tksimplex.cc

Issued by R3

About this certificate

This digital certificate with serial number 03:89:7c:3d:c2:70:f3:ab:f9:61:ee:83:d8:15:07:b5:91:1a was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tksimplex.cc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:7c:3d:c2:70:f3:ab:f9:61:ee:83:d8:15:07:b5:91:1a
Serial Number (int): 308120687008771439698478616398913040912666
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:cc:6e:22:79:67:f4:8d:ce:11:13:9a:ef:72:84:71:ea:28:56:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2b:f5:6b:5b:05:b2:62:81:b7:2e:39:c2:13:a6:12:5e:69:46:f7:c8
Fingerprint (sha256): 31:45:c9:4a:24:ca:ae:8a:3d:db:7c:cf:87:d3:db:e1:b7:f3:ac:3c:53:4d:2c:72:49:68:09:9d:11:c2:f1:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tksimplex.cc

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tksimplex.cc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acropolis.cx.blackhillswireless.com
apotheke-rezept-frei.nl.amarsons.in
cassrolloff.com
fiftystateshalfmarathon.com
lilysnellgrove.com
millersonstreeservice.com
pearlpokerpalace.com
photoshopformarketers.com
pregnancyteststrip.com.collegeratings.net
premiumbottledwater.com
sugarcausesheartdisease.com.veteranarian.net
tksimplex.cc
tribalaffairstaskforce.com
zurich4vip.com

Other certificates including the domain name tksimplex.cc

(limited to 100 certificates)

Certificate

The complete raw certificate details for tksimplex.cc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEcSB9r+uPksEu1ZItX1
B9Y3hy1w9Wmc2mNAV3Igig48gwOZ2ER6vj+saDEHUoer/36zwq/mx6tXyG6mx39Z
+o0I7rNQFT7RYVgjhiY2jUxSQF/xeRJweBZI6IXUCffIFfkhaMXML9fnxalFVJRR
/u/TEmC2SNNl7pARg1YVe0qJ5ycbxqwnZOUca/cl1FdBhU9yAR/Xz/YLYrXP2IHV
hdsE7cOtF6yPH/lBsBOxWe4B4TpLCZZFNMR5v7XGtMp+3l/LTXbif+sGiMOYrDnI
m1ZTMCUNXlar74H6cG7hs8APdt3+NUoczh6BGz8BmtCCZc2Ll9KwRcyIpqy23f06
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308120687008771439698478616398913040912666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 22:45:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 22:45:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tksimplex.cc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19223268491227306963357058996862905429669333768817319402294821721729612390647005781992837923830676634714420052053013836425402372281324380579353427239983551500265446525364204583080061549551747545521268299561294487500100441457485693504379993403598128251290711982923914713748732718560349794429244360847209370947989838140291533627217777686252429397420341656703257086905144198220977842458919811257227361099925542004088405237220458813711256236807489418480421024693802210913525776096960008162937676118601200663860253422655954509915373942172287955647327909230576326102121422530235245969791299732391464840223784032941475969669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64cc6e227967f48dce11139aef728471ea285608
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (392 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acropolis.cx.blackhillswireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotheke-rezept-frei.nl.amarsons.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassrolloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiftystateshalfmarathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilysnellgrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millersonstreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearlpokerpalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshopformarketers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pregnancyteststrip.com.collegeratings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumbottledwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarcausesheartdisease.com.veteranarian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tksimplex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribalaffairstaskforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zurich4vip.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa06240810000040300483046022100946f568e236b44e2d13262c68873d93daecae9a3fc5dd6ca3741d9d6dd10b06f022100e3d9d00d92cabd9090a3fb321ca87a0b5995e45540c0221b2d14115d7d2a133d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa0624045000004030047304502207521b5274175aef0a6817ac256467553c4f3a8b3089f58b2544aedc20f62e0a0022100fc6252e431a0dfc620973070fbb16b55ae5cb7a99a7137e58bbcf1c7b18786f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00492feb2bee78675940f396ba6f16a69903fd5b5b6734e6f016a1037d49ec2b9b745c54e3fe2fd2ed68ceefe0a75a0f57c210b1f22423dd2105fd67ad28b503b5d77e9a75cde2393b159f0f6fddc1065fc697a127f52b8bf178dd1082b9e40034d6ca0501664b9e596535afcb54e5649bd1e66ecba008db753424ef48a73197d14196cd345ee3b26ffea015b46cbc17fa9d87d767859619fe061907d68848784701d3d1a71165ce57cc038ddd976ba3fb2c3da7cffe23e6b4d4f0f595ac46215757ca0131f98cecad0653a1496e0d5ac242b98ab76d17e176405acaa953d6ba01c1c1db876b9107a0808c191dbc47f81d7283832b9ab77454bc2b5702381fe65a