sportsmedicinelexington.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:87:5d:c5:86:52:63:a0:b6:40:e8:31:df:e1:1a:37:8a was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportsmedicinelexington.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:87:5d:c5:86:52:63:a0:b6:40:e8:31:df:e1:1a:37:8a
Serial Number (int): 318003663373472096166295959253244115040138
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:b3:8c:6f:a3:5a:01:e4:9d:c9:90:05:e9:ae:67:5e:8a:05:c5:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:e6:1e:06:1d:7e:65:3a:38:03:ae:54:b3:8a:74:c0:67:3a:66:a2
Fingerprint (sha256): 3a:d8:35:4b:01:9c:0c:ab:04:56:b0:66:fa:92:44:76:e7:13:71:f6:f3:41:64:87:10:45:88:2d:ff:88:a2:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportsmedicinelexington.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportsmedicinelexington.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acurent.com
catchjames.com
charismasalon.com
customcowboyhat.com
eastwestflicks.com
frcases.com
hotmyass.com
jointpainwashington.com
just4chargers.com
muhammonet.com
oooreservation.com
operatingcases.com
sportsmedicinelexington.com
weedkillerforlawns.com
www.acurent.com
www.catchjames.com
www.charismasalon.com
www.customcowboyhat.com
www.eastwestflicks.com
www.frcases.com
www.hotmyass.com
www.jointpainwashington.com
www.just4chargers.com
www.muhammonet.com
www.oooreservation.com
www.operatingcases.com
www.sportsmedicinelexington.com
www.weedkillerforlawns.com

Other certificates including the domain name sportsmedicinelexington.com

(limited to 100 certificates)
zv.org
www.mathscube.com
www.newyorkbariatricsurgeons.com
patientegagementspecialist.org
sportsmedicinelexington.com
www.chiropractorsportsmedicine.com
gardeningneighborhood.com
www.neopore.com
guaraviton.com
www.californiaindiancasino.com
www.omahastemcellcenters.com
lodovico.com
www.withoutone.com
greatbigstore.com
3dshelters.com
samsonian.com
condominiumcoverage.com
evagonzales.com
963uni.com
dirco.com
pendantrings.com
www.kentuckystemcellcenter.com
www.hican.com
bestmeditationpractices.com
www.oaklandstemcells.com
www.treffit.one

Certificate

The complete raw certificate details for sportsmedicinelexington.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv38pEWUEtG3ch/Okw7TE
R0uXw2w9wifCEEOSFTrunnhKNKz+hn7SdqWYN/5kpH/iBjP56apsbZ2bTOW/XQ12
TY2XXfVxbzRCEGAiQWeSkHmB8CpOOKC9DJ1AoS28k8flUu2yriWe230j1eQqYpTA
3f8QduMX0dDys6Owj/oZTY8v9+1TohTMqZEmjq38p3ecbb9MCWYn8XrKWVlruqtz
APGW09COoUiaTmXucEdXrFs4jgU0Z7ovtuioAOyqPN5aVnd5SuqeuklL4yC5o9pS
BPQQAlYV17uDw6c69yEIUp9o7L97AwLqfzpc/j3kUcpLxv2YeAW1sLFeJQRSUO2x
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318003663373472096166295959253244115040138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 23:39:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 23:39:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportsmedicinelexington.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24174221389495568383657976607948134476755084942137142557278595718571796939777147696984522658029152497088030176880597849540786296544686484089251441807105264863449070271799283940166588418914033796493059022633918514374180739215158805304810789140052457791372718826612056690012724796542355601300302358649542490169793392069747373788698938817805136931087792179280819026262496304676045288930183707628290283460783632527547419750706301530192745879898111774768940357942342033116047989581259430668814772549758714736254363480365647381842246769694117531543264479869796607560248418869485723724226446950272179872948456945318225621353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97b38c6fa35a01e49dc99005e9ae675e8a05c559
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catchjames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charismasalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customcowboyhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastwestflicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotmyass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainwashington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just4chargers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhammonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oooreservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operatingcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinelexington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weedkillerforlawns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acurent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catchjames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charismasalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customcowboyhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastwestflicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotmyass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainwashington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.just4chargers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muhammonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oooreservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operatingcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinelexington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weedkillerforlawns.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de69aafba00000403004830460221008e18131e635e65d907f78acf29d2ffbb21ca59d82b3c6a974801cb02681263ea022100c1a466c6add0d2c8e9acaf4681193def6d019fc339aa70697f02cff7cb2e3f330076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016de69aafee0000040300473045022100e67612e102a93b9d96a45d613bdb5df7a153f06530bb5609362693a443c8df7402201348d9ccf3390afc558969d3b66f466b7012e6acb0b30823ec81ec73317453e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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