saltspoons.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b0:b5:ce:de:6c:44:15:1b:65:91:eb:3c:d1:5f:43:35:d2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=saltspoons.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b0:b5:ce:de:6c:44:15:1b:65:91:eb:3c:d1:5f:43:35:d2
Serial Number (int): 408580504696788728163235571980104957638098
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:f5:17:92:88:7c:96:f1:bf:1c:26:45:33:ff:3d:6e:f9:d1:6a:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:7e:bc:4f:97:e3:9e:dc:55:2a:e6:90:99:35:b2:6c:2c:42:b2:b4
Fingerprint (sha256): 40:d7:5e:81:d6:4d:af:51:5b:f3:56:a9:ed:54:ea:98:db:11:f5:c3:7b:8a:ed:d5:eb:51:15:1c:b3:33:68:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate saltspoons.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saltspoons.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saltspoons.com

Other certificates including the domain name saltspoons.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for saltspoons.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISBLC1zt5sRBUbZZHrPNFfQzXSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTkwNzIyNTJaFw0yNDAyMTcwNzIyNTFaMBkxFzAVBgNVBAMT
DnNhbHRzcG9vbnMuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
pnwRy8GHrKfrQFDHsONSSXu8NPyUe8YCi1hyMOh/nQv4BXnupMtG77we4MLa/T0c
LC01WgBaSGkhRi++i8+x1o/s4XDpd91JnKqk5f2To/djxw/lIfwxmSUhc/ogNKhc
l6nEG0Xr3nFthUF3sfLgVAFo8HEnmvgEtNZFJ46FqkJRxrdVLQ5qU7Y3H9PX85xa
2MF15/RBfkagr5UbkqbhEBBzygMEAhoT5W763ez8R1XJr1+Nj5089LLW3i+I2moY
y9kiPhPC/n5Imzt5uhi1q3bXG6ljOqqY9/TEL+tjEfLGZ+p0cQWX6mbEDKDL6p+h
sy4/ZNsmTLOQH5v77HU1n51CAV4DbBatWVME3K0wR15XZ0VQ6G5sFZg0lcfzPmDk
9Izk6+AKEymzjVbcaqFqi1+HZd+xzaOuteyrqQMSxxVfEpJHxOEJCypqWKUTpnaK
GHuAGAp4Ob6h6NtF3irPsDphV8GG0zwuEfvYi+krAiXLODACgBd4C50x3hZwODlz
Va6gC3MNv47vOmy6qQBAC4n6XfEVKcuRAB0j9hyKpppSF5C+HvvuqFvxOJnKziUq
sd2/E6l89LzLWdqvEJBz0YOw9ALtGI1FxiGCzRV0NHPmQk8k3SqqgvfbLOMDf9Va
am0eYTplT3gA0c2rmQ04pC5CF5AcZ90JEvnniBzGjlsCAwEAAaOCAhIwggIOMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQU5vUXkoh8lvG/HCZFM/89bvnRarkwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wGQYDVR0RBBIwEIIOc2FsdHNwb29ucy5jb20wEwYD
VR0gBAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBIsONr
2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYvmrOXaAAAEAwBIMEYCIQDj
jng2UN3ORGFNfvirGBuY46ckWGTUDhF3MbT9v/uzKwIhALu1DqsacFhnCZDbWxfd
ot+G3rqMXdBnk22+1X4GpEdrAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/m
Z0xaOnQAAAGL5qzmFwAABAMASDBGAiEA3FBXsKVRvU3A2uOjKChBlg4t99nUL9mD
s+uABTmA2rkCIQCQ/nb2rDVomJnn7saZDCBzZ4R0fA4msocLcSZZTgA/9TANBgkq
hkiG9w0BAQsFAAOCAQEAeolN0KBcXUL026HMtNmPL1NxiEy+iTjfHFEWqC4QtBNQ
uF/I9UNGljyoGT5aZ3s+KUZ0fbtb7uZSS6yAFIEsNVQ/G9B+Pb++r8UNJtb3DTtw
dF9qKzhC+VWMpYCKqayTveya9a14clMQFEv9HRBWf81Xsiu6yI1RAeDlAL7Qsc7Z
5aeA9K/83C9abeUuIL5YdctzrcB4zzMsq/MVLQQ/sVnn+oBDpli1H4P8UF4DnCsm
c11bdNnJ0lzVZ8+05iYT+aCjWN9Mm7joLIWFmH7fFBc+iISJo21UqeLDGRKUMQuP
cUN0om1kgIr5EhzRJT0lmnM4AAvGh9VXEqbPT0t/Mg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408580504696788728163235571980104957638098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 07:22:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 07:22:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saltspoons.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679198100690541035054409505981141080472516600527692621496594919980778605117131626023528762462371762603668732242754481407452965357851980899600358192748176947160305730035851654165329499423161645100147935715545152242329666477707743294636936488368651096575996776992000493083832162694214852851780291911065900433463171276395173838924584261426106229049645616634845377898502359059895951074414102779524810564496968300460629142428374212381750511193071575404428105666140993024929083035792603622124801051837016586209113221339751204441184308887988678813258698278131156104941031545579594355892175126747823431107400473162944668830539568157466201366668949584302304976298907381755431577060874029914332352404965022937067904787998890442498921110730377874531855959032071673042229808586097139406516558998589690026093929544275755255037454580488643634160264942193177883972925497611846004606098400636503288370518593524698956922795588240993020708008174416219506383232454624380895714973812993723690734597991905401253801916745822232363637185852149428977019664944332471018292961134141643786142810506348820942943051296878609349949939257277403283472453601080448692211894670865044611102421050369806533915050743382395184653311190928070081584202333271701055018012251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6f51792887c96f1bf1c264533ff3d6ef9d16ab9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltspoons.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be6ace5da0000040300483046022100e38e783650ddce44614d7ef8ab181b98e3a7245864d40e117731b4fdbffbb32b022100bbb50eab1a7058670990db5b17dda2df86deba8c5dd067936dbed57e06a4476b00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be6ace6170000040300483046022100dc5057b0a551bd4dc0dae3a3282841960e2df7d9d42fd983b3eb80053980dab902210090fe76f6ac35689899e7eec6990c20736784747c0e26b2870b7126594e003ff5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a894dd0a05c5d42f4dba1ccb4d98f2f5371884cbe8938df1c5116a82e10b41350b85fc8f54346963ca8193e5a677b3e2946747dbb5beee6524bac8014812c35543f1bd07e3dbfbeafc50d26d6f70d3b70745f6a2b3842f9558ca5808aa9ac93bdec9af5ad78725310144bfd1d10567fcd57b22bbac88d5101e0e500bed0b1ced9e5a780f4affcdc2f5a6de52e20be5875cb73adc078cf332cabf3152d043fb159e7fa8043a658b51f83fc505e039c2b26735d5b74d9c9d25cd567cfb4e62613f9a0a358df4c9bb8e82c8585987edf14173e888489a36d54a9e2c3191294310b8f714374a26d64808af9121cd1253d259a7338000bc687d55712a6cf4f4b7f32