sassofoni.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:d6:80:a2:15:bf:6a:ed:e2:de:61:4e:b1:d8:bd:8d:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sassofoni.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:d6:80:a2:15:bf:6a:ed:e2:de:61:4e:b1:d8:bd:8d:3d
Serial Number (int): 266045651257822192530402195622618378112317
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:8f:1f:5c:52:b4:40:6e:78:1d:d9:0b:0d:b7:36:98:c1:4c:7e:ca
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c1:74:c4:27:95:fb:56:e3:a3:ca:30:25:f1:0c:d3:16:27:77:19:56
Fingerprint (sha256): ac:bb:44:aa:20:68:5e:49:9a:34:f3:8f:91:cb:fb:d0:c3:c1:56:a1:e6:84:88:1e:fe:74:e9:c9:2e:9c:d1:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sassofoni.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sassofoni.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sassofoni.com

Other certificates including the domain name sassofoni.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sassofoni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7tK+GRByGr9LMIVi/dh7
NH7aZErLPlVaKpVfirxWE8f1Mn/G7hR/2m4n/oBHrPbEC4SFGjsnnjRz4w3flpIw
IUrgrFFeDEhM3kUirL2qmzgoqNoSyQBKPfY6rtHeCnlHfp0M09Fmo4O406UggXn1
qaV9aO65ztvtG+3JUeTfDAnK8WDRKe1dRiZGPhpJrGzufzrBpNqnYLceNhdgZkGU
UJnATJxaSYMWWFleYpTZlVwHbCPV2tNxSx0xCaRBD9T3q2W1fIj5bIQO6ixZ2+oE
ScYl+qtOVtQ2yLgzg95ic/BSZ0CZbvZ4YjYrTSCydmr+ikqgap/B85eEWw6inREd
MLfWau3QcFhaSutlzkHwOWuL+T167w1OxsHyuZ2G7njxd2zCtqrPAOetFOvWRRGF
bp3WNVTQGcvommP3VrFeig9LHZrwHrnG1Rgo3mVEftOTXHmLUbERbOVTtF8+36Km
1y5EB2uWFn3UulTfRdpLHab60Bo8cIimZZylVz4yY8YqX4XbD/8vFieBghfsUg1n
QOtN1KH5fLUfl+HHBV2QWhk6a4Ml3Mmwd+EkYbHsNp3jelmRCh2Tg5TUOX0lyKFq
uOoEnT3pavRc5xOEIgzj5nZc1qc7wgCtpfXoqFR6pIFhOn4Z5Ad0x+IG0CRktIal
ML8fxg9OXNlvZYzFzw14Fl8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266045651257822192530402195622618378112317
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 08:04:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 08:04:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sassofoni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 974313704889476561714556137295102416908213978681825406153695333701059777338276807660066936135773680408816786282284144397588611519270215980745004255016530368110570831030677875315078974979269195465024549764376290340909050642211451196571905220801595913351779834223391586144139836433042580096011209744099259894930605409417913642748720397621408109305742451283050482937245652418314133774581342217629628293865606172910318274622048928176626445157654304332077899531385976328948470618270568076449723360207460336116206467683067233367639714608035041797579343906494336372048372518452311193475109824255882605327948378344754770097112948287701166330095489331080295213798223741891181280455548827568361411881852770088127570236643873171177377135131146751922823295518553198391618234509189803204482966533931031100139645110590625699769293385026597037066591558889428463288847369380808283910191386933211481505304116688668716619813785519379289192224706467240074663919730047321377721361848328316973569713346203493044094500173170456362560216606640701418705215521619882156413249903430247133401167521007595801356066354112677227729400767434501607717681964205225762629187981223099056638949697745467706028526643147309609568388962423403766542676607064972974529975903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d88f1f5c52b4406e781dd90b0db73698c14c7eca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassofoni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aee3c59fe0000040300483046022100b2e1fe65d880e206074b68d81927052a7fa432cd0141457d6d5225f89796899e022100ff4e19f3cfe8cdc827bb1c037ee92f810aafcfe84f39965154323aabbb2293ee00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aee3c5bf3000004030047304502204f1aeb5e32f88e284077ee455e745156f4c99f83fc4b53a32d76271e11b97e9302210099492801bcc60318078e0302b47db2fe19ea7d00815d564f328d4c186ad7652f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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