spectrumtesting.com
Issued by R3
About this certificate
This digital certificate with serial number 04:c3:2d:49:23:28:c6:31:49:7e:e0:ac:b1:c6:bd:59:79:26 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=spectrumtesting.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c3:2d:49:23:28:c6:31:49:7e:e0:ac:b1:c6:bd:59:79:26Serial Number (int): 414864400287219781463313258798601851205926
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 43:c0:b0:3c:81:10:85:21:6d:24:ae:a2:9a:ee:bc:91:6a:5f:43:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d6:16:c3:52:21:41:3a:5f:d8:72:78:68:1a:8b:f3:77:ff:8c:9e:ea
Fingerprint (sha256): a7:62:25:ca:8c:6e:4c:56:cc:1c:e8:8c:72:d7:7a:81:c3:56:f0:31:ca:1d:92:1f:27:aa:f5:1d:ab:0b:c4:9e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate spectrumtesting.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spectrumtesting.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spectrumtesting.com
www.spectrumtesting.com
www.spectrumtesting.com
Other certificates including the domain name spectrumtesting.com
(limited to 100 certificates)
qwertycbd.com
spectrumtesting.com
www.softdefense.com
bristolrealestate.co.uk
suenvc.com
spectrumtesting.com
mulletlake.com
uracan.com
onevui.com
www.khbeck.com
spectrumtesting.com
helpingpeopletravel.com
www.wealthstructuring.com
tlco.bible
www.motley-crue.com
durgamaa.com
ironawe.com
spectrumtesting.com
www.fukutani.com
masterag.com
custombeachflag.com
www.doesneed.com
www.custom-tackle.com
www.hundkapplopning.com
tlco.bible
www.opulentummah.com
havit.exposed
www.alibabasell.com
precisely.id
gmohealthrisk.com
qwertycbd.com
www.motley-crue.com
spectrumtesting.com
www.softdefense.com
bristolrealestate.co.uk
suenvc.com
spectrumtesting.com
mulletlake.com
uracan.com
onevui.com
www.khbeck.com
spectrumtesting.com
helpingpeopletravel.com
www.wealthstructuring.com
tlco.bible
www.motley-crue.com
durgamaa.com
ironawe.com
spectrumtesting.com
www.fukutani.com
masterag.com
custombeachflag.com
www.doesneed.com
www.custom-tackle.com
www.hundkapplopning.com
tlco.bible
www.opulentummah.com
havit.exposed
www.alibabasell.com
precisely.id
gmohealthrisk.com
qwertycbd.com
www.motley-crue.com
Certificate
The complete raw certificate details for spectrumtesting.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgISBMMtSSMoxjFJfuCssca9WXkmMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDYxOTE5MjZaFw0yNDAzMDUxOTE5MjVaMB4xHDAaBgNVBAMT E3NwZWN0cnVtdGVzdGluZy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQC1xJFeyZAmVwYdzxbwtYzilryjroHReh+Kd6AbgwuukNoGa9Men+WtDk45 5SYXXmuP9tAqGjyJrC65PvOnSxhrlOJA+/XoQtmVFLZxF34A7xnMYpk6Fyu9Dgq5 ybNMOTxCSNHvVP0vKPFvGO4+kuRJeaUqm65ZMSgtopQdULYuLDXKaxM+mgjTHWGy AM5wSg7Rc+dizcSU82VTQ4lmcxZsym3S9TofrOyyCh1Z9J2VnOpF0pvKLfZic0X8 AshrO76NMUjccSHuwur6WcGOSQ8kCDT+7Tb9CzJI1T9KEBQEMLMFUh2TwoupxbJ8 0Ruo6OqIfWR7r7VTzK+X9KdmfaTCQk17nzqyF4tZoZu81CcwcgZiLA2m1BKxylYk aqQFKgRl7l+SGexb/GKbvBQY0D48/umj91+twtf241VSmK3BQvgRCMxJidziVMET TOHVdkCw2hAPPrlaB3tu52wyZYBNGnlr6q0rwNAkjs9zftwYq7Z5XRe4woPS09vT eghiS1+iupvEv9zI5LKh3JtrBq4WRDo4RL5VSGv05cYXrNVuSW5EcCNKo4c6WEFl gmgB5OFaEzrUC0qytcTij6hCAMhi79q9eETenYggpGWDHcKhcQNMvycX/BxbRh2C QYmnoNm7QhxA5SDQhkxiIaEW5LxCx1aW06DvonSBlTDHVBpTVQIDAQABo4ICLjCC AiowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRDwLA8gRCFIW0krqKa7ryRal9D+DAf BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW aHR0cDovL3IzLmkubGVuY3Iub3JnLzA3BgNVHREEMDAughNzcGVjdHJ1bXRlc3Rp bmcuY29tghd3d3cuc3BlY3RydW10ZXN0aW5nLmNvbTATBgNVHSAEDDAKMAgGBmeB DAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AKLiv9Ye3i8vB6DWTm03p9xl Q7DGtS6i2reK+Jpt9RfYAAABjEDJDOIAAAQDAEYwRAIgHdPFguRSb7FweEYwpYAM TaTHd/RuA98XUkQr7hD45xoCIBVlXKN3mNiAcLyP3a5iBptuyC9C6lKKFdfiNsAa aT3nAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMQMkM5QAA BAMASDBGAiEAivW/9zXvpoibD/hc++bfdqic1NoCWWlBrSY8KPMi23cCIQCwx5O5 1Deda7P9ksfU+kXdDgy5ayhlcxaIKkojyNfJyjANBgkqhkiG9w0BAQsFAAOCAQEA Lq7Ch6k02fe9TwO6dddqYFIl63jBI26TFMEtGlJkHG2aizaD1gDKRy7CVYEsvby4 vMNGQXP1qQzyz3CUU3j5YsX5D+dIoeOYP8/UK/RxOJsEzZHWHTFLvIMu95CmMhEW QRNzHZF5e5Ht9sL6vqLSSLfjDmtRxh2QFocfYbMGlNGmRjSRdI2FkRdpxkeT9irC 165/ynNE0sXDvWwMbKIZ3vfTr209Cs5G68KVfIPTMsA7NAXKTstQeQEzHMeplfNZ xhUfr0wiYhmWQyc3laF7FvF3ELZS/O3wGzdSsqWT95VXsXLb7Ka6BQYqWU5UMyWd nVripYFwW8LtqWoARc2Uxw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtcSRXsmQJlcGHc8W8LWM 4pa8o66B0XofinegG4MLrpDaBmvTHp/lrQ5OOeUmF15rj/bQKho8iawuuT7zp0sY a5TiQPv16ELZlRS2cRd+AO8ZzGKZOhcrvQ4KucmzTDk8QkjR71T9LyjxbxjuPpLk SXmlKpuuWTEoLaKUHVC2Liw1ymsTPpoI0x1hsgDOcEoO0XPnYs3ElPNlU0OJZnMW bMpt0vU6H6zssgodWfSdlZzqRdKbyi32YnNF/ALIazu+jTFI3HEh7sLq+lnBjkkP JAg0/u02/QsySNU/ShAUBDCzBVIdk8KLqcWyfNEbqOjqiH1ke6+1U8yvl/SnZn2k wkJNe586sheLWaGbvNQnMHIGYiwNptQSscpWJGqkBSoEZe5fkhnsW/xim7wUGNA+ PP7po/dfrcLX9uNVUpitwUL4EQjMSYnc4lTBE0zh1XZAsNoQDz65Wgd7budsMmWA TRp5a+qtK8DQJI7Pc37cGKu2eV0XuMKD0tPb03oIYktforqbxL/cyOSyodybawau FkQ6OES+VUhr9OXGF6zVbkluRHAjSqOHOlhBZYJoAeThWhM61AtKsrXE4o+oQgDI Yu/avXhE3p2IIKRlgx3CoXEDTL8nF/wcW0YdgkGJp6DZu0IcQOUg0IZMYiGhFuS8 QsdWltOg76J0gZUwx1QaU1UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 414864400287219781463313258798601851205926 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 19:19:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 19:19:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spectrumtesting.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741548103162359160686264719343409478066985382417517612321693055521022620265822071742189321368288676329520438344296283806389423050654087457708920498878173008782767978151923894951921718624558678431474615844959235256312466579071907995707814295346942076086005074128585261554954126210700446863442018236743506688245518735274960276106290661475614452533580178555085459737229301261618708541683840145603041426228209911593150215018107651246179700278125385339214594121308014449707589219754336453286106418363103681316243624958755661641634573346641065027704452169201988683228114732309685344711553908047038714290921531961739209464957841060367550516376515154442157136299004598232479371399481940032222526011440059236190729953334179922024133767425496207064486655329971389689504504273210895877860055107752510742369558147338583189250172078212209647440793143066155549839521230995645875459420981795187302960903448591439147839160590091098188651547460136627009849593387770812189432539395151389804010237500033903906019158292100051116046563436284690904839749625252697640950613709962757768742169486696249827137066511688401137385487975285710062996538239344097788799290493103511420492931870101860033660924891599884994076693556863798168779043995226322428350845781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 43c0b03c811085216d24aea29aeebc916a5f43f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumtesting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spectrumtesting.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c40c90ce2000004030046304402201dd3c582e4526fb170784630a5800c4da4c777f46e03df1752442bee10f8e71a022015655ca37798d88070bc8fddae62069b6ec82f42ea528a15d7e236c01a693de700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c40c90ce500000403004830460221008af5bff735efa6889b0ff85cfbe6df76a89cd4da02596941ad263c28f322db77022100b0c793b9d4379d6bb3fd92c7d4fa45dd0e0cb96b28657316882a4a23c8d7c9ca . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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