sophanseng.info

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:0a:74:a0:1f:e2:f4:aa:64:57:57:25:0a:49:08:1c:90 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sophanseng.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:0a:74:a0:1f:e2:f4:aa:64:57:57:25:0a:49:08:1c:90
Serial Number (int): 331789205582020290092506532141102516411536
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:bf:07:df:dc:f7:ce:4e:29:09:da:9a:4c:82:a9:da:38:94:55:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:94:24:85:10:d7:04:e3:2e:2d:a0:0f:e3:d6:0b:1c:a6:c2:ba:6c
Fingerprint (sha256): 80:ce:60:6d:aa:fe:be:6b:67:36:5b:cb:ea:06:e1:d5:e6:c3:3d:8a:f6:76:8c:fd:c3:d8:4a:30:7f:f8:93:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sophanseng.info

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sophanseng.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

angkorwonder.com
angkorwonder.ghosananda.org
autodiscover.angkorwonder.com
autodiscover.sophanseng.info
autodiscover.vimuttimagga.info
mail.angkorwonder.com
mail.sophanseng.info
mail.vimuttimagga.info
sophanseng.ghosananda.org
sophanseng.info
vimuttimagga.ghosananda.org
vimuttimagga.info
webdisk.angkorwonder.com
webdisk.sophanseng.info
webdisk.vimuttimagga.info
www.angkorwonder.com
www.angkorwonder.ghosananda.org
www.sophanseng.ghosananda.org
www.sophanseng.info
www.vimuttimagga.ghosananda.org
www.vimuttimagga.info

Other certificates including the domain name sophanseng.info

(limited to 100 certificates)
sophanseng.info
cambodianyouth.org
www.online.sophanseng.info
blog.sophanseng.info
*.sophanseng.info
*.sophanseng.info
blog.sophanseng.info
sni.cloudflaressl.com
www.sophanseng.ghosananda.org
sni.cloudflaressl.com
sni.cloudflaressl.com
blog.sophanseng.info
blog.sophanseng.info
cambodianinterpreter.org
sophanseng.info
ghosananda.org
blog.sophanseng.info
blog.sophanseng.info
*.sophanseng.info
sophanseng.info
sophanseng.info
sophanseng.info
sophanseng.info
sophanseng.info
cambodianview.com
kampucheakrom.ca
blog.sophanseng.info
sophanseng.info
*.sophanseng.info
sophanseng.info
sophanseng.info
*.sophanseng.info
ghosananda.org
sni.cloudflaressl.com
sni.cloudflaressl.com
blog.sophanseng.info
blog.sophanseng.info
*.sophanseng.info
sni.cloudflaressl.com

Certificate

The complete raw certificate details for sophanseng.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK3Ij9V5JpSsn+B0AdOc
PaHlZfSSToQGxu3Z0ZXEH2Je0XR/3unCYQwEy5xTgMIU/kpHl1KF8ZMXAaY7nN8u
RRfhjl2k4v0zQIt2v6prHP6ofxO5lYIlQ0+LzU4D+zqF6zV8OkHXRF95tT5e6x4B
k7wND6UX/MVIphYEx1nxCajoHqnPyacbcc6kxbbAp0yiSNrlWwuzp9/JWFe4XoWT
UMxU9Ci9Y/yApXVxcu3OnZTnExeSx/Bb7+RFT2HwMXb8+GwPN8wt8ridB09zZZbh
mE9FTZP3pszfc3cH5CYZHygsInn5YqWnVdk/PxLn0rIXrSOkufx7VslCGCg3sfrM
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331789205582020290092506532141102516411536
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-10 05:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-08 05:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sophanseng.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23818497144142392366930906981277430427166110341230795848171154923226918307013837336914817368097904185543291805224535062328126171532453967822486958389875006831393938006377082541190088032736744405918654142533437290825582767571891691995303758158269176663901906777526910244261175353712026980538402978087965754539505696859077028123375316806593426214046295238013165850958845250001395469399400772447598625607387005138613858748158918851322531378273443967130325924402006219880302504591508442911356905914348214115005205928778595749885174898990589612652695859877077237948786583363705256868387625137964509569989257770146872347769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6bf07dfdcf7ce4e2909da9a4c82a9da38945576
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkorwonder.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vimuttimagga.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vimuttimagga.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophanseng.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimuttimagga.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimuttimagga.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.vimuttimagga.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angkorwonder.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sophanseng.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vimuttimagga.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vimuttimagga.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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