www.soffini.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:b9:cb:9d:cc:fb:4e:1c:0b:d7:2e:59:26:01:ad:d5:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.soffini.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:b9:cb:9d:cc:fb:4e:1c:0b:d7:2e:59:26:01:ad:d5:ab
Serial Number (int): 318410977487138583437097004061484664083883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:b8:62:51:7c:c3:94:e0:c7:ef:60:e7:02:63:78:9a:e4:0e:21:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:91:0a:fc:20:d4:3f:fa:fb:ad:95:58:95:6d:bb:81:a7:55:77:a1
Fingerprint (sha256): 52:86:43:cc:5a:4a:ef:5b:ae:d9:8c:50:eb:aa:f0:41:71:d8:a2:fa:f6:a2:40:c0:7a:88:da:78:85:25:47:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.soffini.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.soffini.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.soffini.com

Other certificates including the domain name soffini.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.soffini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318410977487138583437097004061484664083883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 09:59:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 09:59:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.soffini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 958288006568568644584600173997832485445653969676633525997453602641617035104188476749784659995974328861424388713915896433672545466610032466113328864797621227099804537394899709591793318123049524121098937539789285979107872062186813464088524386450459777285208662374374082136835240168838952166051161717583524461282755584879595964311277875632653680024532346090863365960637366470656718140957596044173063799680947062828899213991749633079185271422315711961311473534638521626766242880458249726974712119787740562122080040973875888924856785957554085804791856107949786149963353278582688592007742758255547543378175269737663653811113953160374328356641050253010261549585413455668949071651299666306760023909994227843054365085997198298127417954952984644095903105017124531119080427716927562949317413517837661887873795390854619550026830536403929184685257496674623664510537822672575476752774015342669418013756897787191833520514690911090885445092598629800163261050283805464973356266332532296898300307033817663039293666940527577885516062757587122550832544399756495046791817578083436963335547296331884346254705158973977989828360791510932356794752777603892985229332324366978429536108333304382019877900519556411593815617237008195124475784472984193047721271121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5eb862517cc394e0c7ef60e70263789ae40e2185
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soffini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afe18b70e0000040300473045022100de6d0a9fa38983bb7b735e414c78bd958f15db28b0aebe81740106c773faaf1b02200f3be003769232fbd4e1a843b8c5d90cd9a935f07968d492f63cba77bef141ed00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afe18b7360000040300473045022100946d14980ddb75a066090823fd63f754d3c88673f4b66363a24e3ba1a8f9fe6a02205882ada9efd62a11ce8103a8f3104796ff4651dad84db9e0b5b83e6df051d1dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d60f3e1788a6d61ee0f18c35e74a0fb0b426855b3678abcf41ae87bc9d2dd69e356f3bdbbd44ae6b3d7414f27d371ba81be572b13ea1947bd73b01ebf7536457ff884b01babc42ca145091884400e0ab216dbc6b3ae774f211ccc2b31b86eb043a9735d2f6e9b9d31d0af60f5f201153805bd69aba18900680e7e7c6d970637d0ca840697cb6f88e2650b3686139ea7b318a6e1bfa08fde2fa1f909fa4e8fda037825c502b0e0e3f3a200582fb20756855997ea977154bd1e53dfc2c0aa73623349472f671585d9ec0206ae94a9cc7ccfc9e962400bd80e9f7b0c2bc35faec6528774b59ab98cd37daac2330d71f6e2e1f2930f7fab9b717324c37f08f2cf20