appleacupuncture.com

Issued by R3

About this certificate

This digital certificate with serial number 04:83:30:aa:f7:b5:96:94:13:4f:bb:8b:33:e5:29:d0:bb:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=appleacupuncture.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:83:30:aa:f7:b5:96:94:13:4f:bb:8b:33:e5:29:d0:bb:3d
Serial Number (int): 393090824452089623463528618960303315532605
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:5f:8e:6c:ea:c9:c7:60:5f:d9:36:a7:81:a2:36:99:3f:56:3f:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 34:9c:4d:47:90:1c:2f:5a:2f:e8:2f:46:aa:fe:29:59:e0:3b:d5:d1
Fingerprint (sha256): 39:e3:1c:58:40:c1:33:86:bd:81:f9:28:b4:67:01:1f:b6:c2:1e:03:a6:91:f8:f6:50:26:82:41:a6:28:84:eb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate appleacupuncture.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appleacupuncture.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appleacupuncture.com

Other certificates including the domain name appleacupuncture.com

(limited to 100 certificates)
crude-oil-pod.net
appleacupuncture.com
appleacupuncture.com
vitalpines.com

Certificate

The complete raw certificate details for appleacupuncture.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393090824452089623463528618960303315532605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 17:12:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 17:12:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appleacupuncture.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680096443586845360818953126058582187681869154256201776073033102384772364857895857536970627565741930567655310567020943508893399768510315299832011997351193264833515987195772840707416019508654953670013809068098236332902358445480953186789846371158827302002003100659246691736250066272050609225571871797782864622395589847226337018498209533554859941174993482103639825787154567059148758537797437431450336272672646210549832753402049228745677194189139610817853394295845913287639991644034960828490492993308167612712823058208049514464053010320397156693917090866617659537702022072391463278912622736423051566144526067403571395603001017697077869675384629411932200148385040703957793308604210638446949102374847395916465764488728690679644711497789057006345170923726905386148873973703407068611207985548922293210635356981377397640023313494658315327806447786631064034767908276094230161027185500694395526927552481041314803429856224673404553826547495767240671338043915058972394420834258382477417504994265793303232505201726911750913789448806003287846655063172327643063874497831841634147692665281475322284674570675967447362209488195853564215505162811688884273102468991033804217114177300125957460850826298612126571071954018807470778850045704745250265564491869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a5f8e6ceac9c7605fd936a781a236993f563f8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleacupuncture.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c97e12145000004030047304502203c4d9c5e82317986a976ec3b18083fc2e929492a1288e9dc812e24b7c8d4b409022100fc48079a26ca06e3ffa2085f77d29b8bd6c20cef92c6bc7ad62119ba7ff83db500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c97e122010000040300463044022072efa495f2b83af895753721fd92a027ab533d057c4e854b3ba0bad00212f9d8022039863d1c8077b3abea984e7f085ff42b3e37e96bfba7fb842b78a5ed5a3ab3b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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