axischiropractic.org

Issued by R3

About this certificate

This digital certificate with serial number 03:af:bb:4b:63:fa:23:4f:36:11:ad:f5:39:04:d5:7d:0c:94 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=axischiropractic.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:bb:4b:63:fa:23:4f:36:11:ad:f5:39:04:d5:7d:0c:94
Serial Number (int): 321135229091697659552166279229973257325716
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:b8:49:37:41:b0:04:2d:50:68:08:92:15:67:58:20:69:42:da:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:7e:f7:09:57:ab:53:92:20:8a:49:ee:df:c1:33:11:30:d7:46:e8
Fingerprint (sha256): 2a:84:76:01:dd:d4:7d:77:1e:7f:53:d4:5d:56:03:4c:f3:24:95:ba:c7:90:e2:a2:8f:c5:1b:0e:77:69:75:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate axischiropractic.org

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for axischiropractic.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1800bmwparts.com
ads.express
axischiropractic.org
cellarsellers.com
elasticexecutiveservice.cloud.touque.net
epikplan.com
genderequityattorneys.com
glorygirls.net
rpmauctions.com
sanantoniohomebook.com
spikedetox.com
startatruckcompany.com.messagecomplete.com
swealthyissweetandhealthy.com
www.iomcommunity.org.cdiiproperties.net
wydivorce.com

Other certificates including the domain name axischiropractic.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for axischiropractic.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISA6+7S2P6I082Ea31OQTVfQyUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTAwNDUwNTZaFw0yNDAzMDkwNDUwNTVaMB8xHTAbBgNVBAMT
FGF4aXNjaGlyb3ByYWN0aWMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwuokHnkqC9iBmRxhNPMwnRVD1S4GjuilaSAnsbF0t8ucXhBA6R3BRLXY
1fAY7rPLe/Bh1cnvjxdYrMM26KWqIxX9E2rmxwJPju57hEwzCZ4eioEueRwXGhNd
qZgEd3m9NbwiaIi3EANKlP+yJRedCFR2N4+cL/eEPlhzjd9iGmV5P5OUsf3+piBw
YYxlv2zUKpr/i525Tn8FAoTZ8LIia48gyLyENYoqP1/FpIa1AzbhXmkt/dKapa+n
iwb9ud9VJuzVCRoD6N2n3f7A0bbSj2sq5Ua0QLQCcS0Ig3LGM/JPy3D7a3sEE7es
dQcx7VhAeW+v8xZaYjc2qu/7nsJVsQIDAQABo4IDbDCCA2gwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBQ6uEk3QbAELVBoCJIVZ1ggaULa2jAfBgNVHSMEGDAWgBQULrMX
t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0
dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu
Y3Iub3JnLzCCAXQGA1UdEQSCAWswggFnghAxODAwYm13cGFydHMuY29tggthZHMu
ZXhwcmVzc4IUYXhpc2NoaXJvcHJhY3RpYy5vcmeCEWNlbGxhcnNlbGxlcnMuY29t
gihlbGFzdGljZXhlY3V0aXZlc2VydmljZS5jbG91ZC50b3VxdWUubmV0ggxlcGlr
cGxhbi5jb22CGWdlbmRlcmVxdWl0eWF0dG9ybmV5cy5jb22CDmdsb3J5Z2lybHMu
bmV0gg9ycG1hdWN0aW9ucy5jb22CFnNhbmFudG9uaW9ob21lYm9vay5jb22CDnNw
aWtlZGV0b3guY29tgipzdGFydGF0cnVja2NvbXBhbnkuY29tLm1lc3NhZ2Vjb21w
bGV0ZS5jb22CHXN3ZWFsdGh5aXNzd2VldGFuZGhlYWx0aHkuY29tgid3d3cuaW9t
Y29tbXVuaXR5Lm9yZy5jZGlpcHJvcGVydGllcy5uZXSCDXd5ZGl2b3JjZS5jb20w
EwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCi
4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYxSR1gGAAAEAwBGMEQC
IDHiGEWVyJ8ChNYt1vMibvIOTbswQOiML4QzNRayCG+DAiALcZmKCkt1one8ng0J
5m6XecW0dAlYsmbAp4rAhfIpDgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI
WUZxH7WbAAABjFJHV/MAAAQDAEcwRQIgLfzdjXt7wsQpu64duh7qNucrQs9qMOhS
4dWDKoD4y20CIQC0SYXpUTBUymc5o+c8mHEX8Q1xCFAaKyQNbgY0FtEyZjANBgkq
hkiG9w0BAQsFAAOCAQEAhZl1qF287BlQnQlQFq+JjQ3Hn+5wlESsAxKXlDho23he
VUfJeE3JOjHtTUnG6Wr4gSEZ5A+/tiqYJpcLrWy4OacaIGjhwy+pNroXivTFMELE
NQKHCsuDixYmQ419iQ9tx/CEvB3GMHe1/6gKcERjG51FAck3iuGYaGD7+eg+TEXB
BiWTJyQGhgENcBdc1YHM01pzoLHgBw9AjiN30pseqfaiMgboY2pPxtfNqDpy3Lzf
Rj8hdZtMVjdrIXy7TSAqlUWiRrXW4Ty5+XKDdWZyXbLdkc8E6/8ruqmA1yKInw4d
Rw4sOem/Oif3eQPZrV2Cd/JtrcHtUX8vlOCNhwJA+w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuokHnkqC9iBmRxhNPMw
nRVD1S4GjuilaSAnsbF0t8ucXhBA6R3BRLXY1fAY7rPLe/Bh1cnvjxdYrMM26KWq
IxX9E2rmxwJPju57hEwzCZ4eioEueRwXGhNdqZgEd3m9NbwiaIi3EANKlP+yJRed
CFR2N4+cL/eEPlhzjd9iGmV5P5OUsf3+piBwYYxlv2zUKpr/i525Tn8FAoTZ8LIi
a48gyLyENYoqP1/FpIa1AzbhXmkt/dKapa+niwb9ud9VJuzVCRoD6N2n3f7A0bbS
j2sq5Ua0QLQCcS0Ig3LGM/JPy3D7a3sEE7esdQcx7VhAeW+v8xZaYjc2qu/7nsJV
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321135229091697659552166279229973257325716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 04:50:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 04:50:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'axischiropractic.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24605690438113382566096333620027831003049263681399885959745448282346608371035611246891794824310605576085059715654674042745299359276047046869010337627546254436048076270161249361996037172806203087817873350159141170018017770477166874692510310284825933459858755066042793234879361154865684371786504265371587078572722967570776402713025282991160138667974399785060637498483204944019108905522222113364805714344649195850083059316140530217595576361807861738057066695534827266239965478765014984705652632939413538363274013379238440855494212774327734180319721925013670938514184451009889134881446499807688833874375894630904100967857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ab8493741b0042d50680892156758206942dada
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800bmwparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axischiropractic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellarsellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasticexecutiveservice.cloud.touque.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epikplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genderequityattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glorygirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpmauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniohomebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spikedetox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startatruckcompany.com.messagecomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swealthyissweetandhealthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iomcommunity.org.cdiiproperties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wydivorce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c524758060000040300463044022031e2184595c89f0284d62dd6f3226ef20e4dbb3040e88c2f84333516b2086f8302200b71998a0a4b75a277bc9e0d09e66e9779c5b4740958b266c0a78ac085f2290e007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c524757f3000004030047304502202dfcdd8d7b7bc2c429bbae1dba1eea36e72b42cf6a30e852e1d5832a80f8cb6d022100b44985e9513054ca6739a3e73c987117f10d7108501a2b240d6e063416d13266
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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