sassofoni.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:43:65:47:6b:26:24:a3:36:e6:86:36:25:a0:b7:9c:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sassofoni.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:43:65:47:6b:26:24:a3:36:e6:86:36:25:a0:b7:9c:ab
Serial Number (int): 332545456627997480155548101487574778354859
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2d:c8:f6:1f:72:7a:07:8c:66:49:f9:ec:92:8f:ad:3f:c4:73:ee:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:cc:dd:52:ba:3a:92:f0:0b:26:8a:04:f9:af:d2:b8:51:67:46:0a
Fingerprint (sha256): f8:df:a1:a1:21:bf:a2:41:7f:36:ce:56:45:41:8e:26:6e:36:af:c7:4c:d4:0c:b9:36:6c:44:db:7a:fa:6d:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sassofoni.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sassofoni.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sassofoni.com

Other certificates including the domain name sassofoni.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sassofoni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332545456627997480155548101487574778354859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 19:56:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 19:56:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sassofoni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655622445166609444040481980887301385224337585176141844657145552606492728047386878215886798614106486743817289157007621674247325438545346298890023950930926479255567701787997648217626971645347548724169029633061625376735264320779090479974694803582177394799484854680508606097242892417893543803168200299045812024602022117022223983060232228534150792271276310737481263207527953712539685545016206773336096106113841806681544284785512601663939148765430346719373899780629100478138845596332974343360418508587278300197774523039489050251779515404383172200710732265546212682922122692128355518318284329074430068851236865683085369977112903239373792162684556584758557710960360794790640638512486842166990395236764896670492455357525853185691287836386535261758771898199842714064656309608241938105903952401258378131605957110980967838924225956170345602727553414462681532984105134055806121141324192454878782875631547867095109692790139406198008215666463213683675719426163154157744887234553982199251535158031430646177221278497137820044655405571687787577738295782825807461929727906731140117676451344973608350504660511585981597561877019638335097704709450144929948024372922920069269792871289581904530259505878566750887254043416641890004196233298005565617315387527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2dc8f61f727a078c6649f9ec928fad3fc473ee81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassofoni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eb3ccbfef000004030047304502203cb436990fffea90a6a7946983ed0e320168715dd18fd46812e727d16c8e5e780221009e59ce237bd2d37aadec7172ae395d03eba6b19f800467a456a4697315167ace007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eb3ccc1e40000040300483046022100d5fa17c369457eadfec11db0f8dd4356c95ccfe654f735d6e7f36cc92b896086022100b4aac37193f71df07918b85adb67fa85ece3b78502c321008d7d0543d3366563
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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