www.allestespark.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:62:73:6c:a0:53:38:f1:49:59:19:ac:51:de:8c:af:b1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.allestespark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:62:73:6c:a0:53:38:f1:49:59:19:ac:51:de:8c:af:b1
Serial Number (int): 270995627729995169469335166517057654927281
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:e4:04:2e:cc:02:95:ce:f5:6f:97:22:dc:08:5a:78:b5:dd:4d:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:40:c3:15:57:6f:18:75:90:e2:65:d9:db:c4:9a:bd:34:e8:5b:33
Fingerprint (sha256): c7:8b:51:51:65:bb:0a:be:1b:fa:a3:85:9d:f1:53:7d:17:cb:42:75:ab:de:62:5a:f7:24:91:0e:5b:3d:92:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.allestespark.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.allestespark.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allestespark.com
www.allestespark.com

Other certificates including the domain name allestespark.com

(limited to 100 certificates)
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
dev.allestespark.com
dev.allestespark.com
www.allestespark.com
www.allestespark.com
*.allestespark.com
www.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
*.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
*.allestespark.com
*.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
*.allestespark.com
www.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
*.allestespark.com
dev.allestespark.com
www.allestespark.com
dev.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com
www.allestespark.com

Certificate

The complete raw certificate details for www.allestespark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgISAxxic2ygUzjxSVkZrFHejK+xMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTAxNDA4MTJaFw0y
MDA1MTAxNDA4MTJaMB8xHTAbBgNVBAMTFHd3dy5hbGxlc3Rlc3BhcmsuY29tMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0nfPBHvzdFiaI7Zo/wUOLHKt
JUuCYs4FiDmP7tcA9o/qYni47FTTsBfWX9HtLM+vdy6mBhvNRRLUlAGMna/k32o5
NWDwyvP50dWaS1nIrQO1wkswccsaqRpJqAslBLoIbf8qtteZ/CyvRlj/xmI6q1oY
hH2J2mL9IerZ4ittOup5eUJRyWFANkRlqcoAwKtb7RxRwh9oMFj0OLGVysSlowzu
sleFwPedQSuqq0ctxz552iL/LHXQXIk2HIOqOYBN7Pj3taAvao44tJ3AoHNv16TG
EB0PHelqnMYcdBw2QG9yrzaAt+Wmpy+Qcvgq+oj/Gyu8ZSAW1l9zgrMfMplze3hY
GNBpsFb0Bmk2dvjfdu7AQRIXF/j9CvG8YyVMSfpINPmZz5Z+99by0i9BLX23GF9j
vyCwI4IgMbKB+bquGG0UiFmDttbjZZw0zby54lzQwIlDtu/yf5PH6ZLxFO6gav2n
vhLGUb72s7UC1HBXLLDg9AoiXKI9hvDKBbFOUJdVqrzWoM1No9S67Ulk21yd/OFX
oX7Tk/5z/gFEIYBi7a6fb6QkcJ41Ff/C5ldCA4XG8e/T80KSrQFeREkSAdSXkUuN
EO9GAYcQeVAbWFThjQNsv2F+Cw/SdNkPXvipksgFSPdVyCAfkR6Zap7dGKwLMnY4
DDEa3nxuxDQHprSCtesCAwEAAaOCAnswggJ3MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQU6OQELswClc71b5ci3AhaeLXdTREwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAxBgNVHREEKjAoghBhbGxlc3Rlc3Bh
cmsuY29tghR3d3cuYWxsZXN0ZXNwYXJrLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AOcS8rA3fhpi+47J
DGGE8ep7N8tWHREmW/Pg80vyQVRuAAABcC+kx38AAAQDAEcwRQIhAL7nG8nYlnz2
ey8MZMJOJZ7s8QufpsCvcIVZSce3n8PPAiBgZaGYrqfKxrBJT78t7ly9YKKizmRL
aXHLXA1A631jsAB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAAB
cC+kx58AAAQDAEcwRQIhANWRhCGGrNihQ88dHjqNPylnGjfTwwMknnRoLrkCB7gm
AiBMH9JVRIDCRkIqyxuZN5nwsTJrArrQ44qovyeZQxI/HzANBgkqhkiG9w0BAQsF
AAOCAQEAi2rxayGHgjBnz8aVtryn2vA66KLJYUz8fl7yGYAeih/WDIVMsdTHP1LP
V41jfyXmS5IZ7LnhQbziv4UsbzIlPD3Io72DbAr+qjdPS6ZZ/wNavgye+BqJaJ5e
YVK/ZCJRfDMlmbJQSmcubRqJsY8sZyVoK2QGauIjv+pVbZBYprnHN6eJBfUKSwHv
xpcVEXU5ysFwAZgvr7fZmGVPUTu70KsxmVKcNVF4oBaWjTQPGHqHRLKygn6RqYZS
Tp4tRnVOsJf+q3wwwhUfJD777gisOLORtfQWZ6dGhU9s61DKeCNvDnvnieJkA7XX
JPVbAR1r0bRS1pfy50xtx2yLt0O1EQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270995627729995169469335166517057654927281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 14:08:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 14:08:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.allestespark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858634538260524980209703153629982303856097551701636364984754364324768946727749033296778152429478139319738690340785487010955612954756620227382775070888307790128913593481605809000642092032118420122711260543423445273317789552817721130088404520324660643518802799924193336849411403422771953221706090495714346613889249237616255529396107939854816154582955290313612247841716908431160802434020109348201328061428604864844813100234127801714233520618756823932481364784575837045782201236777248411481686479979042473045418924837709624428584654008723886899119075764370414203503104273413421193846104010546829007688140946413917239948561070318242686266289444630762067813535478745788311552675556207143208674348276162985759487147309715770030549311442002958938187496131320399599442232769019139261190948612106336948867884161371977959997316520972276868704369116354563142233664879825281665245815385807552378222294285354971250851490439107284983318088534578251312524439319922577009763729586839154474006128971275922200304800660548840868051154449419465469100268174173108448508776337954998178510243867739150716687440991295121531390618492088991898234375507276103783728858369605940345176527042273974471428554283669702108309198708018178788115348145056068342676370923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8e4042ecc0295cef56f9722dc085a78b5dd4d11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allestespark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allestespark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001702fa4c77f0000040300473045022100bee71bc9d8967cf67b2f0c64c24e259eecf10b9fa6c0af70855949c7b79fc3cf02206065a198aea7cac6b0494fbf2dee5cbd60a2a2ce644b6971cb5c0d40eb7d63b000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001702fa4c79f0000040300473045022100d591842186acd8a143cf1d1e3a8d3f29671a37d3c303249e74682eb90207b82602204c1fd2554480c246422acb1b993799f0b1326b02bad0e38aa8bf279943123f1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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