www.soffini.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3d:fc:29:36:3e:9d:9c:77:3e:91:15:c0:44:6b:f0:08:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.soffini.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:fc:29:36:3e:9d:9c:77:3e:91:15:c0:44:6b:f0:08:6e
Serial Number (int): 369541547548538274560826145142468877748334
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ac:6d:8a:28:a6:10:a9:8a:43:2d:90:4a:db:27:db:05:de:5c:2a:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:0f:35:a4:3c:1c:4b:6a:b4:cb:18:3d:80:42:41:0a:e3:d4:e7:58
Fingerprint (sha256): c6:a2:95:34:32:c1:58:e3:27:c9:5c:ac:5b:4e:dc:1c:42:d1:90:af:6a:38:02:a9:d1:d5:0c:c0:48:61:2c:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.soffini.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.soffini.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.soffini.com

Other certificates including the domain name soffini.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.soffini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369541547548538274560826145142468877748334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 23:56:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 23:56:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.soffini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755809553089601870793011483844519342254713407696983085880780687734748258520780649629343511482648470761543371154057138455144212493678748885033699933110772462008330269318761340877675710362620064062243015957844672506738194071375270666390461745957522436952845930511962293729828734292760092229011715602509427150900001810996775783819866675453127164480977271809570778847921251730448457973689841189960171241531762550531687855664271349436364579048134984354372668444931469953153739385590830616690715658136140012447726742750359020412798397232077342017408117538411754189236763359906789049462960481750659505482069368156115603297068440542645802678550194052984322998005592308838242491989217496214630267230947833862306613484029597744146575155744440356570925227300576162339916834583960364569157221391972980615321549085521738752829227874306002699305125798512115766865758156433261889784672690564312655996555330999240326502067707619210058990126851890123605454214327260793712465544009887231909024773702958790521438453408395525353459388409929209681922492149203142411506738321641205964604623396637075145006203444237820777078888250979406653190130699532584571298749688030385995312345835919435247505973638103523684656295277701593994529166221169091340680573093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac6d8a28a610a98a432d904adb27db05de5c2a9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soffini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7fab5a58000004030046304402206576f803a2a183d4f706cf8c0d4166d203a6613a3c05aab82b08dee2d2c79692022025c881a72ff6aeaef65b76c41ba1c5804acef2e125bb696f064cb7e68b4befc5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7fab5c27000004030047304502207b86449e073a18a499d8f323793f0e7a49d8a64883e7b08f2f182152e98a8fd0022100eeacab5a28b09bd8e11a23b36de609ea8b1a7d8c68304f55495af960819a3c42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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