www.sport-planner.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:40:3f:a2:ef:0b:ab:18:6d:29:2b:b2:e9:d9:18:d2:2d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sport-planner.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:40:3f:a2:ef:0b:ab:18:6d:29:2b:b2:e9:d9:18:d2:2d
Serial Number (int): 313145178578385206505564511526412816536109
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:a0:43:a6:7a:62:22:1f:9c:a5:0e:78:11:0d:0d:2f:c4:4f:e7:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:a8:ab:18:ec:7d:b7:a4:22:68:b7:76:69:8d:f7:54:4e:f9:73:d5
Fingerprint (sha256): b3:76:f5:de:77:7d:2b:85:24:68:f9:4d:15:ca:23:e1:ec:d9:58:c5:b3:19:3a:88:2b:ba:fb:7d:46:6c:fd:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sport-planner.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sport-planner.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport-planner.com
www.sport-planner.com

Other certificates including the domain name sport-planner.com

(limited to 100 certificates)
linegoal.com
play.sport-planner.com
orders-tandoorizone.nextorder.com
get.meterie.com
www.castcircle.com
actnow.cheerity.com
linegoal.com
app.sport-planner.com
trydev.sport-planner.com
dev.sport-planner.com
app.sport-planner.com
app.sport-planner.com
link.dkn.uz
www.sport-planner.com
www.zambina.org
www.sport-planner.com
autopartsdemo.estore.business
app.sport-planner.com
sport-planner.com
spectra.forabctesting.com
app.sport-planner.com
www.passwordsgenerator.online
trydev.sport-planner.com
go.sport-planner.com
dl.darwin.work
try.sport-planner.com
www.sport-planner.com
sport-planner.com
sport-planner.com
www.psikodiyetlife.com
sport-planner.com
www.terolix.com
play.sport-planner.com
get.meterie.com
jellyjam.io
play.sport-planner.com
www.sport-planner.com
www.carnivalmusicteam.com
www.castcircle.com
caid.nissul.com
powergita.com
go.sport-planner.com
app.sport-planner.com
try.sport-planner.com
try.sport-planner.com
try.sport-planner.com
tinysolutionsllc.com
caid.nissul.com
www.sport-planner.com
www.sport-planner.com
www.escapepark.casabengala.app
app.sport-planner.com
app.sport-planner.com
play.sport-planner.com
app.sport-planner.com
www.castcircle.com

Certificate

The complete raw certificate details for www.sport-planner.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313145178578385206505564511526412816536109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 19:37:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 19:37:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sport-planner.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771290669183409541887243915900825755477817777642583310086915936661443473398249002541755065416222598387804074355116501835159923349830256777674979649272148005490944594484626236389232413219540309144349585451792697189431780043541552331913028349347460975102347869690760801226860994238982690956208088450044732174427303561182538694728923859402804020537828577936076070099908587274260774418973880727413630972637312268166568957246998999422232181701750071670501627455554956987221174881683266721462772273733440914493207211442437918254325569637079687979603181212743730080897338099620057595576483071919346552234650289837082629183268993092725386414613296503396130548182229244465076972500030904079381422099014521502433614349546646249022433263875129768270285146756928797016199283692756806407418603312774782599192771188247750832393918706841686298136276253591244513719833548483438126604186529746907240886011527748647677268474464201758260513363381839885101483995776807026518860682197348076815041162167064270559689888875776181864675452547183108049513919065621448922563268298558314216284259756176493356495428701004017722724576009389252520086090519287406249110794017980753393350167933246856497195221746869707246549854433562487944637086188093103604800392973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3a043a67a62221f9ca50e78110d0d2fc44fe7e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport-planner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sport-planner.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff82c29ca000004030047304502200dba3a381ab4bb9187e81835d4d1ae959b93fe77c5bccdb488fbcc7b31bb951102210097554904b33154149b08b11403d6b1d4b4ffd4c3767f031b80ff5425dbbcfb8000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff82c29f7000004030046304402202a7111da3b42e2eb801d30d7c2cc512e6865cc0e1f56a187c6fbf1cca689490e0220162990b45845f04c459f7ad456de53924848191ee6294a2f04ee990430d67fcf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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