speargroup.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:6f:0b:95:84:6d:98:23:bd:47:9a:41:db:7b:bf:ab:a6 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=speargroup.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:6f:0b:95:84:6d:98:23:bd:47:9a:41:db:7b:bf:ab:a6
Serial Number (int): 315589358591078591363095812314116395084710
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:e7:af:52:a7:f2:8b:4d:d8:9e:cb:4e:dc:66:c0:eb:8c:50:55:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:b8:4f:b5:8e:57:8b:cc:7e:b2:f1:06:39:a2:42:06:e1:bc:b8:2a
Fingerprint (sha256): 88:6d:0f:f5:b4:b3:e8:5d:91:b3:19:97:69:2b:28:60:08:c6:3d:8f:86:0d:95:a8:ee:e6:c2:23:5b:6e:d3:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate speargroup.co.uk

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for speargroup.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.healysupervalu.com
autodiscover.speargroup.co.uk
cpanel.healysupervalu.com
cpanel.speargroup.co.uk
healysupervalu.alexporter.eu
healysupervalu.com
mail.healysupervalu.com
mail.speargroup.co.uk
speargroup.alexporter.eu
speargroup.co.uk
webdisk.healysupervalu.com
webdisk.speargroup.co.uk
webmail.healysupervalu.com
webmail.speargroup.co.uk
www.healysupervalu.alexporter.eu
www.healysupervalu.com
www.speargroup.alexporter.eu
www.speargroup.co.uk

Other certificates including the domain name speargroup.co.uk

(limited to 100 certificates)
*.speargroup.co.uk
speargroup.alexporter.eu
speargroup.alexporter.eu
speargroup.alexporter.eu
intranet.speargroup.co.uk
speargroup.co.uk
speargroup.co.uk
neofinancial.ie
speargroup.co.uk
www.isaacsautomotive.co.uk
speargroup.co.uk
bencaldwell.co.uk
h9t.com
shop.h9t.com
speargroup.co.uk
wwttl.org
london.h9t.com
ibthorpe.alexporter.eu
www.atcie.alexporter.eu
intranet.speargroup.co.uk
www.emeraldinterns.com
speargroup.co.uk
summerleague.win
8hq.co.uk
wwttl.org
www.emeraldinterns.alexporter.eu
speargroup.co.uk
www.ts.speargroup.co.uk
speargroup.co.uk
goldplc.co.uk
bencaldwell.co.uk

Certificate

The complete raw certificate details for speargroup.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCy0NOgN95Crdsp1P+Er
2aZZ9q6SE4FThbjKuBEzgegJDcTCIyK5uTYHbBvomfe6bAB4f026Vswozxm6HOHI
JG0THEqXIPmg4TuutrgQxpa1uR4Z9jJc4SZGQ/JhcTBjvU8f7it1CVP0zTdMzMYG
VjIiyCBUNIhpaJ8BXWHGxJDDf64krCSE6lK+dN9izoUwRzEXEI2+BrANoh0uy4UL
W9oxeDQGnQB9rEv8RH6oIbr+9gL8C7tQVG1DsbuIf7K5P8WEQGSV8zWnSmtEDe2a
sllHYGBAo95BSwwfTY1z1i32rVojGxt8UETRHk3K1rfVUmAgANrgX5NJf+e0bhUY
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315589358591078591363095812314116395084710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 02:16:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 02:16:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'speargroup.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22239986004641260381160817360308969066660825132839394107913652437946312432049157761445160562684061490983088415179021250218907061893215790259373408658363857004109585914694093853277749591295827553173367700593839629617522186836357225626446137367236323836735026095887998853320239112440982452866311152112658719680973399408457591411333735440198885064472465216609928139229247478195113328134368745321711293515712398921371987543449747164515844979482747423905106807876331255028819018219320035082620834322065664912458661341099231602586763372921515486218086345835038702064130338119382986158783924456788671175418068890437077506293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dde7af52a7f28b4dd89ecb4edc66c0eb8c505510
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.healysupervalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.speargroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.healysupervalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.speargroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healysupervalu.alexporter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healysupervalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.healysupervalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.speargroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speargroup.alexporter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speargroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.healysupervalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.speargroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.healysupervalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.speargroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healysupervalu.alexporter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healysupervalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speargroup.alexporter.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speargroup.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168309c9c21000004030048304602210094c10dcefa135c9d352b9048229c1078c3a55e3c61f373d8029b2e17887d13160221009122cc10bc7bdfa9e5e590373e87655364d30a491716406d4eec5a2cfdbc1bf3007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168309c9e0500000403004830460221008556a3f89f27def208a3533fb8c060f50222838b2cf73d4bf3f1dd7415a51b9d022100b4256ff87f7dd7be93cd107fb4165890f2bef5f92f28ff845fff73fdcbaf1c16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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