spokesmans.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:dd:2c:2f:38:82:9b:d5:9d:41:dc:7f:eb:be:61:41:16:89 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=spokesmans.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:dd:2c:2f:38:82:9b:d5:9d:41:dc:7f:eb:be:61:41:16:89Serial Number (int): 423710278032498101798903953578943284582025
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: c2:00:c7:22:ed:32:12:4d:4f:19:50:ab:d7:43:b5:35:85:6d:fa:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bb:be:13:74:fd:26:0f:45:9a:f3:b6:84:69:d9:b4:73:d1:aa:aa:c5
Fingerprint (sha256): 36:5d:a4:63:14:cd:64:b3:48:d0:22:1d:1c:bb:42:48:40:64:40:3d:b3:c5:82:2b:91:57:52:89:09:29:e3:c3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate spokesmans.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spokesmans.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spokesmans.com
Other certificates including the domain name spokesmans.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for spokesmans.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISBN0sLziCm9WdQdx/675hQRaJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMzEwNzIwNDFaFw0y MDA0MzAwNzIwNDFaMBkxFzAVBgNVBAMTDnNwb2tlc21hbnMuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0NL2qEO+NtUjWW2GecByKVni8ISEPwae 8ZJlP8GcXc1he9bBnsE9wF1rolHWzB1brGBcN4rWobyAbZM6Rs/V6cKnF7flrVQJ Cnrn8rFAT/BnVIm/fXtTmUCyvsQL4U+5Z/l8t9EAj1y/09joyl1ZZY8oJjvAzV9z H/8EieDGNLVnnpHbLNrKIz4f1dMWElipTo0vynec5v3RaosOpUJ6ERy5etQHxuYr UoTGYisIP5+UUGjVGqFUkLTTEm4oXi5eTezt/CvfXTpOBlsGlTfaBPasg9k3nICj YakCjN3x4xQmPvlwbfqkqSnN9fcC5RpvX+zdhCXZaeHvKvBXE891NMPRhP3Ert4T Sxl88yM0hhToKC1sjmy/HapVPfno0ozXMbDgulx2ovog1AbGcSRptfXzRCNs0ro9 +uH63umO1JNI+nRg2C8T8poTUqA8UUAQIf7T0t7AJ4G//UycDslWXtJGgSWMaHXZ MTyIbkL4D4F5eMk3FgW5MHWaVdTSH8cgdrLtWagU2OTvwJCo4ef+dLiJvuR9x57/ iRfCh0TXH932jLXLUEA+Y/542ksHn4HfIprP6y2bmpdQJmJ6+Za8ZPagmersiyDD wV4CImqkQaXRYcAVVIjw+GqopKb9s0IsUq8s1LXimpdrwZyycaN+EzaE61uuxanK tOIUIHPH29UCAwEAAaOCAmMwggJfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUwgDH Iu0yEk1PGVCr10O1NYVt+m4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5zcG9rZXNtYW5zLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABb/qwFgkA AAQDAEcwRQIgXNf63L3nf2ls8W7sBQrh4Zj+hB12OKDXysW3RniSc+ACIQCGViVP NQzeYMfINTimlavSueUjmMwjPSJxT6S04O1zIwB2AAe3XBvlfWj/8bDGHSMVx7rm V3xXlLdq7rxhOhpp06IcAAABb/qwFjAAAAQDAEcwRQIhALk/+yO32x6c4IHFF0fH fchJ5ZT2ff2yeawLpA5GTGIvAiAYA99FKw7bV6tfYIojhzeRxxWwXIJOVbQGn3dL LuouwjANBgkqhkiG9w0BAQsFAAOCAQEAIgs16ISq6Tze0sLqyMOs2l/u34vYm3IJ wXxg/mDakAHlWATxvm197W0c45vIOpfV1kIgXgYtFKPZ/OwYAPuUE1EKOkGDotKu DxGf7WaF9JNkHVyhCQLJMFoTbOzMAjcRpRqEoeqNTiRHl+cCphXa0Db3+tYsvP8o nETTUU1FMr0Gkr+5bq6jxhpbhaBlJFB2slWuk9tozas5k1VPcSCemwgwf9UL8/y+ qo/CLycHp4uXjfFrSupjbRuAF4eBgfyaCqxoyxMf674u4Gt/nVX8lAbb2CFms50y Zh1Vp5lGjlSGpomTZ2xLX8XNrVsu4M/lSPX87N5XRGkbm4DvRQahfA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0NL2qEO+NtUjWW2GecBy KVni8ISEPwae8ZJlP8GcXc1he9bBnsE9wF1rolHWzB1brGBcN4rWobyAbZM6Rs/V 6cKnF7flrVQJCnrn8rFAT/BnVIm/fXtTmUCyvsQL4U+5Z/l8t9EAj1y/09joyl1Z ZY8oJjvAzV9zH/8EieDGNLVnnpHbLNrKIz4f1dMWElipTo0vynec5v3RaosOpUJ6 ERy5etQHxuYrUoTGYisIP5+UUGjVGqFUkLTTEm4oXi5eTezt/CvfXTpOBlsGlTfa BPasg9k3nICjYakCjN3x4xQmPvlwbfqkqSnN9fcC5RpvX+zdhCXZaeHvKvBXE891 NMPRhP3Ert4TSxl88yM0hhToKC1sjmy/HapVPfno0ozXMbDgulx2ovog1AbGcSRp tfXzRCNs0ro9+uH63umO1JNI+nRg2C8T8poTUqA8UUAQIf7T0t7AJ4G//UycDslW XtJGgSWMaHXZMTyIbkL4D4F5eMk3FgW5MHWaVdTSH8cgdrLtWagU2OTvwJCo4ef+ dLiJvuR9x57/iRfCh0TXH932jLXLUEA+Y/542ksHn4HfIprP6y2bmpdQJmJ6+Za8 ZPagmersiyDDwV4CImqkQaXRYcAVVIjw+GqopKb9s0IsUq8s1LXimpdrwZyycaN+ EzaE61uuxanKtOIUIHPH29UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 423710278032498101798903953578943284582025 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-31 07:20:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 07:20:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spokesmans.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851927903694282402962430959120689023316277344045118969832282903831669664119192047112894327576478495959759542856252545502124308592603851133227447985783982552848603603939772274958210316945285176831702420129582289155404653147532621022398271422863829095611469089632134950124557155411309097932253032752314213190315296775976235188355778327267112317946814459947526704509520158760394951611617768542610127400518194779665542133776229490881874474874854894053348747310520787797583683540259869319791719878647197811881225420251650650662735201102978341789444874952245227607968523934416070034866814432759236963905841553571037246255569092803018942028057172770515812621564922490855445622860664177410836808189153925171965630876356431672166639588801296238629413124354842075849315737829075074405709656595972640918453560031369884041539863642679833904703439604910560235103361130305980004665765582302625683693781109982762799480087613897481002982484400923643766363106454595761050245203463580872596178064105011624131434017367414711505698133558945373820929706833221865349791466865406358541710246141960736415999942766738936337756565904633112731872823350626614219522708593389692431739240801415002753814741354477568725221060568649947699972068531740469385350339541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c200c722ed32124d4f1950abd743b535856dfa6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokesmans.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ffab01609000004030047304502205cd7fadcbde77f696cf16eec050ae1e198fe841d7638a0d7cac5b746789273e00221008656254f350cde60c7c83538a695abd2b9e52398cc233d22714fa4b4e0ed732300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ffab016300000040300473045022100b93ffb23b7db1e9ce081c51747c77dc849e594f67dfdb279ac0ba40e464c622f02201803df452b0edb57ab5f608a23873791c715b05c824e55b4069f774b2eea2ec2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00220b35e884aae93cded2c2eac8c3acda5feedf8bd89b7209c17c60fe60da9001e55804f1be6d7ded6d1ce39bc83a97d5d642205e062d14a3d9fcec1800fb9413510a3a4183a2d2ae0f119fed6685f493641d5ca10902c9305a136ceccc023711a51a84a1ea8d4e244797e702a615dad036f7fad62cbcff289c44d3514d4532bd0692bfb96eaea3c61a5b85a065245076b255ae93db68cdab3993554f71209e9b08307fd50bf3fcbeaa8fc22f2707a78b978df16b4aea636d1b8017878181fc9a0aac68cb131febbe2ee06b7f9d55fc9406dbd82166b39d32661d55a799468e5486a68993676c4b5fc5cdad5b2ee0cfe548f5fcecde5744691b9b80ef4506a17c