spicer.app

Issued by R3

About this certificate

This digital certificate with serial number 04:75:d1:70:f8:1b:e2:ee:6f:81:52:b5:d6:cc:f3:ce:ad:b9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spicer.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:d1:70:f8:1b:e2:ee:6f:81:52:b5:d6:cc:f3:ce:ad:b9
Serial Number (int): 388540575877404964086474082181951177797049
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 81:39:6e:81:fe:f9:26:37:ee:3f:d0:72:bb:06:a9:39:d7:45:33:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:7b:49:70:70:9d:78:30:7e:a4:23:cc:d1:5b:8c:bc:ca:2f:10:5b
Fingerprint (sha256): 42:a8:11:dd:29:2a:b4:e3:6b:fd:7b:b9:08:bb:4c:bb:d0:3c:2b:41:44:ef:39:f4:d0:8c:99:4f:92:fd:2f:08

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spicer.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spicer.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spicer.app
www.spicer.app

Other certificates including the domain name spicer.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for spicer.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388540575877404964086474082181951177797049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 06:16:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 06:16:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spicer.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769676153222654097633525931977841793730063647844240870281687849374779854942879036099943345098195905475220586361000874034526292045201613584780272807362366266288393940683518013921639751515913014960946862169291108048704108139920148360052629649883778374631893415128099959915527904805528613445129201009292639668727089708536306502704193302038074094156957817366433174503144802274202103578617538623257234943985113342202401648050953523275213912636035932038243076120169303196097253915055456669167275754871251619189978779060263429720715919259461618826460972376697345584591815609213318296149042801123827459004152230387291795023147452869903493243061266391628519701109807047934393756357461335654306920265795635495157354729841474237977230238055800979726059168894374620262393797852953845337100773022863164118992625756037800938626578096188012756822522834686668894060573798641433178013928728715633061147462336569780579258456407361137298950573663502322403448655065721235549106173514779762513202784155198162883639736498501832705816299061145645354297251556613221235116781650658395093998644255234501329339764225401032354046449891013501872984136800249064924081559520275658760080582332156460510178255130228845865361256425309556011707433163500270745131199951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81396e81fef92637ee3fd072bb06a939d745333d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicer.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spicer.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a4f99c8ec00000403004830460221009efc6e3f4f165f3ac8dfb5c73da1e82174424951a2ec3fb1e734d13281c54d54022100f042470982ed9180a752713fd9d3b36038a6767574245d11bbf83bb49d90674a007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a4f99c8eb000004030046304402203f7d67d20eb2ef4e4ec5bd795088c12a339319490b804daf740260ff47bde1b2022026b63121af1dd292061208aef5ce780f1da9bb0ca483fe527196bdf500d410e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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