www.sportsmedicinedenver.com

Issued by R3

About this certificate

This digital certificate with serial number 04:18:61:ee:c7:76:bd:41:3f:13:7b:1f:9b:bd:48:eb:8f:d2 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsmedicinedenver.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:18:61:ee:c7:76:bd:41:3f:13:7b:1f:9b:bd:48:eb:8f:d2
Serial Number (int): 356746095460993983686532412041109512622034
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:62:5a:72:4c:21:a5:9d:1f:22:3a:17:bf:f7:a0:24:46:55:15:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:c3:30:ec:17:61:6f:30:93:de:58:1d:aa:03:59:b1:f1:92:af:3a
Fingerprint (sha256): 0d:46:72:21:81:79:f7:e0:5b:d3:a3:20:1c:41:29:2a:c8:8a:92:b8:12:70:57:70:1f:dc:16:7f:df:f4:9d:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsmedicinedenver.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsmedicinedenver.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alberta.tel
beenymph.com
fixyourfeetprovider.com
freelancetefl.com
furnacesrepair.com
houstonideas.com
mediamarketingpro.com
montgomerysportsdoctor.com
naturalrock.com
residentialrefresh.com
roadgrabber.com
sportsmedicinedenver.com
undoingracialtrauma.org
usedstufftogo.com
www.alberta.tel
www.beenymph.com
www.fixyourfeetprovider.com
www.freelancetefl.com
www.furnacesrepair.com
www.houstonideas.com
www.mediamarketingpro.com
www.montgomerysportsdoctor.com
www.naturalrock.com
www.residentialrefresh.com
www.roadgrabber.com
www.sportsmedicinedenver.com
www.undoingracialtrauma.org
www.usedstufftogo.com
www.wwwylde.com
wwwylde.com

Other certificates including the domain name sportsmedicinedenver.com

(limited to 100 certificates)
www.leaplr.com
www.sportsmedicinedenver.com
bobmaher.com
grandcommander.com
www.bestlosangelesplumbers.com
bismarckphysicians.com
www.annarborsportsdoctor.com
kentuckysportsmedicine.com
kansasprp.com
electedasses.com
theboileroom.com
casinobonus2022.com
www.oushakrugs.com
ice-racer.com
www.harleyhat.com
www.wichitahomeremodeling.com
www.christscribe.com
uslegalmarijuana.com
www.girlscaps.com
www.myfxfunds.com
www.okredpill.com
prpaustin.com
www.sportsmedicinedenver.com
naturie.com
lacrossewihypnosis.com
mybookingcalendar.com

Certificate

The complete raw certificate details for www.sportsmedicinedenver.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fd6vgGCmEnsAGEfCtrA
W5c9EYOshTRLTPFgKxVldjFOFjwC3oXIHZ1koSdlC2MzuOuLZFMzMoAsMnQDU2IA
e93/Z8XycBcDjnwD0hsjdRfga71vRvsGiowsFHGp1MInwSoDy4MpkVus/X0e6kj7
Rz70OpgdMgGn8uKUDBm/eGwET8Zgipb59Ap9MoyuSp2/a8QNE6USUTfkgfb0vAnO
XBue+B3M9Y21CQW6qhK/A6Lefwb75YcBDJa0DH9ObsTxp0yEUAspHqS+ZetJbYjT
Cpr40dh0Go/Z14SerrnxXOobjuqDmhYDM8bwG+cIcFCKsJYrz2EBnYgqBqbe/GTn
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356746095460993983686532412041109512622034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 10:07:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 10:07:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsmedicinedenver.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27515748848597558790493399150605077469873207668955603676362310739047006028211617658083867210644761282832318845500058646585139470188570969602022684399942828299045764833324753126407371892529996884564153255872319663770717786317153466529567594068456743478213552895146563290509002318702323505353329824028670302368180816866877171196521503758318786296958846876802162142572080489250887048868106518275294399530308203282679613349906222132773731262868407518484797205766770348808521128690329220696449458767847567268880198806354721729095839380919021326266940859183894419198875664424831015814474363582238381820688426869567800010751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24625a724c21a59d1f223a17bff7a02446551575
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (666 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alberta.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beenymph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixyourfeetprovider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelancetefl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furnacesrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediamarketingpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montgomerysportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residentialrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadgrabber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinedenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undoingracialtrauma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedstufftogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alberta.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beenymph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixyourfeetprovider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancetefl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.furnacesrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstonideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediamarketingpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomerysportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residentialrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadgrabber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinedenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undoingracialtrauma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usedstufftogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwwylde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwylde.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f7befdd140000040300483046022100d872c6a8757f6961a892473b2f80f310b4ae348226bdc8eef2ee3660826cb101022100f45331dab76c51690b34897ebcefb9b6a7658a17ba561c3eabd2bfa0688c86bb0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f7befde03000004030046304402200d846ad5f514cf2af9dd9fabf22b75b8ce58eda7df3fd9ab033d46bcb04db964022014c042c8461a85e1e396788ac3ae033a32d9578fdb793fd9e1ce93179947de57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a4401fc7740b1c4237f1bbcb87bf9eb191d07a0786468dd5db45b7bfe5723f5d6cf004e63f9854f6714996a78183a54b589a4ff5cad4c133b535fade94fac38dcd3b8a04d118085473190957271a4426cf7db699385c9525304633042be7dfc2d426530c6f610428153bfd625cdf72c8e1b7d77ead548e231213e3e794133ab072d5de71f8a44ece960d5d737e1d71ff34465534c70ae720004f8108a899c5217d605fc0c66be4d677c867c4ee4588c18e91f0900d8cc827d9b2e4c8f3d78a38cdd08e08d2b2395b8343fab0b8654c51a46222446216a88f87335f833d8c21a9562680639e83e1eb3fb44edccdda6d1b8dbd883c6c18b1e84c352d8f66854526