www.allestespark.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0d:76:3e:47:f0:9f:d6:fa:25:10:db:15:7e:ff:fe:92:42 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.allestespark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:76:3e:47:f0:9f:d6:fa:25:10:db:15:7e:ff:fe:92:42
Serial Number (int): 353029986782036344714489483386203412533826
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 41:96:a9:2e:db:1e:76:d9:aa:e1:45:ca:b2:75:08:2f:1b:97:49:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:24:c3:74:59:a5:3b:ed:f3:5c:9c:53:23:ca:ad:62:ef:1e:25:7d
Fingerprint (sha256): 56:56:99:0f:e8:59:54:00:ff:5c:55:4a:b0:1c:e4:49:8c:6f:33:40:00:6e:e7:ab:cd:5f:7c:31:93:7e:47:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.allestespark.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.allestespark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allestespark.com
www.allestespark.com

Other certificates including the domain name allestespark.com

(limited to 100 certificates)
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
dev.allestespark.com
dev.allestespark.com
www.allestespark.com
www.allestespark.com
*.allestespark.com
www.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
*.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
*.allestespark.com
*.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
*.allestespark.com
www.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
*.allestespark.com
dev.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com

Certificate

The complete raw certificate details for www.allestespark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353029986782036344714489483386203412533826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 13:08:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 13:08:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.allestespark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678374537318188370961298232308286215505165424465617749994717034380684274457365203343175107582240287685587632558771399844687569352635655246888159649345486629179270669934523029949108634926985840083721151846403813709169205178391625730099198770237158188048872154005245222170415643709973674539695607651995270269979899703158346684061690816832854024847839722330420927318696116275122463881900005175149668136158831142373786847390201472499133718217793626331427177300742705660564595786563020299025787060613599472891023559604320221270043299172468146110245710282585275023728231299906605755153569030641062794281611448689671728584702025714154167059514521749052176992495212820799603578586134605992145490780601870110165593936694109982411187594433704586148242809574243481033896894999974115914046311553618519819560075317232557406468564710232212400758428280890127209425471843183759421710007294035809422099256253627692442128238685331986048392970965557794676173657438517431011974761781803277875786269738249042757589545436811164875646482317727057819009007721391307089781030000580911929924711191449204410911941779638415696341539811705626290753629724937000162439651478175749712003133634874452855334590758171741454311517053332573288565003188337800783609239201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4196a92edb1e76d9aae145cab275082f1b9749ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allestespark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allestespark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2153aeea0000040300483046022100f3b93b06af392a78f71e5e58108c50cab5fb1f7b78623ed9de7f90279dd1c02b0221009258b3293b11a23ce36407be4608b32201ab0ea4a156c4c7fd1d1a2c5a590733007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a2153aeef0000040300483046022100c52435efec68ba01539ba5a2f2e430e917ed712153b106aad08642059fac849d022100b01e1eeb39e145125575b14cdd05bfb38afff50321e8a8b58112323d80e99441
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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