gusof.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:82:fc:56:8d:b4:4b:c8:b1:0b:36:61:67:96:ac:5b:49 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gusof.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:82:fc:56:8d:b4:4b:c8:b1:0b:36:61:67:96:ac:5b:49
Serial Number (int): 321060381860219556633500558896037033171785
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:1f:ad:15:45:75:45:17:e0:df:30:72:97:96:57:17:f7:34:d4:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:c0:86:9f:4c:8a:59:27:ca:18:72:94:da:08:c8:00:d5:71:e7:83
Fingerprint (sha256): cc:bc:a9:a2:8c:a5:04:68:9c:98:0b:e6:79:c5:fb:65:71:ae:ff:e4:2f:80:55:87:9f:4e:05:b5:89:45:43:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gusof.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gusof.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gusof.com
www.gusof.com

Other certificates including the domain name gusof.com

(limited to 100 certificates)
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
coinslant.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
www.lastmanonpluto.tv
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
coinslant.com
gusof.com
sni230979.cloudflaressl.com
www.lastmanonpluto.tv
gusof.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
glsmantenimiento.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
www.admin-stage.circonomy.co
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
www.sispro.ec
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
infix.bossbeagle1509.dev
cronos.gusof.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
gusof.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
gusof.com
sni230979.cloudflaressl.com
demonstration.signatureapp.de
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
factronica.gusof.com
gusof.com
cronos.gusof.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
gusof.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com
gusof.com
sni230979.cloudflaressl.com
sni230979.cloudflaressl.com

Certificate

The complete raw certificate details for gusof.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA35nX+QCVoiDbLoBCOsJw
g+dBCuGeI9LN1XoNE+bQryC6yozJulitDHUnp03LIufFrT0MrZjG6VA9ERCn7wMv
0be6oRSxmGwXdo+dS13/fm6z8UIhSBpHv/EhNu8v8KOuWeC0YkZQwGo2Q47ln6Kf
YNZ7kViq5pU1XC83bMgSi+ExXE7fuoi4A7iCyM9yBqObv3/SZIxC729kdraAE+JD
7eckxkOIRM1FfBMFT5r+oDB3cxJEh8Qj2ZSImI2YCd9akbf6iPjPsUgL4VxeZ0TT
0+UeOxxfvB5Lut5XXi2xf4vLzbYplGdws9eLm6/yg+5Iw54ED1OFBqQ+WeDi53TH
DwdIJu9vwmlmrfXJpna7WYKz35uvORg6oqIEU9YQO75/DUtGxVBv8dfPSZMYg4Jx
vXEgCy9CgIxzlH4XamiW8sFQR9Tsskm72y/hiomnqZJq1mA7jCn8dOMXeUx2N6FI
PlTj3k/wv7TQYrIEN7Mw3PESjd+lRvQFUidRoB8eeBSqvbHWQrnhzi9KZCMx2kXI
3nrFRvU+zZV0ENc76aD6xfg0nPRRwvGcPK4vAnH6bLycDLY10fKKQRwh+e/ba5qt
uJ0Wzu4oj49AhI/FrI2hmBYX8HvFuzSgo1HCKBauiAOPnMkLz8pp6P5+Im59Txx6
2THx/UgKKwvcG0pM7+87Jx0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321060381860219556633500558896037033171785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 12:18:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-04 12:18:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gusof.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912212296334420367322677520802290800245175284618212135674025589428511294012149371010749085634010517573471502625044683177892867602723777679594857579666642665097751197499622331557088533896033774257690000540564015979411355766639330731084984564959430356943029046542863856109887757034160333556793864496480718298577341112791260371312030079930975430932741900284128901206346358145671255282943778952375735944813711247037466072017130913095570482275731988034060570142415934350995680153815020970927863402240096248345800019371894647012746249343202640386155288081564449360224080797858956194617491921186781795961201970027944704521189724992055322104792669133037447751728749557015215445497609658912320330979043890552622826882827090507233828045028144923363495908625636163756171879506156500053093744403546087981814897126838639414719036615842102994297840292098107603585367016890881100072704552753365783388938978406776002183807743546890568158786657505726244811884677948749740273487937293259449489041285332965054024503833900104230787938555076274290434544864917957235336763136426241723131580986050820968463889321557005332279773190028308044827118627895660221258048990716631182811093590084778538001439142657431794901152968864796999137195343317364181175052061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							871fad1545754517e0df307297965717f734d42a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gusof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gusof.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170afff606f000004030047304502205e27af0af4260a6382bb9f3f7bbf140cd897e1ebb2973dcea5b5badd3eba3977022100facd4256cee2c32baa2d475ab9544eb947e87aae83cb034210d1c550d007ec16007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170afff606200000403004730450221009910503e4586cd9aff0dc317388f551d15585ab06abbe9103c9630d8f710c16e02205d507ef748ee6ca6febeb453b09ce7feef43b79bd00d1363d6cca35f0950ed9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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