mail.run4spark.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:68:e9:e6:13:91:9a:33:e8:37:55:ca:0a:ef:7d:f3:cd was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.run4spark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:68:68:e9:e6:13:91:9a:33:e8:37:55:ca:0a:ef:7d:f3:cd
Serial Number (int): 296865678138292615679461959397064818160589
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:18:4e:69:6c:06:5c:9b:b9:df:77:f2:95:7d:fc:ed:7b:05:4b:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f8:6b:3f:62:74:c9:57:70:cb:95:29:bb:bc:99:ba:3b:44:4d:62:03
Fingerprint (sha256): 07:6a:6d:99:39:7c:7c:3e:d4:fd:fb:5f:b1:11:5d:83:61:e7:58:a8:6e:4e:58:b5:9e:c3:5d:61:37:dd:7d:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.run4spark.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.run4spark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.getyousome.com
autodiscover.run4spark.com
cpanel.getyousome.com
cpanel.run4spark.com
cpcalendars.getyousome.com
cpcalendars.run4spark.com
cpcontacts.getyousome.com
cpcontacts.run4spark.com
getyousome.apexgreenenergy.com
getyousome.com
mail.getyousome.com
mail.run4spark.com
run4spark.apexgreenenergy.com
run4spark.com
webdisk.getyousome.com
webdisk.run4spark.com
webmail.getyousome.com
webmail.run4spark.com
www.getyousome.apexgreenenergy.com
www.getyousome.com
www.run4spark.apexgreenenergy.com
www.run4spark.com

Other certificates including the domain name run4spark.com

(limited to 100 certificates)
mail.run4spark.com
run4spark.com
sevenonthebrazos.com
simtrips.com
homesbyhappiness.com
isbupod.apexgreenenergy.com
simtrips.com
run4spark.com
mail.run4spark.com
run4spark.com
cincoaustin.com
mandarinduckbrewery.com

Certificate

The complete raw certificate details for mail.run4spark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOygymhfll3XYs56pEQe
PrfsKRrCAoK/OD2FxIqqHhible1IfYGrXy4lrcwH5hkQ9KwhvgKcL7TLkgo69wHx
/1q+G3JKUNEmx5MaSh1WCVI4B5ji2/hxapgm5REQfNe6Ls3fxU9MZdA0IUPUrtPX
jSYkCvDBpCobzBmzr9J1/NKQ9eJQ1MK2I37lVSg+RgypNPouGWTZnthvOFWfYWyw
fGPJzAWLI9K3HTfTD0MHpuEYBA53KVzeJrF+rU5GdldcX3EvrdKor4zbO6wshrdN
ZARQY71Ri3VRm3gxu9w8e43F0zR83AA0r/JhHhBq5laQH6PyJr0bzlNeap3o4Pr5
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296865678138292615679461959397064818160589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 20:13:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 20:13:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.run4spark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22334627333398037754560706101905451448718114485454671855330424625148661172261690462072723800873563476009365638845371979221411154474760790519226217041695200484295568919528167905601532206036109302985077334129316793689284338107820922767089017239190928544741177917188416947800191198534702248745141831412896724906713334819025325819018398048993734909414318841413982905380477295783469492511102170827053548085413572441333813885345658156481585878411493466339537102796935645539492912234665032216668597370914957917920214158814550454847212413504028938204602092891854726150271474431494045111501876711411017902380691226530869344573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06184e696c065c9bb9df77f2957dfced7b054b1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (553 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getyousome.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run4spark.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getyousome.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getyousome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4spark.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4spark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df1907dcc0000040300463044022025adb6301da09fb670efff407fb949dce0372b8d0c5303bce83980e2d31cb2a00220174a1850bcb4c5a2cf38d8194b3da2b24c09249cd6cffab617534b2532bbfe36007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018df1907dd80000040300483046022100ccbdb552eef4575cce7acd2e3ab608d0e2ecd44404d3ede7d6492322e9930339022100dd0d9bb372ecd9551ae8f3975e550f0b0b4f6e3a0c09ec379f7b122afc7ba825
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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