sangano.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a4:ca:22:75:1b:5a:ab:88:38:f4:d1:c0:20:32:ff:23:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sangano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:ca:22:75:1b:5a:ab:88:38:f4:d1:c0:20:32:ff:23:f4
Serial Number (int): 404524134870525782820577124997480048436212
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:e3:08:e8:3d:2e:b0:a5:12:b4:93:0c:5c:30:ad:ad:95:47:f7:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:b9:dc:a7:8f:cd:c0:c0:c2:05:06:0a:49:1e:84:c6:fc:57:0f:73
Fingerprint (sha256): 74:be:b7:13:c5:dc:b4:2e:d1:f2:c4:56:a2:34:7e:51:da:84:ed:0b:36:21:4f:bc:1b:a5:c8:23:e6:f2:28:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sangano.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangano.com

Other certificates including the domain name sangano.com

(limited to 100 certificates)
www.sangano.com
beurettevideos.com
nonprofitstore.com
sangano.com
www.dodcase.com
bcmga.com
robocard.com
www.internationalrighttolife.com
sangano.com
lincolnstemcell.com
sangano.com
www.kookiecashier.com
tike.org
www.destinfence.com
tabisko.com
tabisko.com
bluegrasscasino.com
www.abcnet.co
www.bionicduck.com
sportsdoctorsminnesota.com
www.naturalheavan.com
productreviewsearch.com
www.oumco.com
www.leafscrush.com

Certificate

The complete raw certificate details for sangano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404524134870525782820577124997480048436212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 18:35:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 18:35:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742309532625301067804547095805032920711006854420960983424213031545736557901507565967385753905744525312307184848110073900317814085262835106034036295692574279527420784883343568353753770176740831013128514062683061050520000333246009472819095360820238762691040757650173556472645962161315874656314012597048632029758202471278219942319980613115283263966896633004112619875107288983325203407589755866565849136895555051543730118927933521671006571986119912575295796493039058690772233981420801096208784836986439997347667121324015375613753952842636651657582673112871501111894467309298554248022773591703066838648929008701583614685244293921659979256194645929834107392067890251768092891866134511580915500862914916714530431465341236435712779838762645269626765854829354102967295150154510978181610975778433606554875374057161765334128928767401281930279746666549090619571844453833139282266143945420854542688440984831208136178386060087341994295981698625030952445016085199512024935815535352353343219362990667935530561228012359083260533542855106518303492116179874508435740214694618036101761850901416583002331144037295363469688430351727339890756856202522807342175156029945210214516076654182070652738177732352162221083532761807639311506701804551286840380502861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2e308e83d2eb0a512b4930c5c30adad9547f7e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d285ebb62000004030046304402204b6b4010ca3dde3a1c9cfbb3b5707cc777f4ba2f7f09d7d47d1357d9167a89e50220432c5f9666c02fbb47550ea2671da7283f0237093d268999f571bb45062f9208007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d285ebb560000040300483046022100c9a8863c2bfd626229b848ac60a6ed5ecf76254b3a124b61f3d3e61e7b8d6d26022100ca44691fc4474d27c8bf4e101f4b6b3004e29130497bc88c2622770fe41cc487
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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