run4spark.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ce:4d:9d:03:96:d5:13:bb:be:98:da:01:8a:6a:4e:90:38 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=run4spark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ce:4d:9d:03:96:d5:13:bb:be:98:da:01:8a:6a:4e:90:38
Serial Number (int): 331538191200073689254853748946734714622008
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:fe:40:a5:cd:b2:1b:50:50:d2:81:6d:2e:9b:1b:3f:93:67:8b:f3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c6:25:3f:49:7c:e8:eb:0a:d5:b4:6c:41:ff:1c:07:46:06:17:5c:b9
Fingerprint (sha256): d6:93:e2:1d:8d:fc:eb:d2:74:e0:ec:48:57:3d:f4:47:39:81:f3:2d:24:bd:50:01:4c:21:f7:bf:d3:66:c9:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate run4spark.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for run4spark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jordanchristopher.apexgreenenergy.com
jordanchristopher.com
mail.jordanchristopher.com
mail.mandarinduckbrewery.com
mail.run4spark.com
mail.townofvail.com
mandarinduckbrewery.apexgreenenergy.com
mandarinduckbrewery.com
run4spark.apexgreenenergy.com
run4spark.com
townofvail.apexgreenenergy.com
townofvail.com
www.jordanchristopher.apexgreenenergy.com
www.jordanchristopher.com
www.mandarinduckbrewery.apexgreenenergy.com
www.mandarinduckbrewery.com
www.run4spark.apexgreenenergy.com
www.run4spark.com
www.townofvail.apexgreenenergy.com
www.townofvail.com

Other certificates including the domain name run4spark.com

(limited to 100 certificates)
mail.run4spark.com
run4spark.com
sevenonthebrazos.com
simtrips.com
homesbyhappiness.com
isbupod.apexgreenenergy.com
simtrips.com
run4spark.com
mail.run4spark.com
run4spark.com
cincoaustin.com
mandarinduckbrewery.com

Certificate

The complete raw certificate details for run4spark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0kybN5x/xmNo7I/D38F
L1VyftmOuFM88nQqOqv2G3goQ++KP9Q54B+U8xAU3eWwUkUKddcJxDfdSr6tsgba
h1sjLLiIz4cvE7q2d9u/nA0xpe3a6vYVwzhCDKPXqauBNUEkaO3bR8lD9J/KrcPG
quBqtaE9gEE+Xqc+tPTgHl0o55NMWqU1nOyRWI/PJYfpdHG8XLmmcxNGJNzmSXCj
GN2umcGjTIb0O5V20awuqxha/8Zdx6fbt3xyBvvsdH55O6x9a7ri3OtIRwXPk0TR
HB7o7FfURgi2T8XLU8gQZDjxnZTz8Q+/Vk8O4lfyrVKAtcZhAcRlE9THLg0PIOCq
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331538191200073689254853748946734714622008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 06:57:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 06:57:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'run4spark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22632751361930516976707420810683336324270442299088319145848209319599726386178546073658453982516913944744344725836718768971803236956102300135765282614460492302112843263662971285661688387146221331271755016888439091955100712061063406506453247664237678419901365764499783476252660907393860954249563726592898197780280574032917225120745230267870321839562191625612460407711497795031090080990643702560790355089539312496539275792290005923110319220279302698637403839543268596063859260203100423055936984012604367320146949906396915015535407918850876880375150235552304636418458820608284431033968915068841787657969712889972180167399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44fe40a5cdb21b5050d2816d2e9b1b3f93678bf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (579 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordanchristopher.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordanchristopher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jordanchristopher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mandarinduckbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.townofvail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandarinduckbrewery.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandarinduckbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run4spark.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofvail.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofvail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jordanchristopher.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jordanchristopher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandarinduckbrewery.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandarinduckbrewery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4spark.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4spark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofvail.apexgreenenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofvail.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fa30ec5710000040300473045022028950ff4a5467325b1625dd8eec93b9ec12d24cab8bcab2d8742efd2aaf337b4022100f2a8da3274831a7d30e22532883dc52b089612678ca61272928b8cd274aef65b00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa30ec58f0000040300483046022100dab4a71a98bcc0d79d9a6cc661e67b6f5cf0e2f9471359e84187850aa272cae2022100e11fd6d23ffa6740308c4c9c0e0ca4654d45e01f0d37eb10014c91bf1bda24f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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