lexingtonsportsdoctor.com

Issued by R3

About this certificate

This digital certificate with serial number 03:de:33:08:eb:68:31:b3:2f:7d:ee:c9:f7:f9:74:b6:04:35 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lexingtonsportsdoctor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:de:33:08:eb:68:31:b3:2f:7d:ee:c9:f7:f9:74:b6:04:35
Serial Number (int): 336947380192510344963983255686407012090933
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:8b:3d:b9:e3:e7:67:5c:02:91:8a:cd:c9:f2:86:d5:2d:3f:73:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:e8:94:41:10:42:aa:df:90:45:be:19:b8:62:e1:1c:07:99:de:0a
Fingerprint (sha256): 39:8c:f6:3b:fd:ac:43:a1:f5:7e:e0:ad:cb:ff:b6:cc:7d:57:c9:3f:f8:36:dc:6c:8f:b5:42:3e:07:0e:d2:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lexingtonsportsdoctor.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lexingtonsportsdoctor.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fixallsmallenginerepair.com
grimmscher.com
lexingtonsportsdoctor.com
marilyncarter.com
mojometrics.com
safeharborhomebuyer.com
slumberchair.com
whoisalialexander.com
www.fixallsmallenginerepair.com
www.grimmscher.com
www.lexingtonsportsdoctor.com
www.marilyncarter.com
www.mojometrics.com
www.safeharborhomebuyer.com
www.slumberchair.com
www.whoisalialexander.com

Other certificates including the domain name lexingtonsportsdoctor.com

(limited to 100 certificates)
www.waterthreat.com
dynaseat.com
chiediaiuto.com
bayfilm.com
www.elcourier.com
lincolnstemcell.com
www.truthtracking.com
www.rondvaartamsterdam.com
lexingtonsportsdoctor.com
www.lexingtonsportsdoctor.com
www.furryflats.com
www.akkd.com
www.legisla.com
www.gilitzer.com
www.qeli.com
uvpondfilter.com
uragoodpup.com
gilitzer.com
thermostorage.com
www.evaliattorneys.com
www.versamento.com
mobilestemcellclinics.com
orens.coffee
www.adelekan.com
www.truthtracks.com
lofaccioadesso.com

Certificate

The complete raw certificate details for lexingtonsportsdoctor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEoxvYamJYJm0qYNHw39R22o8/EwsQ
pvkyyueC7EBBVbWNhG/wweB8YSz+UmN90c+fdfgqmLsgNFJWI64dvMwqDQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336947380192510344963983255686407012090933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 19:58:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 19:58:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lexingtonsportsdoctor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a31bd86a6258266d2a60d1f0dfd476da8f3f130b10a6f932cae782ec404155b58d846ff0c1e07c612cfe52637dd1cf9f75f82a98bb2034525623ae1dbccc2a0d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b8b3db9e3e7675c02918acdc9f286d52d3f73db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixallsmallenginerepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimmscher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexingtonsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marilyncarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojometrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeharborhomebuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slumberchair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoisalialexander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixallsmallenginerepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grimmscher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexingtonsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marilyncarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mojometrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeharborhomebuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slumberchair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whoisalialexander.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f885976000000040300463044022001b8e479fe34d262093a7cf24faae8d71a24a6245c4772bce09a25cf8fdf1d17022036a46a610b19d39e5d9504f19855e3c50a00fd6924225da26146322d8d716c2b00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f885975f8000004030046304402201fea77ed33caf04d2d602d794ee46317ed4c96d1fc2cce87f91fb3c9fd4781ba0220163bfef189b94bcba57ce162d181d55b153e1c3b5cf09e65139cf06265fb10fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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