sassofoni.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:27:26:3d:86:c6:6a:d1:82:9e:5f:54:2d:ac:09:f3:b6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sassofoni.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:27:26:3d:86:c6:6a:d1:82:9e:5f:54:2d:ac:09:f3:b6
Serial Number (int): 280444708789874496703442715312479701431222
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:2e:c6:a8:43:69:b6:06:12:95:6d:6c:05:18:d1:34:a3:3e:17:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:33:db:a2:23:61:67:fd:b4:e9:d2:f4:3e:ce:e1:3f:c4:77:d6:1c
Fingerprint (sha256): f4:6c:5c:02:07:cb:61:a4:9f:ff:71:d8:01:27:54:bd:a1:0a:17:9e:ca:3e:75:af:fc:52:a2:e8:d3:66:7e:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sassofoni.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sassofoni.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sassofoni.com

Other certificates including the domain name sassofoni.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sassofoni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwaX4f2ai1m1ZBwaJxQeH
pf8UqOiC7i1PPkbvVys7wogrwqOgHxPGocNa9YrKTlwpxXzlXuTT6FATtHJYRM05
eRsYNwF2sltZS5/L+KoqYR7KX8Nlrr3l8Sh+ugrg7B4bvs6w5Co/gSABun/EzaH9
KEI9TPpAbYkWTCWAvYmWJkZIz9SzDTGflcpb68DyU9RhsUFMmRT4wi6yWja8Br5b
jBuK4utI7/nDtwcwfmhsfIVK4jU2CoEZKdudnzzPIHVd6dYGbP4Bsm2qdrK/PFuQ
EjJGG96xGFnwMIQ1ojQwPD44gPyDEvJ26El0j/M8wrjPoMH34t3KDVdtmd/13Js3
jgi/P1ADQqkj6AkxfM1f04cICw/KJQuN6DZbr4F5rOzWLD8zSPxTpCvg2lx0vvam
RGZP++qy/fv/4tUiWqegan8DbPnq8I9NMU1w9Q/77uE7Kpba4hrSfZG4vbF4AehB
8iNNcxjfjcFi7gugIJvEgKr/72K1BP523K6SUtfMntZxzdQN1JMC+pcSe4KNPk2S
/w9mk/uWfmaZzf6gPND/4ru0OloggTlnO/hgEPP6aA4X3xjt2cMRayi2WNslfkPR
eF4ChGH+jfRjcOJUvgxL8EO2QA6U1bOCeFqJCvoWa4+wSzFoJGA9y+04iEbssQ4l
mXSrjlXA9y3OWBOsrcW20NUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280444708789874496703442715312479701431222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 14:10:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 14:10:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sassofoni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790016232304353985386350276966949139815054936128961151421454063033487240361558496098495795590676836469701202681205087439602831984203977795661816361700028984400696652725852376155392301101772171023710247091655922058092241026461167368791283796717650036242562501055791178951675079545201523946874386234788953788078110111969886851221142344067991344452511250691527708775354799792427520186312220771347124403662528559597508278719214913113635771395727143554400642758284824174925354508068160381462967530622736185527919005902346736242162021584632687621028234802134756014897122140663996988434853249116446904162394074528877258873730438471409197352545866468241549643041259239720249019085431248362979888834797822972981471009041629473544500621007552658673306911869980409032222052107648314980763629229084677269669846240102389627750074635304618406442177254905567559628686498176353411362816666810706534025078994098050127198376048647306411631630436759841463545919953916385422686985489199281820586178145414890895438834729677835819831824834009556793600090922642878488874766732907909259126874675647279680038206543734117362815649118964649987450019660600784311018927725934894453171715919030043270428156139376281994257340175200088759651194708082107945770733781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef2ec6a84369b60612956d6c0518d134a33e172c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassofoni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2ed4f9d30000040300473045022051533e741a9bfa3cffc4275ae8a52d81f43c06c63e11435888254dda823f6d74022100888064196127c622979b64abe9da6f795bb47353139b9eb9bc6b2279a814d2b200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c2ed4f9c20000040300463044022013a405fefb19a7bafa70848479a494dd5b7b01a4289b72ab7f9578aa556820f4022035454e040ee49dbed57700749299587fe32baddf771270422b267f2ee432265f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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