tksimplex.cc

Issued by R3

About this certificate

This digital certificate with serial number 04:80:5b:55:42:fb:f5:41:9e:b9:c2:93:be:0e:3d:24:b9:73 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tksimplex.cc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:5b:55:42:fb:f5:41:9e:b9:c2:93:be:0e:3d:24:b9:73
Serial Number (int): 392126689144371718503825893211376028268915
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 02:08:d3:dd:dd:7d:ab:d5:9f:74:1f:04:40:3e:75:1b:96:91:ba:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 14:b6:f3:16:e2:90:a3:f8:d3:46:86:89:c7:4e:0e:15:91:22:df:59
Fingerprint (sha256): 12:7d:4e:1c:f8:2d:91:62:ac:6d:ea:84:35:5a:65:34:fd:7e:9a:a1:22:4d:62:bb:1b:aa:c1:63:53:60:a0:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tksimplex.cc

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tksimplex.cc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

choosefoodnotmedicine.com
flippa.rulesformarketing.com
gotpoisonivy.org.horsecommunityassociation.org
happyjoynews.com
honestsolarfl.com.minizip-ng.com
honestsolarusa.com
rxsugarenergy.com
seggers.top.shippingcontainergrannyflat.com
theaspi.org
thebloodsugarcompany.com.necklace.us
theymarketer.com
tksimplex.cc
weegenssalvage.com
www.alpacablanket.com

Other certificates including the domain name tksimplex.cc

(limited to 100 certificates)

Certificate

The complete raw certificate details for tksimplex.cc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISBIBbVUL79UGeucKTvg49JLlzMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDgxMTU5MDRaFw0yNDAzMDcxMTU5MDNaMBcxFTATBgNVBAMT
DHRrc2ltcGxleC5jYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKq6
YZYKw8zSEX+Ih+y/44par7PsDO+eKcnzlHtUezQ1AvQ+A1wjatj3EqalGhKm9vP5
IDuCwARv6e1lt/9t2GT5iVMfMnlGXCZRBTinKQVYiLj6d/3x1Qbqm8Vo7Jntmrxi
KFMJIRbeiel3lVE5an77yrKPZF6y1P7mLk+FjeNo4nS7wWDzFc/Jm8YG6kgcj4HL
Ylm6403pDmd4CKVX/dl6L3aDYO3bptQeXZaCHbO4zx4QWGxSPFaDnJzAqkSNcAQC
UrDmOmOCniMqHxen3J0BGOODFx1VLar78sHxgT3vticommFUszSoB24ipqD14hz3
suvNBx7Z7dVskkR6280CAwEAAaOCA3YwggNyMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUAgjT3d19q9WfdB8EQD51G5aRuk0wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA
5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu
by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w
ggF8BgNVHREEggFzMIIBb4IZY2hvb3NlZm9vZG5vdG1lZGljaW5lLmNvbYIcZmxp
cHBhLnJ1bGVzZm9ybWFya2V0aW5nLmNvbYIuZ290cG9pc29uaXZ5Lm9yZy5ob3Jz
ZWNvbW11bml0eWFzc29jaWF0aW9uLm9yZ4IQaGFwcHlqb3luZXdzLmNvbYIgaG9u
ZXN0c29sYXJmbC5jb20ubWluaXppcC1uZy5jb22CEmhvbmVzdHNvbGFydXNhLmNv
bYIRcnhzdWdhcmVuZXJneS5jb22CK3NlZ2dlcnMudG9wLnNoaXBwaW5nY29udGFp
bmVyZ3Jhbm55ZmxhdC5jb22CC3RoZWFzcGkub3JngiR0aGVibG9vZHN1Z2FyY29t
cGFueS5jb20ubmVja2xhY2UudXOCEHRoZXltYXJrZXRlci5jb22CDHRrc2ltcGxl
eC5jY4ISd2VlZ2Vuc3NhbHZhZ2UuY29tghV3d3cuYWxwYWNhYmxhbmtldC5jb20w
EwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBI
sONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYxJgpg5AAAEAwBIMEYC
IQC7Sm0+BTnTaSIcCxHw/Sg01nQlnv/I7hduxFsOD2viqAIhANflBgJAekEuRWyV
1W7WBceLzXS/lk+CcxAu+XtIWrkVAHYAKdA6G7Z0qnEc0wNbZVfBT4qni0/oOJRJ
7KRT+US9JGgAAAGMSYKY/AAABAMARzBFAiEA7BgHeQeAXMjpSY+RFRI/Ql4oVosO
80lcg+EHwUEBWeoCIEPcrEky4EPOZnUhN9OAjHDGgNeJu3deZaANhj4T9wsjMA0G
CSqGSIb3DQEBCwUAA4IBAQCzlqHR+VrGSEGPpWHeZ5xAgZtPZMhsy1gQQ7+SXFJw
8YxdGslmhWIIflBMEQ31LT87loFywYlcRCN04ymTmGIoIBZgOCwZ8/ZpVNfY5toC
ZPZXzqYGJg2j8bSd4xWP/dS+OTqMm5Lo62Dr0K3TmhAMTwg6yUSsBvT4WYp8SNG3
IZeoDIqWHvWHQuPrl0exr2b36CA5XjMnFIIEu5iM8PjpW69QfPV89BQFYWsQb5k0
vT4mUIg99kx++lRPiL/O7YpCBSM1XcwAXLnAnsQS498VtVjOeAtLzXXgnq5r3Ky1
A4NTTIRvIAj+dT2M/pfkVcxpaL2ZiV+JXwtvjHXW6lSc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrphlgrDzNIRf4iH7L/j
ilqvs+wM754pyfOUe1R7NDUC9D4DXCNq2PcSpqUaEqb28/kgO4LABG/p7WW3/23Y
ZPmJUx8yeUZcJlEFOKcpBViIuPp3/fHVBuqbxWjsme2avGIoUwkhFt6J6XeVUTlq
fvvKso9kXrLU/uYuT4WN42jidLvBYPMVz8mbxgbqSByPgctiWbrjTekOZ3gIpVf9
2XovdoNg7dum1B5dloIds7jPHhBYbFI8VoOcnMCqRI1wBAJSsOY6Y4KeIyofF6fc
nQEY44MXHVUtqvvywfGBPe+2JyiaYVSzNKgHbiKmoPXiHPey680HHtnt1WySRHrb
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392126689144371718503825893211376028268915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 11:59:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 11:59:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tksimplex.cc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21552419837292375511579089768818407174702189331624724654700744610753126333115346832174014769413813436886161046494615513875180652703052368973370867869076550390669992549389692097217263917180017408640616300220895577394097577949927511841070541605693909149450243773389678866029859110153831837995134076399477839086856425528204825051998904853477932548730894975228846827334283551368632380914665662296092950090351128878872710738070473150596841548479770515015370106434748434038947283321120440639146302677303730138382776045417652445971029964299156823566192011175776392135583309083815704435504336472960132172596571423253750012877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0208d3dddd7dabd59f741f04403e751b9691ba4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choosefoodnotmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flippa.rulesformarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotpoisonivy.org.horsecommunityassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyjoynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honestsolarfl.com.minizip-ng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honestsolarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seggers.top.shippingcontainergrannyflat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theaspi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebloodsugarcompany.com.necklace.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theymarketer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tksimplex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weegenssalvage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpacablanket.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c498298390000040300483046022100bb4a6d3e0539d369221c0b11f0fd2834d674259effc8ee176ec45b0e0f6be2a8022100d7e50602407a412e456c95d56ed605c78bcd74bf964f8273102ef97b485ab91500760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c498298fc0000040300473045022100ec18077907805cc8e9498f9115123f425e28568b0ef3495c83e107c1410159ea022043dcac4932e043ce66752137d3808c70c680d789bb775e65a00d863e13f70b23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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