salme.com

Issued by R3

About this certificate

This digital certificate with serial number 04:af:d7:88:3d:49:0f:87:d6:c9:14:74:26:89:fc:28:b7:82 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=salme.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:af:d7:88:3d:49:0f:87:d6:c9:14:74:26:89:fc:28:b7:82
Serial Number (int): 408285049352687183522539810370503462926210
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a0:9b:7e:95:c6:db:d2:cb:03:a9:76:6a:52:6d:57:f6:58:4e:d3:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:46:b3:28:4b:ee:f4:69:1b:d7:59:b1:93:ca:d9:dd:fa:7c:55:d7
Fingerprint (sha256): 9c:2a:00:e3:06:b7:f0:be:f1:0b:ae:4c:91:0e:e9:29:27:56:8a:7b:01:cb:fa:d3:d7:37:db:14:88:d4:be:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate salme.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for salme.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

salme.com

Other certificates including the domain name salme.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for salme.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408285049352687183522539810370503462926210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 14:36:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 14:36:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salme.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748329359583256737091535086203282447868191388424803976680874190528489807213550989858580858671441418172213467587633219897620022731846355372076416323384351072369107631054612387003974938989212070471751411878768732084822232098299039008970135532121272050816164986293352285246898074696354046013484746326495605346137403810123141595865192044908277391916829921816315101823356465880794130340437620945207975434089451417451046581491281276962203934964721263646974822285587204843293705935982506849581833366274919572790382124862360618917756097753503813688703096668666872918910053944612540749719691728582425447218737603829179447567578119263045565461881221563640739434063811013600534517839619500837071198171673388830510643439458926081660499417725229792874549505570789599023872103525974479791180950488296518578252805054828950183187114749557087910056059122368906326958222079628919079666327593754496927163210818847010673086734944707200930111526708405637067937318622513128581834116181460596660554046308914128637133684619281533651932908420189600747443700680452081616778188924892685016194681546179676164937125126821053441912069506995183051376661061941588835866338213693057218417103967060447907044133322841134569564283633533661584254516928062569742664014183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a09b7e95c6dbd2cb03a9766a526d57f6584ed375
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ecdcd52bf0000040300473045022100ecc6e5d9f4261156890f637da6af5cb2364961e6ba03f53271e7ace4cd7d13ae0220488a0edd0e560e736e2b6c91b08261a1151fba52796d1043f6703ed1b322e2d300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ecdcd52bc0000040300463044022053769ced9fe2ee03182a871e0dc965aa4104a05afff9121a5d614ef28110d5c702203ce548af5d8b2c4f3984a6f3d5536d0fd21f3868dc83f5323d27437c0b8b23c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007537ca43586732ab8b1016671ea576e0d625e8c3dec3e4e87371121cecd3d8610feb53c45f02f18a3aa2f9867ad31aef98b6fcc1d4f38738252562df5d69c9db474475d40befc35ab51e991b530210ecb099f0e813685a3e215f5749df2b9e33e9c8dec90e40973a010146a6aec12db5c4fb4a384367e9fa0d6aba9c76c51e809ca04788147f6280d2348c2098d2126d3865d2862c7f7fb2ea4b50fddc5b9e42105a3d168d591fc355f6a13ffdaa57101305ddbe234353af35cdafd988a390b963e8e77b9ee27176bfd4a7d203bcb750512e6d7010dc90b6624437cf40bf80187ff0b3afdeef1c05709d5428d8c2ed1bb88837b94cf2743407b1546c2c019d39