019482893462380442670078320199738859164425575963933670177486843995108127776363860535941706903263025745853377904217688730869962660859641778689792138925905487370310374148093533304014916915881281673259928535130075003783462847309279871654078353053548788801778402919097976364600423817659494467352023905218679939864339001243750922588211075478684197873738515689165141503269459985181968570869372398858017464225723254426823294165235607056184293900121204072397133436827943503425781286859016492153150231259328544207080345509194855803517906079375944926889214140567457393645183452047239365183669070414683994135525648719824874328240539410705539751191192951396958582557263561208178979044997357273090615478656376979288624893251984268630928742978054018369269801529889634173710925895456641379173231604742906469587550259706968885455770083581328206250335613153851419646479770819592107516025798739044580811167799 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) acc708e714781f7f775cde0900a8292509479c1c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psol.sodra.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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