shop.spafinder.com

Issued by R3

About this certificate

This digital certificate with serial number 03:67:da:4a:5e:ae:e1:26:13:db:a3:20:be:83:8f:07:ab:04 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.spafinder.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:da:4a:5e:ae:e1:26:13:db:a3:20:be:83:8f:07:ab:04
Serial Number (int): 296676099441587928095043341588794909895428
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:06:57:bb:8d:82:7b:c3:04:b9:27:47:fe:55:6b:b5:eb:73:d1:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:d2:d5:4d:59:89:18:7f:59:00:07:0d:d3:ed:b6:c6:9f:69:30:0e
Fingerprint (sha256): 05:b1:4f:57:93:ad:1f:78:ae:98:b4:1d:f3:51:d1:0a:46:ff:0e:49:4e:a8:22:d4:c4:f4:3f:05:fc:58:6d:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop.spafinder.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.spafinder.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.spafinder.com

Other certificates including the domain name spafinder.com

(limited to 100 certificates)
cdn.spafinder.com
f164.zooz.cf
blockcommunicator.com
filipwolanski.com
www.coreputters.com
vpln.spafinder.com
singlepointsol.com
midas.spafinder.com
midas.spafinder.com
www.lamconcrete.com
scamardi.info
svs.spafinder.com
test.app.kameo.co
dev.sbsb.kr
geoip.spafinder.com
studentsa.ru
www.fastclub.app
img.spafinder.com
shop.spafinder.com
penyadap.com
link.zeugnis.codes
track.spafinder.com
pull-dev.spafinder.com
labs.spafinder.com
raven.amp.prod.spafinder.com
modzter.com
img.spafinder.com
painelpadreosvaldo.g2canal.com.br
getelly.app
www.trim.social
icoach.pulso-preventielab.be
www.desafio21d.com
cdn.spafinder.com
bekbakes.com.au
vpln.spafinder.com
www.ogden.co
www.devicedb.app
www.stanplus.com
coronaviruslive.io
spafinder.com
services-lakeshore.smartbuildings.app
stage.eclypsium.com
link.investo2o.com
instantglance.com
elleven.minhacentralonline.com.br
enews.spafinder.com
shop.spafinder.com
desenfila.com.br
listings.spafinder.com
brian-poole.com
webnamieru.net
beta.extraordinarygrace.com
www.gloryth.com
midas.spafinder.com
linkedin-auth.karoldepka.com
www.diofantino.com
enews.spafinder.com
links.cavalry.scenegroup.co
klondikesolitaire-online.com
lxandrx.com
midas.spafinder.com
www.giovannihomeimprovementinc.com
tsubasa2540.ml
tarjem.sam-techs.com
shop.spafinder.com
img.spafinder.com
link.chalk.com
spafinder.com
vpln.spafinder.com
rameshkry.2rk.in
rockersesports.com
rtff.mjbdevs.co.uk
goldentranscript.column.us
g4rdens.xyz
labs.spafinder.com
mrgreensplumbing.com
lm.spafinder.com
enews.spafinder.com
www.lingosong.com
labs.spafinder.com
spafinder.com
groomerbox.com.br
inscist.com
www.camilopenalver.com
www.jismunboys.com
geoip.labs.spafinder.com
rtff.mjbdevs.co.uk
www.solal-experience.com
dev.niclas.xyz
tnmop.in
dcotagroup.com
aeons.me
find.spafinder.com
www.vulturedatalabs.com
benchmarkassociate.com
grammarabic.org
aaliyahlouns.com
radio-dev.gera.fan
spafinder.com
incapsula.com

Certificate

The complete raw certificate details for shop.spafinder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISA2faSl6u4SYT26MgvoOPB6sEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjEyMTkwNDQxNDRaFw0yMzAzMTkwNDQxNDNaMB0xGzAZBgNVBAMT
EnNob3Auc3BhZmluZGVyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjRc0mMBPSU8+BvGYwIulQHWUk7N0xARN9WUSmDYiH+h9TK02RfWh9LWAZ2
8ZT+lNka/udmja+6yGSWt9YmfkvrTixlFMZBftFVkuLO6O8rivd4gZMBb7eH7H7v
GiI3yV2WRrLyQnToXrHt1/c6eYvXwXASIoTHflNPi6KW2/7VYbA3WRDYKGv1NJxD
Lw3Vce75cCAFpk6KmbBElqppTxVSj2r34bDJOve8u7xBSpzS9czWKw11NO/UsTXv
tbHsFTtDqRXh7mUksd8dpYuvDBd9pvgZYd0bL6WmA3ZxGaFuZHUvakg1AFb1dous
yQfiLck2oF+b0wkHmJKBQOo05t8CAwEAAaOCAk0wggJJMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQU4wZXu42Ce8MEuSdH/lVrtetz0WQwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wHQYDVR0RBBYwFIISc2hvcC5zcGFmaW5kZXIuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAtz77
JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGFKOb7GAAABAMARzBFAiEA
m7k8BbhRqB6vDeKZS7vl5fPp2NSFFDivEorGyST2xU8CIFqg0SjAXnFMAs53Rcq2
Mf+xwq2l2XC7cPAQHteO1O+qAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG
NOvcgooAAAGFKOb7PAAABAMARzBFAiEA9jdHFU9fhO///bvNVoSI3md4tnCO/SVX
k0nInq0KsjECICgV3nWxinzGJApPBSEijYx1CytLOBN08/ScYLvkLQYGMA0GCSqG
SIb3DQEBCwUAA4IBAQC5apwO9Ui7u77K93ONq0NGqjtmPdWpBjQmRgVp9+8axLFe
HtHeKEnsd8Wf56ND85U5eORpD1ZeaZLISAGIFnrcJwQIrl7jkI7rsc7fc0VAUZyX
vZjVXxqzP9be3XL999MEh2kVFGmqbl8zbH8jULaM4XCmUtMiODt4nFBOplmFmiSr
Tz5KXCsH9l2WzpaQ26xkqCGP83OCgJVVqfnOAV41QinqDpPNnP/MubMkA6aXl5kQ
MKiZMC0PVgl8PNLijIprQ2P88Zg7ibti7i8f0zvpj3rSxaC0MC/hSgVFFISRCEE7
q/agrDFwzXeZRNPYvrWStFvThvS6e4GSZKaGNduo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNFzSYwE9JTz4G8ZjAi6
VAdZSTs3TEBE31ZRKYNiIf6H1MrTZF9aH0tYBnbxlP6U2Rr+52aNr7rIZJa31iZ+
S+tOLGUUxkF+0VWS4s7o7yuK93iBkwFvt4fsfu8aIjfJXZZGsvJCdOhese3X9zp5
i9fBcBIihMd+U0+Lopbb/tVhsDdZENgoa/U0nEMvDdVx7vlwIAWmToqZsESWqmlP
FVKPavfhsMk697y7vEFKnNL1zNYrDXU079SxNe+1sewVO0OpFeHuZSSx3x2li68M
F32m+Blh3RsvpaYDdnEZoW5kdS9qSDUAVvV2i6zJB+ItyTagX5vTCQeYkoFA6jTm
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296676099441587928095043341588794909895428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 04:41:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-19 04:41:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.spafinder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25350944805793025532167025575555721070628106587733239326632097667251981724584959588631165883389534871350744896740489824918893337030597123756267337106239119326666228402805963532472244029860859367286438690427521972255708448696211811734939134296792249957258091852578613168166216332842134838179275870507377473922332213715069952611500412903533334048222524155132899166716865520660479063764354973167854932157644492530996116010163927972467882028099077672963910157773479255017266054379924281905741368425848561895608531730886158959108641361972891451287176602887447803357077288263614204537698137175511657337486769851301448967903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e30657bb8d827bc304b92747fe556bb5eb73d164
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.spafinder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018528e6fb1800000403004730450221009bb93c05b851a81eaf0de2994bbbe5e5f3e9d8d4851438af128ac6c924f6c54f02205aa0d128c05e714c02ce7745cab631ffb1c2ada5d970bb70f0101ed78ed4efaa007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018528e6fb3c0000040300473045022100f63747154f5f84effffdbbcd568488de6778b6708efd25579349c89ead0ab23102202815de75b18a7cc6240a4f0521228d8c750b2b4b381374f3f49c60bbe42d0606
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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