DV SSL/TLS Certificate for *.sparkfinancialservices.ca

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R6 AlphaSSL CA 2023)

About the *.sparkfinancialservices.ca DV SSL/TLS Certificate

This certificate with serial number 1e:e9:76:81:89:cb:2b:1d:01:fb:b5:e1 for *.sparkfinancialservices.ca was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.sparkfinancialservices.ca provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 1e:e9:76:81:89:cb:2b:1d:01:fb:b5:e1
Serial Number (int): 9566789639414601993173054945
Serial Number Length: 93 bits, 12 octets

Subject Key Identifier: 8e:41:5d:71:d0:be:dc:34:bf:2f:7f:eb:68:03:ad:92:3e:ee:fc:19
Authority Key Identifier: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (SHA-1): 03:90:41:22:97:0d:30:f4:49:75:3e:90:1d:4b:52:dd:e4:72:55:f0
Fingerprint (SHA-256): dc:ef:35:1a:b9:65:da:bb:82:90:07:92:07:23:90:14:d4:b4:11:23:ff:fe:ad:88:e4:b4:cb:d5:ae:c2:20:16

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.sparkfinancialservices.ca
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.sparkfinancialservices.ca

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.sparkfinancialservices.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9566789639414601993173054945
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 09:03:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-12 09:03:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sparkfinancialservices.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750668135621120751651970814340394938281821691541286289539630917538753101950470957254554648220573935187529513648228832289543840405632138535143549023666572823970596035323788767740692990437873483717405305220091032808438330247804759873518605983653087519880363878806814910335885454146681572123666760633240308563150428965911135134575790779904247858329144653836772848528356122476391109211381557347748759563781440491171192245036034721001654324602300192355014330095399162486625583780567665660299906026215045137348416834987932610767208372537228848083198967529604430387762528649154599265885225836519365864391493174768205249558145372331458316181953350982392046004475912134756666239059822522380315737593048053169476275441641853336056090120156583695099710959486892201126884475211913079004292740394283516650351594706210046261295267520615656772723486761130801147937754115960982755977913911870645366738764677336626735495990767669652572041065019475347496317245947534088723514956816735287516246007860128749046281689594907528863646814493387618627994465179527856771444525407471108792272474901602839610447854255147583215414522329127077107195600436618128934796931111360405569345385212542533345936144316670863519163600254633177866448489552400161479224696693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparkfinancialservices.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkfinancialservices.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e415d71d0bedc34bf2f7feb6803ad923eeefc19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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