soppressata.com

Issued by R3

About this certificate

This digital certificate with serial number 04:34:bc:d6:21:4a:e0:5e:42:c2:0e:b2:6a:58:26:a6:91:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=soppressata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:bc:d6:21:4a:e0:5e:42:c2:0e:b2:6a:58:26:a6:91:26
Serial Number (int): 366394833496916916866853124138333532229926
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:79:91:10:a3:35:ad:c9:51:46:28:fe:5b:39:a9:d1:fc:98:9e:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:e8:8b:fa:73:bf:26:ee:e1:98:65:db:44:de:25:cc:a0:9e:76:16
Fingerprint (sha256): 64:cf:b0:6d:10:18:a9:5e:9a:2b:c4:61:5a:a5:28:65:c3:8f:99:fb:ee:f8:d0:63:71:69:ed:b8:dc:24:04:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate soppressata.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soppressata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soppressata.com

Other certificates including the domain name soppressata.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for soppressata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISBDS81iFK4F5Cwg6yalgmppEmMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMDcwMjA3MjJaFw0yNDAyMDUwMjA3MjFaMBoxGDAWBgNVBAMT
D3NvcHByZXNzYXRhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AM38r9QVts3f4dmkehsznKNjadgbrlho7kXmDzjm7ONAsSjO6YznZj4+QcLGGwjC
HEexNKRsfKevv+d1QCrAowP/HXUlns8GSX75JuTEE7RI86qMh9T54ElY0Y4wtcv0
+Q6iAVw2kxX2sMl2wsaSAfyF3IreYnxJPUQwjkk78L3vHrA9nlYCcg0yzE7CMip5
N2hdYYXiZTB1eEpytwd90VN9TVBtpoX8BGVDTR7Agniwa1E7JOXtrk+M6KbJBTVS
6vsRA0gO5ba83FfjZ/BrkWEIIpLsQ+Z6naM3HZWvOKbIpsB7hJ9TtFygwXvQOiWd
s7flBVohaX4HbJUkEjOv9UuVLSY3cXDWgzHs8j/8DO3vp6NIMY9892WjY//ct08F
WSxwFHHHinE10ouXsAWnglIHJYYOpMu5F80qAhaKox1/DCFFAFexiR+qIYr6eJcb
uy5uIWq+7v2AMJZV44/c8t//PjE3DycWTLVvoKAlioPnM20g0cUfOgggI2y3S6OL
eYFSlQPbQH4dY4F2Q9dNy+F0urhHUULoo5uGvrHOyu66TyGNbrJQkTCNIe0z7SrS
OHLJm9mHvurEMwyzFZn3wbtci70f/JqpoTDQqvEWSdREf5TGeQrUObyX0g954cEs
gElwozWZqShiFj9l28C+oRsyVysTvpbvJKN5JuTPPgCLAgMBAAGjggIRMIICDTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFC55kRCjNa3JUUYo/ls5qdH8mJ7yMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMBoGA1UdEQQTMBGCD3NvcHByZXNzYXRhLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi6e/u84AAAQDAEcwRQIh
ANjAi5qGnlUTii+vlUw06qmzrW+yPGuxPrFvXq3fwGaWAiAOwJ9Ho/Ivn1+4OO2k
2yWJXG/zXjJ9OCSWP6qFh+mzsAB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf
5mdMWjp0AAABi6e/vAkAAAQDAEcwRQIhAMGHnUP6kv9WgchZJ+07kSWP7hPwQ6vL
MW4QW8+YoDEwAiBO5MqqCJca9KKwg4xEHyMKVcF1S3GuQFWBnVFG18nM0jANBgkq
hkiG9w0BAQsFAAOCAQEAUsMwx/QlCsh3WQx1rOaSAiBft+Xra/wn3RmD0AkU2h4F
A4i4pFVCpCUMMTTAJ45ZEd4SB60/CUjS/aYQjMS/RVnzPfPOhjUcKCmFxVCfudyH
RJF9e3i+LGPlTHz9jqxwbUIoVrS11H07dftdHWbZmbcnSWmdKDI6XYaf9eMia8HH
GyCqY3huqJcjVbOYClEcomrS2Xs2AO/eP3RKxzvI6KMIYIna3EjfTxBn2OjDeFp+
l3kwnhSPdCe67rh4blRl4ZZ07XvuHyzBNb5DTqMJOX31lIhIg6b7nztg+64Q5Wz/
xzfv03gUTSwB2YEhj9i8OlS63v8y5u7lppHlCJmZew==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366394833496916916866853124138333532229926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 02:07:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 02:07:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soppressata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840353878970294434285555595151720415467140429362077462607838984985191400910634294611111227970700747205161715518328605392922791745196197822977262611605418353583260685469588372272874753656245487262318883316853054349074884294871629116694068000582935166745590704204506816478777024583156199803924038633792771386693832475420656141897869242941055298111150422708759159901551049571314114608532440681845821670846714720577283330251278408844558200907796029410995867105690985685880745573611873983604033148504283005324072820338369451395033919140248140817571451123219133294776893832125485268453435541018206732944952701359421962729697464152852702636164294912366394713051850786203295879157675341151613289704846083743455942722387114301893222604578110142035432510526147498976093637065370190423629913599708933718907405275993817508851106856477186178525675849721820636158925807449231172476541603068691909331035486434542786169341974976519851516360329672848097446810285334633440146312881595636064400507246212071674829916332162168607190612949904239084731074638463730403044616636271945195732861194040219906743125669710349993817799039922713636557562034514624491800124401487613666945595911352068193303873831262125401272434776180501380207299377777934934296363147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e799110a335adc9514628fe5b39a9d1fc989ef2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soppressata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ba7bfbbce0000040300473045022100d8c08b9a869e55138a2faf954c34eaa9b3ad6fb23c6bb13eb16f5eaddfc0669602200ec09f47a3f22f9f5fb838eda4db25895c6ff35e327d3824963faa8587e9b3b000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ba7bfbc090000040300473045022100c1879d43fa92ff5681c85927ed3b91258fee13f043abcb316e105bcf98a0313002204ee4caaa08971af4a2b0838c441f230a55c1754b71ae4055819d5146d7c9ccd2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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