www.spaq.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0b:0c:9e:6a:a7:09:ad:7b:48:61:3e:08:5c:34:cd:c2:eb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.spaq.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:0c:9e:6a:a7:09:ad:7b:48:61:3e:08:5c:34:cd:c2:eb
Serial Number (int): 265096737113433646749609617459022840840939
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ee:a9:02:d6:f6:6b:fb:56:98:80:80:2d:ab:06:68:06:eb:8c:32:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 26:62:9e:e3:b2:c1:ba:3d:47:a6:35:dd:94:a0:a9:9c:a0:08:33:4e
Fingerprint (sha256): 1a:58:0e:fb:60:d3:bd:10:92:87:a7:9f:8f:ee:19:77:4c:53:7f:3e:ae:19:09:0d:8c:a1:63:ec:da:7a:f4:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.spaq.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.spaq.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.spaq.com

Other certificates including the domain name spaq.com

(limited to 100 certificates)
www.wysely.in
ayush.app
cisssgaspesie.spaq.com
oht1nahv.security1.io
msg.watchplaylive.com
app.classquest.com.br
timeplacebook.com
app.warningtemperature.health
www.clubberpeople.com
uccxhaqc.qc.spaq.com
support.spaq.com
wonday.co
permis.spaq.com
hantron.in
www.bitfog.co
paktola.com
uccxqc.qc.spaq.com
uccxqc.qc.spaq.com
puertasabiertasfcfm-buap.com
www.builtbypanda.com
www.getmonkey.app
vpnqc.spaq.com
merce.io
www.eishinsangyo.com
torewin.com
get.knts.app
performanceplusroofing.com
soundsbyaman.com
gamingonthe.rocks
uccxhaqc.qc.spaq.com
mercadopago.loro.com.co
cpanel.spaq.com
cisssgaspesie.spaq.com
uccxhaqc.qc.spaq.com
labellapizzaangra.infinitifood.com.br
uccxhaqc.qc.spaq.com
christmasparty.app
spaq.com
estacaodosesportes.com.br
pariworld.org
regnas.dev
www.spaq.com
www.spaq.com
blackpoint.vision
binds.co
bradciechanowski.com
internal-api.litta.co
www.spaq.com
lhellgren.exelor.com
galishops.in
support.spaq.com
spaq.com
asvntech.com
share.bazaara.ae
blimoveis.net
www.builtbypanda.com
devweb.spaq.com
haziqhalidi.com
global-key-events-calendar.roche.com
ssalvail.com
pandcconnect.com.au
bantukami.my
www.filipmarko.se
business.etable.app
admin.jcreas.wowdesk.jp
www.paragonatlas.org
dailysale.tmg.28east.co.za
www.mesh-innovation.com
alyf.in
public.spaq.com
app.stgtymebank.co.za
www.neko.haus
eddcaller.com
apk.richter.tirol
about.maricuru.com
whatsapp2.appeconomizou.com.br
vpnmtl.spaq.com
makeshifthomeschool.app
tgpsmobile.spaq.com
www.newangle.in
app.lockone.dk
csss.spaq.com
cardinalfrequency.co.uk
aesthetische-werke.de
standups.agilefox.app
pandcconnect.com.au
e.birikimpilleri.com
karthikkondri.com
varuj.sk
hikersunderground.com
static.reality-overwritten.net
www.finavia.eu
support.spaq.com
old-portfolio.gowravchowdary.xyz
www.smhdiy.com
devweb.spaq.com
app.shubhamsatsangi.com
www.relian.vn
invite.dergeorg.at
firerz.com

Certificate

The complete raw certificate details for www.spaq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265096737113433646749609617459022840840939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-20 04:07:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-19 04:07:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.spaq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908252099340116597547772213344994363253295104511888265231318734827305952778015030147488817698388565852193992377632501728419444049985469810957023789807560047841712718922733578575467224867339406631311323350623736264443403839113240401126262701016688686106761075587957107583260033525157952484040412224600970380919308420414130589873370474888078084984881913278033719496465448258229187386887810019338360474926965897482622915654358966041280006819986600637869650360109602756847600648742797988811819874864827855525825198045370456873097685570446688411456688789970290603981481306438480569381128555531124529586706463367964703455572592859397525002604769470818992922520192591602058845206026636002485392364072694117582771044553033477137891103504033208830970152779093434703379469988789053860029136519128460210343491759405249839738881069535135147526377611025892380695527980593204266409806794561274255293013366467905501510986225965375467938813396332595891271126245445531298960749880508384337857997318647568414673701507993038239388766694937101171025875608845921659853426220020248172872081049493000136566654545762699547768642130055545053968057676819553599344645861839125936818466413526357861440633408177775684557860126318209299570405511668043877611188359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eea902d6f66bfb569880802dab066806eb8c3264
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spaq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017c0199d773000004030046304402206be4691a81e33808ef0780f4198e172bb76d9ecdb78afdfcc256b0db31edee3d0220095ffd2e21de555b035f0e069cbc02b89ade3b155b143f6938fb78edd29ffd89007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c0199d7760000040300483046022100c66a030a90119737580bc82330a7e24385812fef815e8d9ea3790ce4ef849f7d022100d9591fc8481e1fcb2ecfe03df2df1c7c80d0d486c65dd0fc7d2e16be724e749a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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