soursoptealeaf.com

Issued by R3

About this certificate

This digital certificate with serial number 03:4d:6f:56:2e:f7:48:b6:6f:ca:f3:f1:26:f2:38:4b:30:97 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=soursoptealeaf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:4d:6f:56:2e:f7:48:b6:6f:ca:f3:f1:26:f2:38:4b:30:97
Serial Number (int): 287686591845837662665752856855918785802391
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:7c:2e:16:9f:c0:cf:29:31:05:13:b7:c1:93:2d:8d:ee:d3:cf:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:70:b2:d9:34:92:b9:1a:9b:fd:c4:d8:67:85:74:aa:10:a0:2d:d0
Fingerprint (sha256): 89:97:63:ff:43:6a:f3:61:2a:96:6a:75:10:d4:50:b6:c0:00:ba:2d:74:c2:02:2e:67:08:a2:eb:4b:a1:6a:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate soursoptealeaf.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soursoptealeaf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blockchainvenezuela.org
familypasture.com
farmfinancing.org
keybiscaynerealestate.com
nursinghomescare.com
sgpmx.global
soonerleadershipfund.com
soursoptealeaf.com
subordination.ca
tantricsmurf.com
theultrastate.com
wacosportsmedicine.com
www.blockchainvenezuela.org
www.familypasture.com
www.farmfinancing.org
www.keybiscaynerealestate.com
www.nursinghomescare.com
www.sgpmx.global
www.soonerleadershipfund.com
www.soursoptealeaf.com
www.subordination.ca
www.tantricsmurf.com
www.theultrastate.com
www.wacosportsmedicine.com
www.xn--4db6asbf.com
www.xn--4dbcplby9e.com
www.xn--4dbkun0c.com
xn--4db6asbf.com
xn--4dbcplby9e.com
xn--4dbkun0c.com

Other certificates including the domain name soursoptealeaf.com

(limited to 100 certificates)
soursoptealeaf.com
slt.co.za

Certificate

The complete raw certificate details for soursoptealeaf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85g0eHm4QdU+/ffMSWOm
n6OgmHMNSKU+D4+Vk9FgLxx3ZIYDpqnROxREz66dpyT2Zwy2u84uwNpOPExRxXcX
JVeONSQsN28zC6LT5aRnR1RC7q12JLzLwOUcIdFebJuZS9P7FnCL6D3/Oleoy5A/
otAkA+mct6I5oEpaXOEvrHjCXghG4TEkKQReDZy/wZatzP3dn0ppeKEJ61xLJpRn
l98LEcfJjijDGvoZEIr/0wMFq/GWJjmQ2WSYHG062ES9gKXQQ6HDrLo76A6BCDh9
CLRKi0imp2lQIX2wqYvVqmjajL/znwH8UVVWRrG4s/1ap5Q0wfVPQxtNeKUarDPx
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287686591845837662665752856855918785802391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 04:10:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 04:10:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soursoptealeaf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30750963171500854636944377221400037516632269416106782569473878077048671085097827206278906591286047806168183108204114060634792884635106214730600053084995101851932425553025270166040207644074724211127756917284348582219515242873888805683635792448662028358252258983443513890191548861067122037029807165868391983925730052767057719335771453300017196871491385310416080905240328462416060645070046226412315259653023317702221808845436627571147717372414090608805072683510637977774191124680114688615232362740722938701818467185792064421248266439170992672306615943497709648989775250443545350824558380003419085767709371174961301156261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e7c2e169fc0cf29310513b7c1932d8deed3cf0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (678 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainvenezuela.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familypasture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmfinancing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keybiscaynerealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursinghomescare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgpmx.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soonerleadershipfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soursoptealeaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subordination.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tantricsmurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theultrastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wacosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainvenezuela.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.familypasture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmfinancing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keybiscaynerealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nursinghomescare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgpmx.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soonerleadershipfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soursoptealeaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subordination.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tantricsmurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theultrastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wacosportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4db6asbf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4dbcplby9e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--4dbkun0c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4db6asbf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4dbcplby9e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--4dbkun0c.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f569bfea1000004030047304502201e4aeecf6ae51bf5c14c946d0e3a827946251797b6ba1111be7579be7eaeeee9022100b5c1b3afd7dc06e6bb71fa62e4ac5dd86f3dc18161334199ffe3c5d88a7cede500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f569c06740000040300473045022100880c795868bef315b52c63802ef030cbe2c00906a39ff7e0dec4cc6a464660b302204074052dec3bf536a1bd4518a51aa0fe897b1c6e66c6809d22c662be17a51d44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004fb8190fb7fa950da4c89ac5bf92e85dcbd846ce50480764aaceddba453992ca006a172a3cf9f02a1d2467d2756f08518cd6079ad202253bb0a51536eaa602b7e402d4169a0a21c388f2bdaa8f4776766309915a55d039d69831002f67e2f3265593d817dd89dc88e5ec5b7aef2732cd7ee16bab83162708f5a1a3ef4ff1b1f50d9c025cf8e6c9d71c9dc709569531e4cb411647ef40b400c568fad000451722e4b0ca83e8ae15e859ec1d8249953c4eeec4d0bf8bf1bb742df92e49fe8e7de106625079d20c3f414aa405001e7e96f3d9c32980608b36b112002f01689cc80265d17d4da5c65f4ae965c57174f1c60ea1a417a8ab8c3d38a804de6c826ab252