soffini.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6a:61:cb:fc:25:2e:4f:89:c0:5d:9f:09:3e:15:7a:23:cb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=soffini.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:61:cb:fc:25:2e:4f:89:c0:5d:9f:09:3e:15:7a:23:cb
Serial Number (int): 297536782954866631076022655761724739298251
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:04:e1:27:41:2a:18:89:ff:ec:18:dd:42:33:09:e3:ef:d1:bf:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:0a:e7:e4:73:2f:9a:5e:88:f9:22:e1:d3:9a:9a:b7:4b:26:04:7a
Fingerprint (sha256): 4b:22:77:81:77:50:b9:ca:36:a9:95:e2:26:4d:b0:3b:3b:6e:90:81:64:df:27:bb:f7:6d:fc:81:04:62:65:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate soffini.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soffini.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soffini.com

Other certificates including the domain name soffini.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for soffini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297536782954866631076022655761724739298251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 16:52:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 16:52:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soffini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768725028108543886731816603417421931988374471725176708095477052376374065221011114184710458931405194440647951230126911584762772138558348439630220699770977891783062607261782471931280811573149717523802659493990408491431503794524494134605994307003905170910151515785814800521516999267434121417683932783697147706956342669246560404066225608410848662270377097030794629414379805891669870059218380748869137106389617481274225539140748306901078128511455065121617022768340095261253851570961238285154632061364030600137318496289464268982909838742212817098387376891095207003177041890179723296162164585855868205270161041487936370876602010802221574845422729813745861824757282693081842895465888596077385878170130562740982652812631164923798601499344923428119623953771567110051324928452668991968648219229058734599432048470679207733431893363884737791632889093580375384764110848399450600548397435160621360990322885204583077572600591926087979552039099896372220594999215260089558137362460739872304365314732735321269708631227865074183044694750816965782471978774287335816912065359461577075638343544366845633169283691405137731212405872185531039438342859305043449742254216178443047492199765575488154623135624776716491727658666783181680058590631146761368121745709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8504e127412a1889ffec18dd423309e3efd1bf62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soffini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700708596200000403004630440220429399878b3c083c46027d5e71abaaf2896c10a1b2796159202837e453c98773022030513070e4d5c79737a281eb2c00ca9dc702cff3dd8768439529f4f716617555007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700708594d0000040300473045022100c5e73afc011d3aeeca86d7ca07876c5ee83caab256f4a47ca7e7d1024171e6e902202ac6070385b01f8c65ddfca2c4e8cc65e7d30c8b5db8a19f2bc994869a1829f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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