thomsmed.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e2:2a:6d:ea:14:be:40:16:3f:14:30:43:41:1a:e9:0f:55 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thomsmed.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e2:2a:6d:ea:14:be:40:16:3f:14:30:43:41:1a:e9:0f:55
Serial Number (int): 338297071003320669578418168599064271720277
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:55:31:32:61:c2:85:18:5f:94:d8:4b:0d:e8:fa:15:68:96:9a:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:68:a0:93:1f:6b:47:46:ab:99:84:e6:e2:23:6e:d6:8a:ec:b9:8d
Fingerprint (sha256): 15:2b:2c:59:88:e8:63:5f:40:9f:24:74:6a:8c:bb:3b:32:ea:7b:d8:9a:33:eb:a1:21:54:9a:33:f3:f7:5e:f5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thomsmed.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thomsmed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thomsmed.com
www.thomsmed.com

Other certificates including the domain name thomsmed.com

(limited to 100 certificates)
naxis.quilzer.net
doomslug.art
thomsmed.com
www.maestriajs.com
creacl.co
therxcloud.com
magnetboard.thomsmed.com
findyourfriend.app
thomsmed.com
sorted.work
thomsmed.com
sensing.thomsmed.com
conta.onlypay.com.br
thomsmed.com
rpgobjects.app
sorted.work
dev.tenantfile.org
nimabakes.com
www.joinplusone.com
fcbaythornpharmacy.ca
thomsmed.com
services.maast.com
clickcitysolutions.co.uk
agent.listingloop.com.au
admin.iotdataroom.com
www.propbets.games
www.deadhead.app
fntck.co
app.litorgize.com
www.alpcihan.com
www.wordy.co.kr
aspnetcore.thomsmed.com
www.sumbumms.com
enkatsu.org
link.lexevo.net
eve.luciano.work
shop-admin.oldgrammar.com
ma.techaula.net
www.anthonyharm.com
www.justadmin.lol
www.smart-timetable.com
emma-igarashi.art
thomsmed.com
planaday.in
thomsmed.com
staging.particle.li
link.harkpodcasts.com
agent.listingloop.com.au
www.rishtpusht.co
emoticons.thomsmed.com
aviaterobotics.com
system.sano-digital.de
univ-toho.ggtk.app
mfilm.at
shop-admin.oldgrammar.com
teslago.app
www.fabianfried.at
myprojectcorner.com
app.getdoodlebug.com
suvico-ospevic.quicklane.app
www.lyghtapp.com
www.benphilipenko.ca
ko-max.com
thomsmed.com
www.gezondinzottegem.be
www.bebagoob.com.br
breastfeeding-test.arbafoundation.com
optymalnik.pl
www.mespeck.net
lowbackpaincommunication.com
lms.soopulae.com
www.teammotorway.com
tui-id-testing.input4you.be
wndr.app
tengjiaocai.com
www.swaip.app
www.swaip.app
firebase-tut.api.camp
www.freewateratairports.com
devlinks.beautinda.de
cmfoodco.clau.io
baselabs.co
app.meetmap.co
mealiq.ai
www.fabianfried.at
www.fabexllaveros.com
langitbiruarjuna.co.id
auth.juventudefraterna.com.br
www.fantasyfootballmanager.app
firecase.thomsmed.com
link.maaloptijd.nl
www.deadhead.app
www.skick.io

Certificate

The complete raw certificate details for thomsmed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISA+IqbeoUvkAWPxQwQ0Ea6Q9VMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTcxNDQ5NDdaFw0y
MDA2MTUxNDQ5NDdaMBcxFTATBgNVBAMTDHRob21zbWVkLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMoYrdbKBiWE6+zmWOPFXe1OcnLHxRZsrRoA
WUspIRdyj39nyqJTYi5DRhBuiqHIzU2cMb1eMd5hHyKDqLgcQraNY4kQIWe2flV8
5URVMFQREWNdPm1X4fuhyYs0+NPk0PIGV58tW+zH0TK5DtZFgdFMEG2J7FJUniPa
KLeNuIyspKuAHVTd20M1LpmMG+nkEHr8kcPGPGx4x5qVjvb9zDzZ8tZ8LPYkJ/th
tqE6p/pyxhQ1fT9Vt8l/VgvvoEl8zEJkmUbqSeLe9qzw7ncXmDxbvLrSrSQ+eOSo
pow2ZJEiG+JPCZ3VrH48Qqdr44GiW9ROWqFrv4txiQExxMZHEC8CAwEAAaOCAnUw
ggJxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUBVUxMmHChRhflNhLDej6FWiWmgcw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzApBgNVHREEIjAgggx0aG9tc21lZC5jb22CEHd3dy50aG9tc21lZC5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0
APIAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXDpL8bSAAAE
AwBIMEYCIQDwW307d18+GK86G7tqzhyRxnypU8r/C25hhuRHCE1ApQIhAL3f9OpA
omhed7fbYIkiG4FmK/PS9xFUo5CWXE7hRsWVAHcAsh4FzIuizYogTodm+Su5iiUg
Z2va+nDnsklTLe+LkF4AAAFw6S/GzwAABAMASDBGAiEApf7jx39fff1FJh1SUUde
QdHgPHsv5Gg1fBUDEiJ3j5cCIQCGVKB4ZuUnu/eBh7jxRKr3xYuZyuCxr4TX9hgk
d3g3ezANBgkqhkiG9w0BAQsFAAOCAQEAecSUFRbsv6qMwoImXck/DZygG1PgrQS9
OEdfZ0oZtlJkIkE2xqE1rq/T6VDGXYLqrj38JEnViZ8WbrPnUj3tOaY9mCdAUT44
GUrZOAiwoiWtqWk34ZOVjJCeb6KzyUTiRq6UXRZ1b1QF8bpCPap28EtewoaOs7YX
SRvDJNkJmle4qCWGZG9IKZar5jV5CZCK2p6FJow4LgjOL+B1oMqbN5vwzzl4edtV
CjHSpvlQtnbL8q8Bzs8iq2/O6ufgfohoIiIgMgiw5KLYXOF5X1qcQQMG2o9QdwTm
7ss+GC9Anj1qaBON/T5xY08b75bdSZudZHv4T5CKFyDuqFSFvas9hw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhit1soGJYTr7OZY48Vd
7U5ycsfFFmytGgBZSykhF3KPf2fKolNiLkNGEG6KocjNTZwxvV4x3mEfIoOouBxC
to1jiRAhZ7Z+VXzlRFUwVBERY10+bVfh+6HJizT40+TQ8gZXny1b7MfRMrkO1kWB
0UwQbYnsUlSeI9oot424jKykq4AdVN3bQzUumYwb6eQQevyRw8Y8bHjHmpWO9v3M
PNny1nws9iQn+2G2oTqn+nLGFDV9P1W3yX9WC++gSXzMQmSZRupJ4t72rPDudxeY
PFu8utKtJD545KimjDZkkSIb4k8JndWsfjxCp2vjgaJb1E5aoWu/i3GJATHExkcQ
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338297071003320669578418168599064271720277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 14:49:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-15 14:49:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thomsmed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25512307300546049946192015695100885207408202812808065412692575872720369588178070432690384468389095721149287614882152288106547730602537612537420209979162083212027719953630278163791169999980279282977742381007431617388107138456722412977317655048898230744049416659376731440606676155768377958493596161174240682051474845474630608997249011048206473377932788576079564325839359525295825179215989955755153682207279437616879278040147116029337125052800113031363962937433751699649275131629919660954174781198682403093869368978811720885619944625815591702073579582471405369376063893885224224563669308776666113682245483069269128712239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0555313261c285185f94d84b0de8fa1568969a07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomsmed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170e92fc6d20000040300483046022100f05b7d3b775f3e18af3a1bbb6ace1c91c67ca953caff0b6e6186e447084d40a5022100bddff4ea40a2685e77b7db6089221b81662bf3d2f71154a390965c4ee146c595007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e92fc6cf0000040300483046022100a5fee3c77f5f7dfd45261d5251475e41d1e03c7b2fe468357c15031222778f970221008654a07866e527bbf78187b8f144aaf7c58b99cae0b1af84d7f618247778377b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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