spreekit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 9d:b5:ff:c7:8e:c9:d0:df:fe:55:57:c9:c5:bf:2e:16 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spreekit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 9d:b5:ff:c7:8e:c9:d0:df:fe:55:57:c9:c5:bf:2e:16
Serial Number (int): 209633788894670719229775572293168082454
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 48:6d:2a:cc:99:01:30:46:1a:7b:30:db:9c:a8:6f:65:65:f7:aa:60
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): d4:c8:e8:04:34:e6:9e:75:87:34:5e:14:13:93:0a:9f:f3:b0:55:80
Fingerprint (sha256): ee:6d:a3:be:78:3b:e1:7d:db:ee:02:58:3c:90:18:e0:60:30:df:cf:65:e8:ce:67:2b:0b:dd:a3:0b:81:72:3e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate spreekit.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spreekit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spreekit.com
www.spreekit.com

Other certificates including the domain name spreekit.com

(limited to 100 certificates)
laboratoriodaluna.com.br
spreekit.com
*.spreekit.com
spreekit.com
swafpapp.com
www.kitimaagri.co.za
laboratoriodaluna.com.br
agens24.com
architekturbuero-fuhrmann.de
app.bookfocal.com
pisosrentables.com
repper.app
paiz.com.hn
chafikafroune.cf
story-synth.diegeticgames.com
*.spreekit.com
dreamlighthelper.com
staging-handshake.spreekit.com
de.spreekit.com
www.expressveiculos.com.br
spreekit.com
devvidya.com
mmp-onboarding.livingprint.com
tapiasasociados.com
proos.byggkollen.se
taxhead.de
app.dompedritoimoveis.com.br
mmp-onboarding.livingprint.com
app.nowbuttons.com
www.topmangalist.live
rexmd-pe-m.pyxal.io
spreekit.com
kubepack.dev
paiz.com.hn
www.machaweshongwe.com
app.time-blocker.com
links.hometurfapp.com
agens24.com
spreekit.com
www.floridamannft.io
app.chkfake.in
*.spreekit.com
bradysutton.net
api.heropy.dev
imoveisverana.com.br
www.melodia.nu
repper.app
link.trenddii.com
www.logicasana.com
staging-plazalowyat.macritchie.io
gestor-ops.llamafood.com
www.ezacu.com
crm.fylo.com
www.hugobergqvist.com
devvidya.com
taxhead.de
newsletters.net.au
web.cegys.sk
nl.avto-choice.com
www.taaruflalunikah.id
www.ezacu.com
www.app.amy.ac
spreekit.com
spreekit.com
prolineage.site
app.chkfake.in
pedrodev.net
digcoach.com
goldenyearsfoundations.com
www.nuj.ai
gnanadeep.dev
www.healwithvidhi.com
auth.grrrammar.de
ridian.co
staging-handshake.spreekit.com
app.time-blocker.com
www.ezrepairloan.ca
web.cegys.sk
companyinabox.ai
spreekit.com
degani.design
www.healwithvidhi.com
spreekit.com

Certificate

The complete raw certificate details for spreekit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZh20la67R7UTLdGCB3H
C3J0TIOhVH7eLmHrt8WMR8jBFDpRJR7/iVso5Spiklb1q3FFnzajfIAAQbqzrMsQ
ANuVRGSJE/pQVyzpZ5iD2TTz5/TcJrnzhFOJ92OCQ6nW29/UmlZcU5EaTg480eS7
36RtlRHGymBi8Ou1sbfs+DJdyzQMWT41cmjRM7Vme2UHxZvOIF7LTo+oxHa6/jDG
7SGv1Xk8mPXF6I4KvcHmG5GxSMKqoqcqYazyE4ya8GAfFAnFY/tJrfkxheNrrkCM
bx2C15XBaiQmWIk7R28Kc69M2yrLH/jEpeKZiG4YLVOFquqwVMp/+cpAjpdW69+g
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 209633788894670719229775572293168082454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spreekit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19389643532804226771748434417061932022996518064373568134874396782152806692372623149051687033707230653291253078008174417231174076279442359773666434451986172398324323109227396413931986964065541365183807196608645357140485428677259604477245659769672968638097534967312662461262762268253124298969829270224032076270599868685028486918780052431981514090269450814008794003099273845222466404574096996079200425909329610183011525452806330503858708328971258815518424349617256697630770759298906068121567407457547769517750860763278468472195323505297842167207789798626050536178949222143307219144336037176443448171014186594385344307221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							486d2acc990130461a7b30db9ca86f6565f7aa60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018acf6e721d0000040300483046022100ea47a3bb1fdfd3b3cba50a21ffbb54dee3df587853ebad44d1ea6399ab2903c8022100acc2cd7406fb984be3c11d00187d1fae96dfffa651270f20b983d7086163288b0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acf6e7275000004030047304502203f313f3c0f6a90d8c30b06bd87bcf4b9c8027e688f46e7b366cf393b08b8f05b022100fdf6e4f53b24cc963055d91af3f38c022c9b4cc18019f30afaba7cb8bd535e5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreekit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spreekit.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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