page-345.concourse.page.sparksites.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:12:2a:27:19:84:d4:22:94:66:a1:3a:b1:1b:6a:85:67 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=page-345.concourse.page.sparksites.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:12:2a:27:19:84:d4:22:94:66:a1:3a:b1:1b:6a:85:67
Serial Number (int): 302194886799221329586089222828651566499175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:e9:49:41:26:7b:a1:ff:ab:c3:48:f0:6b:6b:d1:13:ab:a3:16:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:f0:7a:34:72:41:56:84:86:23:73:61:79:da:e9:13:7e:e4:3f:f7
Fingerprint (sha256): 1e:75:38:c6:a1:04:79:1d:74:d0:8e:ad:10:e9:62:fb:13:ff:e4:a3:94:dd:dd:30:29:e3:83:8b:78:f6:2a:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate page-345.concourse.page.sparksites.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for page-345.concourse.page.sparksites.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kipp.myconcourse.org
page-345.concourse.page.sparksites.io

Other certificates including the domain name sparksites.io

(limited to 100 certificates)
abc-sales-dev.sparksites.io
element-embed-forms.sparksites.io
mhc-event.sparksites.io
mhc-event.sparksites.io
molloy-int.sparksites.io
yeshiva.sparksites.io
element-embed-forms.sparksites.io
molloy-int.sparksites.io
yeshiva.sparksites.io
nyu-admit-test.sparksites.io
shugrad-app.sparksites.io
mhc-event.sparksites.io
va-tax-gen.sparksites.io
crt-event.sparksites.io
sparknet.sparksites.io
page-1933.heartland.page.sparksites.io
drew-event.sparksites.io
molloy-int.sparksites.io
shugrad-app.sparksites.io
mycsa-event.sparksites.io
can-landing-gen.sparksites.io
mdc-event.sparksites.io
fdc-app.sparksites.io
info.ciachef.edu
info.ciachef.edu
arcadia-admit.sparksites.io
mor-jun-landing.sparksites.io
element451-embed-forms.sparksites.io
drew-event.sparksites.io
drew-event.sparksites.io
molloy-int.sparksites.io
mdc-app.sparksites.io
myc-event.sparksites.io
mdc-event.sparksites.io
sparknet.sparksites.io
mycsa-event.sparksites.io
fda-landing.sparksites.io
mdc-event.sparksites.io
shugrad-app.sparksites.io
va-tax-gen.sparksites.io
wne-admit-test.sparksites.io
element451-embed-forms.sparksites.io
myc-event.sparksites.io
abc-sales-dev.sparksites.io
info.ciachef.edu
ysh-wurzweiler-app.sparksites.io
myc-event.sparksites.io
app451-335.concourse.app.sparksites.io
app451-433.erskine.app.sparksites.io
element451-embed-forms.sparksites.io
element-embed-forms.sparksites.io
drew-event.sparksites.io
abc-ad-sales.sparksites.io
ysh-wurzweiler-app.sparksites.io
alu-app.sparksites.io
sparknet.sparksites.io
wne-appv2-test.sparksites.io
app451-1820.otterbeingrad.app.sparksites.io
info.ciachef.edu
shugrad-app.sparksites.io
ysh-wurzweiler-app.sparksites.io
page-333.concourse.page.sparksites.io
page-336.fdc.page.sparksites.io
page-345.concourse.page.sparksites.io
app451-1102.nwc.app.sparksites.io
fdc-app.sparksites.io
app451-599.otterbein.app.sparksites.io
yeshiva.sparksites.io
app451-277.fsc.app.sparksites.io
ran-app.sparksites.io
wrc-app.sparksites.io
mor-app.sparksites.io
ran-app.sparksites.io
fda-landing.sparksites.io
sparknet.sparksites.io
disney-media.sparksites.io
disney-media.sparksites.io
mor-app.sparksites.io
drew-event.sparksites.io
app451-348.myc.app.sparksites.io
sparknet.sparksites.io
kings-pa-admit.sparksites.io
arcadia-admit.sparksites.io
pace-presentation.sparksites.io
yeshiva.sparksites.io
mycsa-event.sparksites.io
mdc-event.sparksites.io
page-345.concourse.page.sparksites.io
mdc-event.sparksites.io
sparknet.sparksites.io
app451-335.concourse.app.sparksites.io
fdc-element-dashboard.sparksites.io
shugrad-app.sparksites.io
wrc-app.sparksites.io
myc-event.sparksites.io
app451-1444.reach.app.sparksites.io
mdc-event.sparksites.io
page-336.fdc.page.sparksites.io
drew-event.sparksites.io
crt-event.sparksites.io

Certificate

The complete raw certificate details for page-345.concourse.page.sparksites.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA708iHcUjx5QGawhFlTiR
qbKZGsRsQ73GnNyaQSkhOcuzNgytVQ+Ed087uAGivHpeJpfnJgjg6iCxe6+vWd2X
q6DR1HyfSILAeEl+ehmR9DpsjQzl7JXSvxMCp1e6SkAz7OZIQ3jLBnyWCrgy+6Sb
SzV0SFflmQDWAj+HeYILBNR6dEGlxVwxLI13b9V00bxUReaK5lpta7nIO1obJMcN
sxsySTgFmR01b+999mUP1vtcJJGROil8rLh/OAm3ioyIgz3YokAy+xwdMq0mJurW
aNf48N7BKcStYNpPoVZ+4faxEM8v8PvgV0QUDRcMbYVLNtFqMMmjUUQgFxF+IB4q
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302194886799221329586089222828651566499175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 15:55:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 15:55:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'page-345.concourse.page.sparksites.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30209976955097462353018797744610580037678108353021306354276160062822140744755941148246773328303065420911109286055260348337632623796303732630572041997007756214531625970852395203027549368171470955229802929490931221486173328567186378771324294761156957710359418983143920503345221919591833072079641582044373362453631841586372562011021820212698303857237782891015478975287895915119741761181238206880377323721305853770011511144403278129881649540030993029946997748264584372264626501108985197872644645705679155548735203517438323314480618172175831723673433340213416806406646912271175894038587617592747043721263492745604028574273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1e94941267ba1ffabc348f06b6bd113aba316ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kipp.myconcourse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'page-345.concourse.page.sparksites.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169824785f60000040300473045022100fbba453e7ea34352a25ea22dd7fcf4bcea05ab8bbc0b5c03a00ecd62619c008402207eabc63729b7d6bc4b62edcb7795dd29d877575bb2781a6fd685681d438a4355007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169824787ba0000040300483046022100b54b69d03e94dd3400b52365574fb71a9ae4d903199e1286efe2e2bbba24a6b5022100cda52498c7ec5c0e1392ecdbf730d19ec71e567866334164f31120eae3b812cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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