rxsugarauthorized.com
Issued by R3
About this certificate
This digital certificate with serial number 04:ba:d7:16:33:c0:8a:53:ca:91:ab:33:4e:32:34:81:59:c3 was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=rxsugarauthorized.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ba:d7:16:33:c0:8a:53:ca:91:ab:33:4e:32:34:81:59:c3Serial Number (int): 412027563273617692687342882974432879532483
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6f:06:6f:24:9d:33:5c:07:9d:89:ce:23:fc:0b:29:6b:59:ef:94:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 32:90:c7:25:29:d9:40:e7:50:e6:b5:5b:de:f6:f3:0d:57:1c:81:3a
Fingerprint (sha256): 28:e2:82:e3:b0:6f:e7:05:9b:61:38:9c:76:de:c4:08:6f:3f:75:36:63:9f:69:f9:76:e4:c8:7c:6a:b6:a3:d4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate rxsugarauthorized.com
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rxsugarauthorized.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
changingyourvote.com
ftdodge.com
gaybookstores.com.haakoncounty.com
hempjv.com
hempvap.com
itsprettyugly.net
latinstuff.com.garageskin.com
nukkai.com
officeafter.com
paradiseaintcheap.com
ruato.com
rxsugarauthorized.com
sainikfarms.in
shoes4vip.com
smileessence.in
stockinvestingtutorials.com
xn--lgbt-lge-c6a.de.deserthomemls.com
ftdodge.com
gaybookstores.com.haakoncounty.com
hempjv.com
hempvap.com
itsprettyugly.net
latinstuff.com.garageskin.com
nukkai.com
officeafter.com
paradiseaintcheap.com
ruato.com
rxsugarauthorized.com
sainikfarms.in
shoes4vip.com
smileessence.in
stockinvestingtutorials.com
xn--lgbt-lge-c6a.de.deserthomemls.com
Other certificates including the domain name rxsugarauthorized.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for rxsugarauthorized.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgISBLrXFjPAilPKkaszTjI0gVnDMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTMwNDU5MTBaFw0yNDAzMTIwNDU5MDlaMCAxHjAcBgNVBAMT FXJ4c3VnYXJhdXRob3JpemVkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAKQs9spae+tSS5zzvBse7Vc221ZFXcsmxpZ/IQstOOLVEEWoW7x9zNrR cF3zDpHk2N+t61os5Euw0ERHd26DBqjrMh0QOx4V7XkDm3U/g59qKeNCmWiJWQq+ 9Q3V0lcWUdBVhCsfVxL7iMgW3ljfCquuQiIgZ3K5mtkv0bWaUsULNHqkYCvk0FXF hcDTrMJddE5zhLpogI2q9IBQG+PfKiZfUUlzjqxjnnPKQfRfU5o/3o+CpVumVcjs nCl0Z9pwuruQVh7tmKGYvoVaGx6WZ0BjzdygInw6Tm31Hf0MwAY767BWxckYJn2V M/7x80YaYCpEYdyQ+ZdH5m1mW1AmTwUCAwEAAaOCA2EwggNdMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUbwZvJJ0zXAedic4j/Aspa1nvlKUwHwYDVR0jBBgwFoAUFC6z F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl bmNyLm9yZy8wggFpBgNVHREEggFgMIIBXIIUY2hhbmdpbmd5b3Vydm90ZS5jb22C C2Z0ZG9kZ2UuY29tgiJnYXlib29rc3RvcmVzLmNvbS5oYWFrb25jb3VudHkuY29t ggpoZW1wanYuY29tggtoZW1wdmFwLmNvbYIRaXRzcHJldHR5dWdseS5uZXSCHWxh dGluc3R1ZmYuY29tLmdhcmFnZXNraW4uY29tggpudWtrYWkuY29tgg9vZmZpY2Vh ZnRlci5jb22CFXBhcmFkaXNlYWludGNoZWFwLmNvbYIJcnVhdG8uY29tghVyeHN1 Z2FyYXV0aG9yaXplZC5jb22CDnNhaW5pa2Zhcm1zLmlugg1zaG9lczR2aXAuY29t gg9zbWlsZWVzc2VuY2UuaW6CG3N0b2NraW52ZXN0aW5ndHV0b3JpYWxzLmNvbYIl eG4tLWxnYnQtbGdlLWM2YS5kZS5kZXNlcnRob21lbWxzLmNvbTATBgNVHSAEDDAK MAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjGHB9skAAAQDAEYwRAIgINl+zU+AqSB3 6s0i6Az9NLK6UbF7b9VPNKLDFLg64yICIHhm5X74pcFP3hSWiyKhBeiGhWNecf3A YYiG/Wk86CbSAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGM YcH3BQAABAMARzBFAiEAsRpUlHM71ZZfRAOwhsT5xgWO4E9gqJJLmmTN4EexT0QC IE1Hn7rvPBxGmbT0x74cFdcGWPtSGqNDcQYyNkbFIak/MA0GCSqGSIb3DQEBCwUA A4IBAQBsbi0HZBi06wTwxNjlWT25llbnSp9L5fEOjXKhs/NphzX+ucVhKQ1LzUau SYYlBS4Q3IwLnrKRyNLgxaQ/nzshZvlcxM5TfDB0a4SiFdMkbD5k3k67WxtskBZx xqIXuhGRdEYc33C0eIsoMN3Khmqf5D8mCg1gEoWh9Q3z8uaUMEXR/B81Ngimz9Uf yMvMwS9sAbbCyOfdgLxcp8W+rTctxikVpSePgt1BUaIdgQ1lMyIqVbW8GgBPQsT1 4loihFP6DKOESfWna4lUu83F6wdpRAoVfFWKlAPwQGFKcSyXoTxzuevpTRk0z/n3 XCBq6/8VbjgKkYzbMbkcYAKt5o82 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCz2ylp761JLnPO8Gx7t VzbbVkVdyybGln8hCy044tUQRahbvH3M2tFwXfMOkeTY363rWizkS7DQREd3boMG qOsyHRA7HhXteQObdT+Dn2op40KZaIlZCr71DdXSVxZR0FWEKx9XEvuIyBbeWN8K q65CIiBncrma2S/RtZpSxQs0eqRgK+TQVcWFwNOswl10TnOEumiAjar0gFAb498q Jl9RSXOOrGOec8pB9F9Tmj/ej4KlW6ZVyOycKXRn2nC6u5BWHu2YoZi+hVobHpZn QGPN3KAifDpObfUd/QzABjvrsFbFyRgmfZUz/vHzRhpgKkRh3JD5l0fmbWZbUCZP BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 412027563273617692687342882974432879532483 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 04:59:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 04:59:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rxsugarauthorized.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20725254601627922425285908161680776051399584842823928054648057653683371222587402328025725755070227243984123171163502181155589610571215535428251961055650097162540514327408535751413665727434391913388784483095414911343951745566909173010815632912896492663174376264798634346120005820442813467094912404417768167354405551673044842840698435642746777678699442993798665022981314960510853120960125230215123672166504529401667251448663155177362410475550499400340722609291909602489690350070994950331540973461928556251629004734936556676719120389899267012528900054241542502705059893400731334232280884459707854428835430519943608028933 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6f066f249d335c079d89ce23fc0b296b59ef94a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (352 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changingyourvote.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftdodge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaybookstores.com.haakoncounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempjv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempvap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsprettyugly.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latinstuff.com.garageskin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nukkai.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeafter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradiseaintcheap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarauthorized.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainikfarms.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoes4vip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smileessence.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockinvestingtutorials.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lgbt-lge-c6a.de.deserthomemls.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c61c1f6c90000040300463044022020d97ecd4f80a92077eacd22e80cfd34b2ba51b17b6fd54f34a2c314b83ae32202207866e57ef8a5c14fde14968b22a105e88685635e71fdc0618886fd693ce826d2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c61c1f7050000040300473045022100b11a5494733bd5965f4403b086c4f9c6058ee04f60a8924b9a64cde047b14f4402204d479fbaef3c1c4699b4f4c7be1c15d70658fb521aa3437106323646c521a93f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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