sobrevolar.com
Issued by R3
About this certificate
This digital certificate with serial number 03:a1:51:23:89:87:5e:68:db:1f:2f:38:0b:96:44:ac:37:82 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sobrevolar.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:51:23:89:87:5e:68:db:1f:2f:38:0b:96:44:ac:37:82Serial Number (int): 316230170857015595455833708554158858844034
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1d:73:40:d0:a8:bf:ac:4b:67:a6:0b:35:ae:11:5c:de:3b:d2:51:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): cc:48:bb:78:b3:97:3e:89:95:ec:c3:08:5f:ac:8b:a2:e8:de:79:bf
Fingerprint (sha256): 5e:6b:e5:9f:d7:70:ec:44:e3:7b:e4:47:06:05:fd:b6:6e:fe:61:5f:9b:42:be:3a:6e:38:25:78:17:24:5f:39
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sobrevolar.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sobrevolar.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sobrevolar.com
www.sobrevolar.com
www.sobrevolar.com
Other certificates including the domain name sobrevolar.com
(limited to 100 certificates)
vertera.ca
zaitna.com
salmonfarming.com
www.sobrevolar.com
bhagawadgita.org
sobrevolar.com
omeia.de
gettingridofmold.com
hating.life
salmonfarming.com
termodrone.com
joacaba.work
wonder.bible
sobrevolar.com
gettingridofmold.com
disneyland.world
joacaba.work
thehousepainters.org
crmrealtime.com
dubai.buybitcoin101.com
joacaba.work
militaryrestoration.com
university403b.com
buybullion.org
joacaba.work
arv.org
proindia.com
gettingridofmold.com
joacaba.work
gettingridofmold.com
www.haptoverse.com
gettingridofmold.com
disneyland.world
win.estate
zaitna.com
salmonfarming.com
www.sobrevolar.com
bhagawadgita.org
sobrevolar.com
omeia.de
gettingridofmold.com
hating.life
salmonfarming.com
termodrone.com
joacaba.work
wonder.bible
sobrevolar.com
gettingridofmold.com
disneyland.world
joacaba.work
thehousepainters.org
crmrealtime.com
dubai.buybitcoin101.com
joacaba.work
militaryrestoration.com
university403b.com
buybullion.org
joacaba.work
arv.org
proindia.com
gettingridofmold.com
joacaba.work
gettingridofmold.com
www.haptoverse.com
gettingridofmold.com
disneyland.world
win.estate
Certificate
The complete raw certificate details for sobrevolar.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISA6FRI4mHXmjbHy84C5ZErDeCMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTYwMzA1MTdaFw0yNDA2MTQwMzA1MTZaMBkxFzAVBgNVBAMT DnNvYnJldm9sYXIuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA z41cxLeMRmFfi1IxxVfAylOz7qGIkzoMeqIvfDDlLydzwp6CfLGoKX9yBTjDEulh A/NGUuA6HZBeidRUgp5Uu27231Qu1mYJjze2Pwxy7ixL+ada0L4oT4J/87NJBTgm INqHxsJ9RGilvoz0Zmbwf9YQpGjLdaonVvyb+4NruVA+iFGvs4PXCT3dNgkyCK7c UFTg4/jrX3bkBZ5+ityuPsg7BRWJGg03fwlmoIXcnmznXthdq9llrAQXNkNAFIfr fOzQet1kwIpZaK9JsewAUEIN3qTy5iNMajQY/3N+545gfitA+4zWV4qx6YFs8M+Z IpGzJyQkDTpI+HaoeKdndIOumAq23m2qMuK5U0U/V5dJYUUtqjutO2nBOVjss3hH rP1BHuGUlozXGlpQ64wIahH34HTOvV77VVCJKnOHMrrdvobwdAgb9keF1r6LVMQ0 VXuVZvaAwrzNuzHl7AL6sEsU0el05VN4I0NrDXqIdAvNYHigvWTgWGVDMqe67Ojx GDwMwm3xk0zcph8VhucDMdZtvXpYMSlTK99MvRrGZ3z3D87aBq/Hplr/rAgUhqt3 VPIwwDr2KsBkOIKhEgcVyBqwuFebOHLRmMHh/QB66/CbhvW6AZeklT4eV0ZZn2/b Pd3n7UBVrvSNrCOhmQ73758r5VFOMnKOH3lsr5z4/1kCAwEAAaOCAiUwggIhMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQUHXNA0Ki/rEtnpgs1rhFc3jvSUd8wHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wLQYDVR0RBCYwJIIOc29icmV2b2xhci5jb22CEnd3 dy5zb2JyZXZvbGFyLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB 1nkCBAIEgfYEgfMA8QB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX AAABjkVveMcAAAQDAEgwRgIhAOmc5CRm+IYVCwwrm73Fax0bPfsDxArYScAnf+kn AmnxAiEAlzawWg2nSAmQp+PaaN37PigZnO57h+Gzz8MNLT7q/nAAdgCi4r/WHt4v Lweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAY5Fb3j/AAAEAwBHMEUCIDHOLAdZ C0+PVyfNUgItqH4c9ku0WHIrTsTiqIZ6qxYEAiEAqeq2hjc167aAdW4AxK6H5w9w 1PXTgMRkoVLW9TY/xwAwDQYJKoZIhvcNAQELBQADggEBAA/O74JTMOFAtughmu18 mH/pqQtZgAbHV0rWRSta77nwlfUBUV+esiaKceRj54kwI1WzbwDSsxYq6BzVFFZO G3FmVR4FrkZSi9sYWE3DOBJlHZX86osmsyWoCkvmkPLQl0VVPSFI2TKTvJIZmTo0 A3ZJ2D5whyCMrh9bg4aL5CIHGWeI/4pPzEtvK+6fDpTXzSkdnJbNcfYxvAgz8NNG 4lMdq0Z8zKH/7MN5Kqjaa7xpasP1rVNfkmbtAMT0k0Tk8hg7ScFi+91V4sTXgGuO 0ie/grQduT4x17p6hYDVdqCSuSYtoM09FMkvrwhrARvH+A2V/70Kb8sijmSA/zCy Cs4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz41cxLeMRmFfi1IxxVfA ylOz7qGIkzoMeqIvfDDlLydzwp6CfLGoKX9yBTjDEulhA/NGUuA6HZBeidRUgp5U u27231Qu1mYJjze2Pwxy7ixL+ada0L4oT4J/87NJBTgmINqHxsJ9RGilvoz0Zmbw f9YQpGjLdaonVvyb+4NruVA+iFGvs4PXCT3dNgkyCK7cUFTg4/jrX3bkBZ5+ityu Psg7BRWJGg03fwlmoIXcnmznXthdq9llrAQXNkNAFIfrfOzQet1kwIpZaK9JsewA UEIN3qTy5iNMajQY/3N+545gfitA+4zWV4qx6YFs8M+ZIpGzJyQkDTpI+HaoeKdn dIOumAq23m2qMuK5U0U/V5dJYUUtqjutO2nBOVjss3hHrP1BHuGUlozXGlpQ64wI ahH34HTOvV77VVCJKnOHMrrdvobwdAgb9keF1r6LVMQ0VXuVZvaAwrzNuzHl7AL6 sEsU0el05VN4I0NrDXqIdAvNYHigvWTgWGVDMqe67OjxGDwMwm3xk0zcph8VhucD MdZtvXpYMSlTK99MvRrGZ3z3D87aBq/Hplr/rAgUhqt3VPIwwDr2KsBkOIKhEgcV yBqwuFebOHLRmMHh/QB66/CbhvW6AZeklT4eV0ZZn2/bPd3n7UBVrvSNrCOhmQ73 758r5VFOMnKOH3lsr5z4/1kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316230170857015595455833708554158858844034 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 03:05:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 03:05:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sobrevolar.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846739088413737762428437301108579713598366239591810279458535248006221014770025168731808750845587255062597828112715120053852484541092277634480229457241322450797662859755654346879080299679753133034363328532482705801216041120152326355303494299847368973613300327504757393984486177530513103956458970615069411128267703024136679477079809176453980777572581539090817544250945369229360314014497631899546155509494869699331235996223451712232201528798321698643873464476186231901366384653882934710462554454041883201815339962731756311795259092567483759587997746128776237669160431330167571511144005160947397173435934643479036793294739314718653318814087033494536697524017680901286464058997509237410383360078935665233087163852482351169194152631390917888343995873072526809760842623294386374053111482767879575546586977208361815184740868363992198652632372875137308819968916819231462158138732136586641120619193824042623893726630506501807156009641551863867958813066483554064490772720965406880876244229684093127453617288538900329348914836765649869519730272342662292999412020991794782224009865375178550200499182438950935559520767719952057753069487099748533585466734333769722748971145134685644831376770308096425893093013503699058248459575778271862929873239897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d7340d0a8bfac4b67a60b35ae115cde3bd251df . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sobrevolar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sobrevolar.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e456f78c70000040300483046022100e99ce42466f886150b0c2b9bbdc56b1d1b3dfb03c40ad849c0277fe9270269f10221009736b05a0da7480990a7e3da68ddfb3e28199cee7b87e1b3cfc30d2d3eeafe70007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e456f78ff0000040300473045022031ce2c07590b4f8f5727cd52022da87e1cf64bb458722b4ec4e2a8867aab1604022100a9eab6863735ebb680756e00c4ae87e70f70d4f5d380c464a152d6f5363fc700 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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