healthsparetreats.com

Issued by R3

About this certificate

This digital certificate with serial number 03:49:d4:e1:8c:af:4f:fa:0b:0c:59:6c:e8:a8:65:c2:c8:ba was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=healthsparetreats.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:d4:e1:8c:af:4f:fa:0b:0c:59:6c:e8:a8:65:c2:c8:ba
Serial Number (int): 286460438035835844824604815679206310725818
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:24:4a:5e:8f:8d:c7:f6:14:3c:8b:d4:2f:d1:5e:63:8b:6d:33:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:49:c3:b6:59:fb:28:2e:2e:c3:aa:3a:bb:f6:b4:24:d6:fd:78:05
Fingerprint (sha256): f9:64:04:57:8c:29:fd:16:f7:39:fb:be:29:58:07:e4:13:94:70:00:31:9b:4d:11:20:92:79:68:63:ea:68:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthsparetreats.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthsparetreats.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

healthsparetreats.com
www.healthsparetreats.com

Other certificates including the domain name healthsparetreats.com

(limited to 100 certificates)
www.lawrencevillefamilylaw.com
www.shootinganelephant.com
smartexpressglass.com
wetamdstudy.com
www.ourbeautifulmess.com
www.healthsparetreats.com
www.stemcellsportstherapy.com
www.vuiclass.com
registeredmarks.com
www.venture-vestments.com
healthsparetreats.com
www.gayleatherwarriors.com
cardiopower.com
romanodilombardia.org
www.dura-sports.com
www.sonomacountyhomesearch.com
healthsparetreats.com
morphology.org
healthsparetreats.com
yrrco.com
www.thermabody.com
healthsparetreats.com

Certificate

The complete raw certificate details for healthsparetreats.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286460438035835844824604815679206310725818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 07:13:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 07:13:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthsparetreats.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738923040615150259646223754885395495648274206666066682566141599840655531293276071483001922283165382099096961301077501366919741540626675453665768108546356831045285498484780381705967039080025077418708247757571344275125186180560408855061661372014437208095593553820900000294336122960908418789990345254379150206802002280464613467297205591991150260680767228078115772691084012899213826222652907109460812164258406194311375045123847767079555828408459384636252367893202900587308430079685814262798469771726682582549723142340011710507247210577867882198029717649964903256789708223416911650489937477257450152417046671773213018943344643796113793210209427860173895549442558124039993864563837096715234294421486872346196687553372784292772925355923273157714806897035478238345816876941592262134133580925375871338545787260357268314254845336431992501539116806837456848469921669566520253058617706313426482088256788744802518336931966902380332999790335020834011426338480290856913983245510032241270207875427867913472385890102073401353897809658512698998501918743810545059788475102431828503115331014544372924556777993644149936736120392409373832956279577657039023646647853998014681081478425476738377403457611497954140375069743199716563977629408355201959498180597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78244a5e8f8dc7f6143c8bd42fd15e638b6d330a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsparetreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthsparetreats.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3cb239770000040300463044022045b183e36660256173a25ab1bd316b2d1aa76287d27ad562f5de54d20a6bab0002205d372bbfb497614274f83d97f7159e5525129ffc40b25010b05b909730b8c7e3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b3cb23970000004030047304502202ba430709defc30ecf8ab31ec2b7fc4c1979f6c0aa0a2904b28608da87f4b551022100835b6e9997bf998f2b36fd5f00809f9d8d8592d2a58aeece7e3be13b55585020
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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