spectrumtesting.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:2d:49:23:28:c6:31:49:7e:e0:ac:b1:c6:bd:59:79:26 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spectrumtesting.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:2d:49:23:28:c6:31:49:7e:e0:ac:b1:c6:bd:59:79:26
Serial Number (int): 414864400287219781463313258798601851205926
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:c0:b0:3c:81:10:85:21:6d:24:ae:a2:9a:ee:bc:91:6a:5f:43:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:16:c3:52:21:41:3a:5f:d8:72:78:68:1a:8b:f3:77:ff:8c:9e:ea
Fingerprint (sha256): a7:62:25:ca:8c:6e:4c:56:cc:1c:e8:8c:72:d7:7a:81:c3:56:f0:31:ca:1d:92:1f:27:aa:f5:1d:ab:0b:c4:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spectrumtesting.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spectrumtesting.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spectrumtesting.com
www.spectrumtesting.com

Other certificates including the domain name spectrumtesting.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for spectrumtesting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414864400287219781463313258798601851205926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 19:19:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 19:19:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spectrumtesting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741548103162359160686264719343409478066985382417517612321693055521022620265822071742189321368288676329520438344296283806389423050654087457708920498878173008782767978151923894951921718624558678431474615844959235256312466579071907995707814295346942076086005074128585261554954126210700446863442018236743506688245518735274960276106290661475614452533580178555085459737229301261618708541683840145603041426228209911593150215018107651246179700278125385339214594121308014449707589219754336453286106418363103681316243624958755661641634573346641065027704452169201988683228114732309685344711553908047038714290921531961739209464957841060367550516376515154442157136299004598232479371399481940032222526011440059236190729953334179922024133767425496207064486655329971389689504504273210895877860055107752510742369558147338583189250172078212209647440793143066155549839521230995645875459420981795187302960903448591439147839160590091098188651547460136627009849593387770812189432539395151389804010237500033903906019158292100051116046563436284690904839749625252697640950613709962757768742169486696249827137066511688401137385487975285710062996538239344097788799290493103511420492931870101860033660924891599884994076693556863798168779043995226322428350845781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43c0b03c811085216d24aea29aeebc916a5f43f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumtesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spectrumtesting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c40c90ce2000004030046304402201dd3c582e4526fb170784630a5800c4da4c777f46e03df1752442bee10f8e71a022015655ca37798d88070bc8fddae62069b6ec82f42ea528a15d7e236c01a693de700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c40c90ce500000403004830460221008af5bff735efa6889b0ff85cfbe6df76a89cd4da02596941ad263c28f322db77022100b0c793b9d4379d6bb3fd92c7d4fa45dd0e0cb96b28657316882a4a23c8d7c9ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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