pellets.sodra.com

Issued by R3

About this certificate

This digital certificate with serial number 04:59:8b:ba:98:b6:d3:b4:31:ad:10:82:6f:85:0f:42:38:29 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pellets.sodra.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:8b:ba:98:b6:d3:b4:31:ad:10:82:6f:85:0f:42:38:29
Serial Number (int): 378920005939045605129966756271247016998953
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0a:0d:27:fa:27:c4:57:dd:43:e2:6b:69:f7:95:2b:86:2d:9b:9a:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:55:a9:38:96:d1:e0:fa:07:03:0b:64:ec:a8:3e:0e:a1:72:83:fa
Fingerprint (sha256): 96:68:ee:c1:18:33:d8:f9:45:8a:82:14:66:26:57:4a:77:6f:63:57:02:88:81:b5:36:86:61:56:10:d8:e0:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pellets.sodra.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pellets.sodra.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pellets.sodra.com
sodrapellets.se
www.sodrapellets.se

Other certificates including the domain name sodra.com

(limited to 100 certificates)
webmail.sodra.com
energiprodukter.sodra.com
pptest.sodra.com
ehub.sodra.com
latvia.sodra.com
lrf.sodra.com
support.sodra.com
VPN.Sodra.com
oncemore.sodra.com
*.sodra.com
redirect.sodra.com
latvia.sodra.com
guider.sodra.com
ucexternal.sodra.com
energiprodukter.sodra.com
latvia.sodra.com
karriar.sodra.com
psol.sodra.com
skog.sodra.com
sip.sodra.com
*.og.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
*.og-test.sodra.com
karriar.sodra.com
energiprodukter.sodra.com
*.og.sodra.com
medlem.sodra.com
el.sodra.com
oncemore.sodra.com
servicedesk.ecm.software
*.sodra.com
energiprodukter.sodra.com
career.sodra.com
webmail.sodra.com
career.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
*.sodra.com
support.sodra.com
servicedesk.ecm.software
latvia.sodra.com
support.sodra.com
pellets.sodra.com
ucexternal.sodra.com
b2bwood.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
webmail.sodra.com
entreprenor.sodra.com
pellets.sodra.com
karriar.sodra.com
lc.sodra.com
latvia.sodra.com
PULPSERVICES.SODRA.COM
*.og-test.sodra.com
wood1.sodra.com
energiprodukter.sodra.com
oncemore.sodra.com
ehubtest.sodra.com
*.og-test.sodra.com
energiprodukter.sodra.com
career.sodra.com
support.sodra.com
sip.sodra.com
*.sodra.com
latvia.sodra.com
pulpit.sodra.com
workplace.sodra.com
energiprodukter.sodra.com
vpn.sodra.com
energiprodukter.sodra.com
energiprodukter.sodra.com

Certificate

The complete raw certificate details for pellets.sodra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAnTW/2Cr3Ux25SclxVbSm
yUHi11DQnio1i8ZEvzxACeWMD3igtwRiJi40Vv8bWOZpioBaU59ZdDQ9IgYhVVXx
vic1tS9Yc4RTKQJ35IP5x38jGQpiwc7Y+RT1ADDGlgdpFUc9tg1cD9k0EyKk5LH0
X/StBih+qefX2fhTvgJM6CVEoFbZupfvUohEZF8pOrdKck1Meks/EZ0JM8ZV653S
E7i0vDPSNXouYMNPWCv+v8CKhHwbrH6A81W4ZL/SGoiGEffSpbDSI8UHVmt+3a9z
Jikzazs7wf1G3ewAULR6C9u0IQDvJ/evzvGxRLfKEOinc4SWc+c4vxifprolIGAr
ewQLhR0A+dUXDuGVAiIhXkiX9Yx6xxRDeBCBE+9P/NMYxBGVi/sHE1QWWD08x9wN
ENnh/GjJXk6yAFd1c6OIjr2x4ebaRP2c79zn05VtPsUO5BYOpWCIv/T6fqMWjmL0
eaPven3dv1JJ3zK6b1hWQ15OJAmsqJnvo/sSrCQYnSofAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378920005939045605129966756271247016998953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 07:01:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 07:01:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pellets.sodra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3567687178911387279907779071569375809013674440994476121611053187346230910349794155019982742897408046608908238781767386704611889062352216411895238881741900658091337009852653004581163748162158448144060968474951000775326958909060886407256320935960951806852360043753186127179293039697420244496556200375475941451338141227736164645303584474585816932365376102575225504528761435968913596287874730337805731348836707870330714263161011035988761328990881225767958357526941930194438948073129807420803311596182927385382671994342540554194640629733855513176204593681383458425847592855010748069402438742725428765036178230547411804799561550771778787305073724116519543372284150397498171907146148306482637860764552116157126822290910252494267417358169121647101042212798277880915413469850024213769747741973301785773517247635743748755308734320060072773770427924620576258737487905881331124290045729886824792705482701186462916852679166868167864429087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a0d27fa27c457dd43e26b69f7952b862d9b9a45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pellets.sodra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodrapellets.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sodrapellets.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e6007ccc3000004030047304502202ffd045fd777711afa698ee8310f09fee070337e25fb3d1fcaa45ebf44da8d47022100dc5dad7a42dbd95ee41cd82cc9a1e1c0d1342c56706957162c8870ce7be29cd9007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6007ccc9000004030046304402207b88970180efc145b46e06a569ca95cf996407a2233521a63e668d6e55c0002c022050af7607bb83a1c24ff1f5b87bf0e16f4f82f2a2a276160ede88955f9c63ab27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b184887bd0644be7da77a14e249ef1fac72239e8ebc852ac5f35fdc8663a35da816f685c2060a4637f0e4a35b9472f1cb886f05fdbe24cbb2fd6df0889ba3ce271916c784835ed4fc1ec24df229ed911ed4eea4b0116d3d51fd5e3fdbd9616fcb317c4b258ada4b6b8cdf94731f8d3704ca6f05a7d351e930f3ad355f141bcb7409085be9c1f787574907571b6c31ff2097eebb5353b4f3a8b6fa46dd4280363f17fe1612f2a23151f030e8499a30465716084e07952d8fe76e3ce745819b8a25cb2383c81a34c67db98476dbe9208b4080d1a969c498c223fb9c2ce7143fa9f2f67513eefe52315befe91731c903a0a13c96483c7424371df2cd5e3a1c724c3