sutra.fit

Issued by R3

About this certificate

This digital certificate with serial number 03:97:8f:29:75:ab:4f:99:3c:22:93:3c:5e:39:01:d7:db:f7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sutra.fit

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:8f:29:75:ab:4f:99:3c:22:93:3c:5e:39:01:d7:db:f7
Serial Number (int): 312909790074525464803189994747887930039287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:08:90:79:f6:7a:83:73:01:65:33:c3:8e:20:76:ee:bc:7c:7d:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:23:d4:82:bc:50:ce:58:db:e9:89:49:5b:ee:19:73:e3:27:97:9f
Fingerprint (sha256): d8:e9:8f:7f:b0:d1:92:04:2e:bf:41:f2:95:d6:59:ad:c8:89:5b:04:55:5e:de:9c:8d:de:28:14:d4:59:6b:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sutra.fit

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sutra.fit

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sutra.fit

Other certificates including the domain name sutra.fit

(limited to 100 certificates)
test.app.kameo.co
sutra.fit
www.sutra.fit
widgets.sutra.fit
www.iphone-news.it
app.getshuffleboard.com
sennder.com
www.sutra.fit
events.rinno.la
sutra.fit
sutra.fit
roserockdental.com
spinnstrong.sutra.fit
chesspeak.com
swiftdates.com
www.sutra.fit
sutra.fit
link.bnm.sch.id
chesspeak.com
hatipa.com
sutra.fit
foodsolutionsth.com
plans.ausper.gold
qa-ps5.fubo.tv
www.sutra.fit
www.fezrestia.link
www.fezrestia.link
sutra.fit
www.itnry.com
cleanmycrate.com
www.sutra.fit
sutra.fit
cloudprodigy.in
classes.sutra.fit
www.reflexstudios.ca
bluestarnova.com
sutra.fit
blabla.cam
intoxical.app
nft.athenas-capital.com
www.omishaan.com
widgets.sutra.fit
sutra.fit

Certificate

The complete raw certificate details for sutra.fit in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwSgoUsvEhnmsVCYoVyW
0A0Cziptb2Tondpmh+vqJfTQXooA5klxyDWFmv1VzgCEiveqNeEVjtVymgUWqnwp
UBVAkH3metRgWTPxLl9KOxSXDQJoUrZvjBxIpoV0v0nsd3spNmIbGJJHFvdDr5K6
kHue29MNmmFlQEWsqGzZ2EDkbnoGHhhgNTXqF6LNHp6+Qn9qI+ivHKSevLRs5jcU
NWkHSX/7r54NasRWyLTKIjO+1gIFFv23r62gtObSGs4qOLiopOnCZGUuq2f3Dkg2
Ug33GPa4ZUi2iA9M2sYSuJTTYWR5avZ3NX+ofepVu5uVrYfwg912gTrpwInUFUoT
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312909790074525464803189994747887930039287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 21:35:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 21:35:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sutra.fit'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23103891694927052602462422371940065683416766709794368945964744223454002313958948623407678561516723017853821286624842402500362789449353850883623881821204737477137132885514717730490986164642336673640327697851483914130941376352810168687113435319970522947955072355348082380531834227080597149643685846875769879091503343101406048318442162702295391497869980374014893255943073957320821588481597699490574938155392599449750070753582483879230443321809489658940598774828521614498486655497442182345082653675724064928686745226555996311943576733755616724118125598187423459663603840878041286164342227463702842652633559080946847322979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe089079f67a8373016533c38e2076eebc7c7d9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sutra.fit'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e15e80dad000004030046304402203f72d9d0b085c2bdb0fbd8f54e37ac6f0049b7ee168df3887b5f9f1ebf6b29730220502cffedf9e00a0d05a206b817943822bfe69c64bd2be899243f0225c97471eb007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e15e80dbf0000040300473045022100d2aa85ed6b536fac321d0dee7073890b99ac0f7d9bbaa9fd722b841b1f4bd1c5022067acf0cad46dbcdcca8ce789a1c978dceecb741b771789de25189807bdd86e74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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