salsticio.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6c:85:81:4b:ab:66:be:af:cd:31:2f:59:be:36:fb:f1:2b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=salsticio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6c:85:81:4b:ab:66:be:af:cd:31:2f:59:be:36:fb:f1:2b
Serial Number (int): 385377098018997019505321591074301989876011
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:b0:a9:12:9a:05:3b:18:11:76:31:27:2e:23:5b:25:5c:c0:07:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:45:71:51:31:6d:af:e4:24:22:44:cd:99:51:bd:0a:f9:f9:0b:d5
Fingerprint (sha256): b3:e5:fd:f8:34:b3:74:a7:54:be:9b:85:80:81:77:ab:0f:43:11:57:67:a8:81:13:55:9e:80:45:98:e5:26:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate salsticio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for salsticio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

salsticio.com

Other certificates including the domain name salsticio.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for salsticio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385377098018997019505321591074301989876011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 03:08:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 03:08:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salsticio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769308809811037617151424099361815847058847862588729926976166223967096455835051916360819784243650766038620354792590423795681789885181623912155943205146836410627485149233745935801567696815966736143245706930044549723120512498419220909495578685677860200148610553837848100297108930620816891804884757996823729156775989468069050065359057149728990471776438392648152886454401617274697179293346042299359335038181781312088155119493195471230594036092758988438063905558815065937113579461249462830814522220102923006359597233718549824638903421368467966721016513749900912933738640787272326277386714565855920453198546777906995641193740434529576246164551425629528483518300344158238183676932325588157572779186767896483290651240889794495203846883248520218640847619956777523310442781614321912536546108172436568587332937871235250988049095131714326934361255316572776907777423396370970073485064619254466240142276513266504548174310319872996462328088026371265969447236172206050288327529701919763153238856483906817053004202199612291467872407233658245279276758437616743223663259027077948005598944031578033195456225627451295377584151238300931359879863857385725351159402264123979738668269414298014556244107533764693092617708429628704002847802357340623206228818571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7b0a9129a053b18117631272e235b255cc00780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salsticio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e9cfe73ba00000403004730450220739f591aecb294d69483fd87b620550f8e63d79d4b151ab77266b5e4f34426350221009c4aa53ba6ae27de7de8ab564e172af4b4e02210c6df149f8b021191c8f2d0e000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9cfe74030000040300473045022072ff4bd074cadb98918531819e2eb1d9abaf71c4cc090f18b2b909a94c4b54290221009c7a250da494b43c04f4a82f21e960b348dfce50d1aa71c484bbc0eacec87d9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e1fdf6965cbca259404c400b5b9f715f277b5ca54d18f09a062e1fe8b6ee0a6c4d11fce4483c816c260c10e1a20e564e46259431880f59c709252da3669ee65e57d785f2a7e21e6fd220eab60f9388e7af8acaa09860092ab89886621be96bc8a410e992427d617a3d585589e4f87b67518245ee68a9d37471750ef968ed0014190eb98cff3093cfee0adb73a8526766c4bbde9d93acbfd96707c2d6d4071c35e8af4badb658f25ad2b37cde5527a85e396795f41da3c4792fc724332124a54104816350b74d93d44e2224433f0db8fa89d3ca5c5d5fa18ec798b66ae569cb361751b35979ec9454cfb684a360489877cc607bb730029e694206e31963f3690