mail.rideforsoul.com

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:68:cd:b0:2c:1b:1f:bb:4f:55:33:3b:53:79:4e:52:78 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.rideforsoul.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:68:cd:b0:2c:1b:1f:bb:4f:55:33:3b:53:79:4e:52:78
Serial Number (int): 397248829902351341602037185792475743015544
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 31:06:10:66:89:b6:b9:47:42:33:08:4c:95:91:e1:59:c5:89:53:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:37:af:e1:45:9b:ab:95:c1:94:b6:13:aa:3f:79:a1:c1:5d:ab:29
Fingerprint (sha256): f5:1d:a4:ad:ca:06:84:98:a6:de:92:05:99:b1:4f:31:94:05:36:2a:47:01:1b:07:a9:a8:7e:19:2d:5a:59:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.rideforsoul.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.rideforsoul.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.rideforsoul.com
rideforsoul.com
rideforsoul.com.leylaswalk.on-rev.com
www.rideforsoul.com
www.rideforsoul.com.leylaswalk.on-rev.com

Other certificates including the domain name rideforsoul.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mail.rideforsoul.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y5/E7OSWHOWT5WVNwjd
EKKExzotd2vqP0MNCK5jXkBq4Z7ITsirl/VqJWfwS5moU56dJIbwJx5aeOwdpnZP
J/gv5miRj36PJ8tmLrSLKLtQBn+3UcN8HAR24h76O9Vc+m7GPBWJc8o9aelDueqn
9Tv5+sqwIlheBY0VXgaebFJGC07eyGrmY41TgLtRAdwZ5RIEWLkaUOXeptaGXfIk
XhG8sdgzL9nMbUv+1Ln+sFmGKh/etaJ8+SW9cAncy8YDhCKKbaBAkFvODgtDmu0M
mrJ2bHj500sgJsDWJeQCJjdZhaqSUd+eceEOqW/+BeWGlVO7xR7znNhn57UEISLW
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397248829902351341602037185792475743015544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 06:48:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 06:48:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.rideforsoul.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27463979768607695065002222346651796219790231551117762323060772912030293605332160546434079212734614251365691499800290836875185174439692213453290808485051440541806970645535136129658763295617926376320222266535492526227456982075057566135316772606581117251270050610293903667695556637505742595796540028796021946532245229323835768998003758855014678180282752881253848203434172237485812436644150081049484023820273864291564174000311376669771357199239489108085204632150786332652273987432735129234699262455235285455367725338600191857576375329682342993107450898306132730277739063818615880887034260504448037533279495097286633117251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3106106689b6b9474233084c9591e159c589534e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rideforsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rideforsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rideforsoul.com.leylaswalk.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rideforsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rideforsoul.com.leylaswalk.on-rev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e55aeb79d00000403004730450220412463ae54a9586125bae38fd7f632f8137fb5ddea6fbdaaa734b387916c87a0022100e9ea6b29d96921f84af2eaa0f6175b0690be29f069f377455723beac2b6f69c9007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e55aeb844000004030046304402204c174aeefdde392692a1fcd544ffc4063fca45e397c71dd77faf2eb3266e78e3022048f7eb7c21924ef4b98d45ce9ea48f91afd9a91acc53b29130ec7cc1ce261ac7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008373a313886de3bbcf9890e34641abbe3e2fa188ddeec865926423e9a4abc31e559e87bbfa258e2c41d614d30029972f2bb37027c0c645fcf412e452ea05a68d5eb34c44d49d06fa389cce40177e62e69c7bb66c9fbc560aa32282edd4c7b2893e6bff142c9c2372c913754d98e2f9d7eccd8efe682fa10f99f89c16c4b2a4bbd7a70eb774e0795d5ff3cd0efb3c68cef4e1aa72ab68116f74f59ae1efea1cd7f4ae46e935c81aac0929c3db31c099102f8ae8022acb824e7fdfbc9896aca65e956ff6a78e1ddbcdbff78adf0f3389df8bf07d2c12468bba5281b36b950345d1ef8fe4f8f6428ce3a4c2a5a5c8c7c7c376265381dbfeb46c8b343fe8619469d3