tahoeexpeditionacademy.viewspark.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:0b:a4:69:69:44:70:41:fd:24:91:de:a2:53:82:26:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tahoeexpeditionacademy.viewspark.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:0b:a4:69:69:44:70:41:fd:24:91:de:a2:53:82:26:1a
Serial Number (int): 332811630031309397192919667981475949717018
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:3f:37:15:27:a0:b1:d8:51:cf:a5:1b:17:c0:3b:4d:33:5c:9c:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:55:fc:1e:fd:e6:20:6b:67:b2:db:24:c7:12:c2:8b:bf:9b:12:9b
Fingerprint (sha256): 11:e5:89:8f:c3:a4:ca:60:4e:f5:ce:74:90:97:11:f0:01:7d:ea:7e:36:a2:6e:09:07:35:52:8c:4f:ef:36:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tahoeexpeditionacademy.viewspark.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tahoeexpeditionacademy.viewspark.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tahoeexpeditionacademy.viewspark.org

Other certificates including the domain name viewspark.org

(limited to 100 certificates)
thepi.viewspark.org
theharborhouse.viewspark.org
genhope.viewspark.org
viewspark.org
athletesinactionbaseball.viewspark.org
sundaybreakfastmission.viewspark.org
abc.viewspark.org
karenming.viewspark.org
viewsparkcorp.viewspark.org
exceedinternational.viewspark.org
pbcfoodbank.viewspark.org
exceedinternational.viewspark.org
admin.viewspark.org
brightfaces.viewspark.org
mapinternational.viewspark.org
catholiccharitiessc.viewspark.org
icca.viewspark.org
jewsforjesus.viewspark.org
sundaybreakfastmission.viewspark.org
viewspark.viewspark.org
viewspark.org
genhope.viewspark.org
thepi.viewspark.org
rabbinathanjoiner.viewspark.org
genhope.viewspark.org
themarriageresource.viewspark.org
icca.viewspark.org
bcbradio.viewspark.org
heretoserve.viewspark.org
havenofrest.viewspark.org
mosaicvision.viewspark.org
exceedinternational.viewspark.org
payment.prod.api.viewspark.org
coastalbendfoodbank.viewspark.org
admin.viewspark.org
losangelesmission.viewspark.org
sundaybreakfastmission.viewspark.org
tahoeexpeditionacademy.viewspark.org
vsclientstartup.viewspark.org
icca.viewspark.org
pcg.viewspark.org
alightofhope.viewspark.org
livingroom.viewspark.org
karenming.viewspark.org
karenming.viewspark.org
citygospelmission.viewspark.org
app0.trayn.com
pcg.viewspark.org
columbusrescuemission.viewspark.org
pbcfoodbank.viewspark.org
viewspark.org
talent-alpha.io
sundaybreakfastmission.viewspark.org
mapinternational.viewspark.org
brookebutler.viewspark.org
alightofhope.viewspark.org
crm.viewspark.org
livingroom.viewspark.org
pcg.viewspark.org
eastafrica.viewspark.org
auth.prod.api.viewspark.org
tahoeexpeditionacademy.viewspark.org
auth.viewspark.org
exceedinternational.viewspark.org
heretoserve.viewspark.org
genhope.viewspark.org
bcbradio.viewspark.org
israeljimah.viewspark.org
ifcjorg.viewspark.org
pbcfoodbank.viewspark.org
exceedinternational.viewspark.org
brightfaces.viewspark.org
pcg.viewspark.org
rabbinathanjoiner.viewspark.org
kokomorescuemissionorg.viewspark.org
livingroom.viewspark.org
riversidehealthcarefoundation.viewspark.org
alightofhope.viewspark.org
itsnotok.viewspark.org
thepi.viewspark.org
livingroom.viewspark.org
mapinternational.viewspark.org
foodbankccs.viewspark.org
icca.viewspark.org
brightfaces.viewspark.org
karenming.viewspark.org
livingroom.viewspark.org
exceedinternational.viewspark.org
icca.viewspark.org
citygospelmission.viewspark.org
genhope.viewspark.org
*.dev.viewspark.org
karenming.viewspark.org
thepi.viewspark.org
viewspark.org
theharborhouse.viewspark.org
asphome.viewspark.org
eastafrica.viewspark.org
crm.viewspark.org
viewspark.org

Certificate

The complete raw certificate details for tahoeexpeditionacademy.viewspark.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3D3nPNgRRDiJahWJCkc
/ldFuOnzYqAu4OhmVzS4OurCiMXOmyGajGrTP0xXoxuqkYZPcZRnongLpuAyO+pY
hn8XeM6+1OELSOH/WA9bbXd3boMa4EkhDADYSU+KsknPubdp+yQ7aUUDCNSeiylI
bR9CtolA3DPwXY28QjPVRfzJfD8eYUbMLYECHfohEGCLa+MqkZ/b2u1WyMFpsE5d
OHrkN36DbFo1O2oXVB5twhLoQK58n20A/QilBgIYiI35eFjgaqzDqyylNBg/Zj7K
yKlph4UENZxd2coWzsPNfm2vKmAmoYSEDwo5fwhdxU7ubydsb0KPQZ7gtb/nPk+6
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332811630031309397192919667981475949717018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 09:37:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 09:37:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tahoeexpeditionacademy.viewspark.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24167222470083696494115059368531313030241201330599884266433056556144244029169712978672186230159058926580921310380210208766524758822415986246650157947925175649465079748640108555909414887893263705171896728803734129122964700450399467634142960134327520390911917106958056717895226902341369365437721388516651272282617162764531295429454722110602057526069575739123440596186237392856283835303027902710721528853884060980954661699560739997278144086693483004464247120588238641639723045322847166838373593599040989061827303148933035944984962392288051933811396980649391479383974143388200978939274390528249385632624996010083547593451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b3f371527a0b1d851cfa51b17c03b4d335c9cf1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahoeexpeditionacademy.viewspark.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a1b6cc143000004030046304402204ecefb8e8c9aa07e334960f7d8282ad1a0835d3c54a97b4babfbc65cff3a74d90220498c6ea0b84fde89ef86e4691e666843af3229c8c9f4c78c59e1481d2e74303b007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a1b6cc29f0000040300483046022100af63d00899a2d378ff5d29c5903f932cfe3c409f48ab32cb824a3382f02549c7022100bdcefaceba573fbed360d677f6686d9c9423654fd10becdac4dafcce1c9587bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004f91f93a0e48603147897abb189a3c0bfdf60d01eba26ffcaf63877714bf4c3b456623a6b88b19ebecec7119583f36788cf504e3548a0eb12442975c82226fc8202944194286c0da5bf76a371ef96ae58cec6afcbac18f8a174e49a16c637aae3475bc0068ea2c3492ebfec79a69678c25a71833d80e22ba1e7296bce3afe32c96bea0405bcbe6b3fa4c0e6544e050e889fe5bc060e7d602f850809d722d7db9b83b19c3d85821a89ae129b3a61e8f3412e478e339e49967cd3a73911f82be8e8bab990d39d50c2cb79030c4d089efc60e92d24c03543647aaf139703669600ec81cba29185159b2b2a2e1e8d81d80b410d7f9d21f128a0d1d113f43ebd6c613