soppressata.com

Issued by R3

About this certificate

This digital certificate with serial number 04:45:14:9f:03:a2:0e:a1:9c:be:a3:d5:5c:8f:61:e9:a1:9b was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=soppressata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:45:14:9f:03:a2:0e:a1:9c:be:a3:d5:5c:8f:61:e9:a1:9b
Serial Number (int): 371956037253388665226185607306738338996635
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8a:8d:7c:d7:99:5e:61:06:39:02:62:54:f3:a1:5b:0f:86:f8:a5:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:dd:05:36:68:2c:24:c8:cd:06:10:4d:dd:0b:37:1d:d8:80:77:a1
Fingerprint (sha256): b3:7c:49:26:46:79:43:4a:89:81:1c:ee:3a:e6:0b:61:fc:d4:da:32:40:f6:d9:e1:bf:80:47:2f:cb:b5:66:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate soppressata.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soppressata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soppressata.com

Other certificates including the domain name soppressata.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for soppressata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371956037253388665226185607306738338996635
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 19:09:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 19:09:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soppressata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646143765055604843651750236583158826927154752213513121417248603901092906778792290503802971538436129931881827901386773469610322023240276137173764731296305927791634485325506429538924723461497123158854647146712112598043547739696655335812018931181170673227026765683519090340457517712439950554134883907139652127912428782599044253500170089172464387896822734379884870284741032264922829760119468600075539624873980231130146285396768496653454252276888932313548260495980454118625043304949392862681571918125877271500480949730667677104482159177521510503100014949529044896930515416204618583646994124817409073496472927931488356850016340223984956860422995443742986812329238065764105028799069885308799128665142688909405863928438149981215896922936270919718013624822141026873129141717352618716285583371694540188300134600600279618265777265710424867916385436730140235782023333599585835557991839004155490289986465686902101676866301104704734189862514224332479583612784405600890007006089975481787634273424785301691991592597432690619664025988639074240330965600838977188724664529160223512866537564497474842679338267549515693455490391005449270300757334564343643587856283314328853256932099278669679361671152932698876746655642073800226654844353477714970364903549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a8d7cd7995e610639026254f3a15b0f86f8a5c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soppressata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f11ba06640000040300473045022059e8f0fc347894c104b474384248f4032782fd80fe2c90dadfcb96260eada4fb022100a894c836dd0d4ac9a51de724537bf189ac24d735cd671793d1f8b5a1d363c71d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f11ba065e0000040300483046022100d61df93679ad7bd493a264eeb5ae2371a1618c2cd613d1a540db54bfa5ae013c02210085dbf53f7e8097f8fc811cf6717d88f9f23c5ca8be37ae048e3bfc6c64c2ba24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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