sprouut.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9a:b6:51:50:0d:92:67:9e:89:b1:14:cf:fd:e3:94:72:21 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sprouut.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:b6:51:50:0d:92:67:9e:89:b1:14:cf:fd:e3:94:72:21
Serial Number (int): 401094969927811950454047966684967381266977
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c6:38:48:ec:27:57:36:e9:73:a2:be:79:ee:04:01:04:f7:bf:e3:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:a6:07:8a:f4:a6:36:3d:c3:42:88:29:0e:9a:64:f0:a2:68:0b:94
Fingerprint (sha256): 65:26:16:24:19:59:fa:76:44:21:87:82:7a:21:ba:af:40:fc:cc:b3:dd:06:58:2f:f9:9b:df:2a:a9:76:27:4e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sprouut.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sprouut.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sprouut.com

Other certificates including the domain name sprouut.com

(limited to 100 certificates)
sprouut.com
www.sprouut.com
sprouut.com
www.sprouut.com
sprouut.com
sprouut.com
sprouut.com
sprouut.com
sprouut.com
www.sprouut.com
sprouut.com
www.sprouut.com

Certificate

The complete raw certificate details for sprouut.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISBJq2UVANkmeeibEUz/3jlHIhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTgxMTUyMjJaFw0y
MDA1MTgxMTUyMjJaMBYxFDASBgNVBAMTC3Nwcm91dXQuY29tMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAwSADDJ2JfTpQCkZumEXyCnPdeHZG30Zf2bD7
KCjWHEZCTeFFFIkcNb9vh02Nr+WEbMukdS3dskYCCkbMK4xZP+jOr/xDfvt7ijwO
A7wZr87Pt3Ax9TXbCTdhJ8f8fM+HQfJgrPqf0JTrMNlpTn1ag9sIffVuGNfiFogO
AV2ib00dvdZmiXZpvJLB+dK65p6AOYjHr7RIwl0pTpf5I0Ao3ZsgGmkvRNH2HSl8
p9ZFq3tu+U8rPtgLKNZg/pnzGGqoh7GI7wsUBYNpZkqQGokUowqdcomtlO4GtnPr
kLMJ4uRqeufXwkWpIVjTh9wBKFykQ9We+Z+YJXnPQOH5qWBHIhOoZAPBB6y5Dpe9
4uPBuovJYISBMee3QNhz8P2psgyeH33zRy6fCLuLc49rfNbXxzluVgPLQ1cmT+t2
yWR37mGUG6CkIDc8b9uMmlnCYe4FiCNRnV/vtLRGk7po9N0uHoK03FwKezx/zsrt
aiKSRAaxzqUNj0oG/9as3+rpW4pjwxPWmEXK8gYHZieYq9zExFs0dwdg1SdkfwrS
dBbRb8O/Dup7ytDCLuEmCtEKmF8pWBVaQXsNT+65R4iaT8C4ps0i/gzKbhNeM1q/
EV0OQSCbvptsmusgitbWib5FbZkJHuAabsueZWatfnN+bUVV4DgpSz95Ckfebi/4
tbgsapkCAwEAAaOCAl8wggJbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxjhI7CdX
Nulzor557gQBBPe/4zcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtzcHJvdXV0LmNvbTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1
APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABcFhbSjAAAAQDAEYw
RAIgc6qEvQatyqvL5zO8QYmxLqYuqsktDaLxABd08MMqEVUCIDp8lJAGvvFqwNxq
48/3n1CkOXw4rx7VIiLvFfIsrqe6AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFwWFtLugAABAMARzBFAiAMY77ji8+AAq3xmVqnQA9g0/9U6ChQ
Mo2y8tl6PTjQdgIhAK4dr8mL9LSi82ojftxeFPeo+yqwfw8PaUe35q75O7wtMA0G
CSqGSIb3DQEBCwUAA4IBAQACotgDz0eg0GPBwvjIJSt6qbnCn4T6Vk+UDiYwg/wj
IHwuOImaUWcOy7ezLarSBhAs3eDBrmfFl8h0J0WmyCdgZ0Px7muMbx8Gb20xdya3
8FDsY7NucAFX0WqpNBQ7pzRpCvcL8gWIJP33MQ4O50QQmf/IiZssAq879hQnfAVR
9wPVbIoSzOC+hWgPZxzNFY1ysnXjtChD4p0voabugt/5MkS0IRE3jvjQKWNkKhDj
jfKKHST0GRtWc5mQBcFj6x8QPfa8FKH65vN1D8bxlbKwyWz+E/5XpYQiqiqeL/h6
dTsJphzYJllKM0f8ZNdtSd1v2kF1avL95dpZmK9PCiC6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401094969927811950454047966684967381266977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 11:52:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 11:52:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sprouut.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787881450455299828729968055599552003411419689688170740714778457746501327571062349380039175609309850171725559204707892178508816556096911126595510629538495342077426119004953763819824913774590040526991881420817613863240521773306680970263625724283970341768966555164075010688717336349516708212541788860987448971024208764807753277033857801197198543544117877484781567949135627811358914626719165454692713882042008440686009741865292977445285034548623651108080023625345438372240499964049590387370694797886573861086372765653624883329718286594899088216636444584273508314183846891741539794560123296394939447241062605882694895999336302759282190797556599710974667876716957068140337696222610233280793829916503608084351201367385756001361737270843209242084437649410825430944672009884951586634811082181155312570331826743534277337923136753620891449889168030259059269430494967357894795892368014076771853044537162681240983342471187703491132566960527336754937341616255978568527787438130595754786268693321800540665634112501469888659351446705444958240931803224976078336857320512324504788547108104960424106580424030637057205597310521947577407209150259261209536043521459524299207647128608724983861814073974017269244979022927147517606121921974804359900604164761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c63848ec275736e973a2be79ee040104f7bfe337
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprouut.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170585b4a300000040300463044022073aa84bd06adcaabcbe733bc4189b12ea62eaac92d0da2f1001774f0c32a115502203a7c949006bef16ac0dc6ae3cff79f50a4397c38af1ed52222ef15f22caea7ba007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170585b4bba000004030047304502200c63bee38bcf8002adf1995aa7400f60d3ff54e82850328db2f2d97a3d38d076022100ae1dafc98bf4b4a2f36a237edc5e14f7a8fb2ab07f0f0f6947b7e6aef93bbc2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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