soffini.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:36:b2:43:0c:4a:de:5a:a0:e7:a1:22:fd:ca:29:0c:5d:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=soffini.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:36:b2:43:0c:4a:de:5a:a0:e7:a1:22:fd:ca:29:0c:5d:c0
Serial Number (int): 367061342257231514977576972264606152809920
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:3c:27:31:93:9a:c9:9e:28:21:9f:6d:16:72:4f:15:6b:52:25:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6e:d9:e0:93:cf:18:26:59:ea:6e:8b:cd:b5:b2:73:1f:95:c8:e5:b1
Fingerprint (sha256): 9f:3a:98:02:80:3a:b7:be:08:6f:e3:40:8d:8e:d2:33:95:d4:88:53:e4:09:09:7d:f9:e4:21:cc:ba:f4:e9:98

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate soffini.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soffini.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soffini.com

Other certificates including the domain name soffini.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for soffini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367061342257231514977576972264606152809920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 16:37:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 16:37:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soffini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717981014970382692874408894397756179281662795142804221884011549888112776027817158462564433058441105137830928792293946760296765869221491618270730480177681045219678800350524792628556151130358824678676064236273839968254666578686353505374425806579625895092143710727904504589166343086483880452203779291456769312599322921830211648264923719335757431856782095955417272035555534416890333343984755014633633385365568782525521808123343814548247146475160602886851688211341225312467369280541591156078780971578644929123918651534370138973105119478604331235514266564354353768561251134335235562735883792388400601775767284417101162494167267021011936811747144602060147691168441415905832827497520642767201665527555168209364971027094394351226934908281588191514949082723819306129134832002786063092357890162619319994091208473758901353449217968819062886609364362916682818652811911212457051403673349836141239259229287041725872427070162786396325814270250056859064110869176772678637244217911067380213740554107126525489372223593603982507407763214159924275814144701909515498738484807606947252845170125328518498753281053347139366051573577489206108398348082459919841592103168050211583143815125640698361183510335599496337794838874305380801487955247211480901317687523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							693c2731939ac99e28219f6d16724f156b5225d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soffini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed1fd59660000040300483046022100b34404eb5ceff192535fbaebe1c0f5565857ec698f7ef61d460e4ff43902048f022100f1434dcf49b0b4a7defb8bf4f53018ca07ddecb268755b2db42d4bdbb225cfa40076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed1fd59ed00000403004730450220615f056edb60d433f7e59694d276c0d524930a556bd087bdc7880426a24d388202210097a6cd9bfdaa7d9e83b7af05069227d9cc0c6f0aab82c639007808aca306e881
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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