sophera.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:73:8e:35:60:e9:d1:ce:b7:6e:93:67:8a:b9:d1:74:57 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sophera.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5d:73:8e:35:60:e9:d1:ce:b7:6e:93:67:8a:b9:d1:74:57
Serial Number (int): 380249003459003417203380424843038037210199
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:82:c3:19:58:e7:0f:f1:f0:c0:7e:83:c9:97:9a:5c:c1:52:23:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:96:3d:f5:e1:2b:ae:b8:e1:33:11:78:11:13:2c:ff:31:1d:14:be
Fingerprint (sha256): 51:ae:88:ae:8b:a1:1a:8b:07:db:ff:09:28:a0:2b:d9:cf:e2:65:e9:05:2a:5c:3e:bc:26:1c:76:c0:6e:32:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sophera.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sophera.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activatorsclub.com
alavera.com
comidaboliviana.com
hotelsinphiladelphiapa.com
klparker3.com
mascata.com
oxva.one
rockingflorida.com
rosewoodartesana.com
sophera.com
tvashtrya.org
ventilatorhub.com
www.activatorsclub.com
www.alavera.com
www.comidaboliviana.com
www.hotelsinphiladelphiapa.com
www.klparker3.com
www.mascata.com
www.oxva.one
www.rockingflorida.com
www.rosewoodartesana.com
www.sophera.com
www.tvashtrya.org
www.ventilatorhub.com
www.xn--5dbgacb7a9fepb.com
www.xn--cebdg9c.com
www.xn--sebb.com
xn--5dbgacb7a9fepb.com
xn--cebdg9c.com
xn--sebb.com

Other certificates including the domain name sophera.com

(limited to 100 certificates)
fanfiction.be
sophera.com
iboughtthis.com
goddomain.com
fanfiction.be
fanfiction.be
luckiest.com.au
maisanta.com
folhetos.com
widjaya.com

Certificate

The complete raw certificate details for sophera.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7mHTKrAZcUGUzXCWR8n
BFYOEj9H40phzKPv7vEfOmcAS2eIB+0qAQ9kr0rQQWCPqAcb4NrKmYHACDbWe5Uq
/O2ZbvP5zAlYWP9CvZgFYtBQGGkiYS1xGF8mHLakkPPPqOYkHGUnfpVCdibnz1Js
hMgz1/i9h/Hb/6vGMpx2tz0L9mFq9dpFmNd0Z/nH8bW+P51hkvsvOK7pjppiV0Xs
CZk49DAjtQptO3Mz1Sw64Z/cnYHUMJPfZ0k+lxHCvDoEkxqsxKGYdeIXAS+95JOd
MJeYPFJq9gCxp3q0pYsBdZREGRPJEutH69OWo/90UqQk9lPBkWYnkwPUHZGYzzdT
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380249003459003417203380424843038037210199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 19:14:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 19:14:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sophera.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24203003768357724783653031500216637876560750660356565658231013444570475247270830773789303559116680782405789461020909630284809871021870427555382621686603683884493889714016729206301699550365916757179112326722516819470349509243549109418959441706252396376605227075135416587319162521781821248401082486499785077107574101487302577559373432088927849726300300317289774885862921148561383378036611252206032409320182085571161193786799567022947609127510219524706027203909010459817292492117417185131784407116383922705329029413176602684533333029579551151471600716448299986987487216225850048068731269551018679580086820223588721185639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5282c31958e70ff1f0c07e83c9979a5cc152238a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activatorsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alavera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comidaboliviana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsinphiladelphiapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klparker3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mascata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxva.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockingflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosewoodartesana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvashtrya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventilatorhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activatorsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alavera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comidaboliviana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsinphiladelphiapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klparker3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mascata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxva.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockingflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosewoodartesana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sophera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvashtrya.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ventilatorhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbgacb7a9fepb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--cebdg9c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--sebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbgacb7a9fepb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cebdg9c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sebb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f54b11a0a0000040300463044022049e6a1c1a16f72a741726dfe6b963dea671240d701697184a3710d3236b949b902200880e1462804cdd782643d4568efd5a0cfa02483977b6f31c18d4370569ae3a50076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f54b11a3800000403004730450221008168ca60986764cacecfc9c108aeaa830ab25ad8c7ab887d515c857e1f9a8a1902204fe52c4aeedd0e3416f79afec690137888fc67c31f2bb159ef4b7274a437c5df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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