genefacelift.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:ee:c4:3e:61:ad:51:b4:07:be:14:bc:b4:de:ca:9b:b2 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=genefacelift.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:ee:c4:3e:61:ad:51:b4:07:be:14:bc:b4:de:ca:9b:b2
Serial Number (int): 318141105922585774548904660816958503689138
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:23:d8:f7:8b:7a:ed:ac:a9:b7:4e:b1:fb:b0:45:6a:80:2f:85:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fa:aa:0a:0a:82:5b:96:d3:74:98:b8:b8:0f:0c:f8:5c:33:d4:58:47
Fingerprint (sha256): 3a:e8:d3:d1:5a:5b:a7:84:e0:25:d5:02:2c:6a:f5:9c:5e:76:a6:fe:f8:9d:bc:17:27:98:49:b5:03:f4:8b:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate genefacelift.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for genefacelift.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

genefacelift.com
genefacelift.fightbcnow.com
jesusdailydating.com
jesusdailydating.fightbcnow.com
mail.genefacelift.com
mail.jesusdailydating.com
www.genefacelift.com
www.genefacelift.fightbcnow.com
www.jesusdailydating.com
www.jesusdailydating.fightbcnow.com

Other certificates including the domain name genefacelift.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for genefacelift.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA6buxD5hrVG0B74UvLTeypuyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTMxNDA5NThaFw0x
OTA2MTExNDA5NThaMBsxGTAXBgNVBAMTEGdlbmVmYWNlbGlmdC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ02HXj9Gr4VBMhVWzhxup95rtoHYW
tOXLqdN3q9YSivZqGkWjrNpr7ARA3+QM9+aBGRMKgtdYzv397iSiLzF/zrV1PiNI
2PExtzlSLbAmid3DfdfkYS0A5fCg5+PIpE15JNmyfg6oUKrNvZnJ16pxG9Sul4nF
K23DRVDGuIr2IteUaE1UnmEJKZNN0sr2lHTlPQYiuWpN2gRWWXaeyGdUipbAlDB3
J7goxtqezmwKEMMxCJWmyaW6zJCZe6Z8VHuXKxQyrdRljMKBsytnFGXhm+8Q6Pvg
Yw6BSsZ8sXduu/rOCRLjHSLPL+hk9SiCn8ErvnPDI1e/vI9mk+3XIUbFAgMBAAGj
ggNmMIIDYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFQj2PeLeu2sqbdOsfuwRWqA
L4WrMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggEbBgNVHREEggESMIIBDoIQZ2VuZWZhY2VsaWZ0LmNvbYIbZ2VuZWZh
Y2VsaWZ0LmZpZ2h0YmNub3cuY29tghRqZXN1c2RhaWx5ZGF0aW5nLmNvbYIfamVz
dXNkYWlseWRhdGluZy5maWdodGJjbm93LmNvbYIVbWFpbC5nZW5lZmFjZWxpZnQu
Y29tghltYWlsLmplc3VzZGFpbHlkYXRpbmcuY29tghR3d3cuZ2VuZWZhY2VsaWZ0
LmNvbYIfd3d3LmdlbmVmYWNlbGlmdC5maWdodGJjbm93LmNvbYIYd3d3Lmplc3Vz
ZGFpbHlkYXRpbmcuY29tgiN3d3cuamVzdXNkYWlseWRhdGluZy5maWdodGJjbm93
LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
aXeaXCMAAAQDAEcwRQIgP8vnaZzi58bkWGnPFjlxNKL+WHPVRq1VE4Id6twY+BwC
IQDvS/nZ18wB6eiBhbU1kYifnOCATCzn9uJRw1wFXBowBwB1ACk8UZZUyDlluqpQ
/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaXeaXncAAAQDAEYwRAIgZMApMJk5gD9v
FGzCqjta0QUWwM388vYMkQOw0fPdQVYCIF8Q8x4ugoQ5RUbL1C2wjAt8aMQTUxNC
ZSKaF/Mbg71fMA0GCSqGSIb3DQEBCwUAA4IBAQBr5AKspWzBjcTdB3VzKyTbVTIc
RPSI03b9w1v+blBpCtMF1VY2fri0z9Yi0HsrtjkBrGkrQlKN2/VA5+EuTxgo2rjn
20c2q4YSNZfb5CmT39BCKpSEDVkpWjZNPQbaG29A8oMxRXpIihhpHzD70Wi61fiJ
cO+YC6G9ifaAXa+aE6vdS6eQjeAuiFKzMBJIgN3kUQzr9iX4eNjZxmOnwRUtZNXr
ms6HJOlnhRv334WypsGBjEevjIRJeWONg9qD1eRQ2dQl3KD61+K8Th2DrNDFIJaB
Z5EqqTiDuc7/nVRpgZBjJCj9jlidhWmyTlymVHbdm808U061Y5HaeBPWiN6O
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dNh14/Rq+FQTIVVs4cb
qfea7aB2FrTly6nTd6vWEor2ahpFo6zaa+wEQN/kDPfmgRkTCoLXWM79/e4koi8x
f861dT4jSNjxMbc5Ui2wJondw33X5GEtAOXwoOfjyKRNeSTZsn4OqFCqzb2Zydeq
cRvUrpeJxSttw0VQxriK9iLXlGhNVJ5hCSmTTdLK9pR05T0GIrlqTdoEVll2nshn
VIqWwJQwdye4KMbans5sChDDMQiVpsmlusyQmXumfFR7lysUMq3UZYzCgbMrZxRl
4ZvvEOj74GMOgUrGfLF3brv6zgkS4x0izy/oZPUogp/BK75zwyNXv7yPZpPt1yFG
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318141105922585774548904660816958503689138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 14:09:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 14:09:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'genefacelift.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27497948623162526517062969235073995753758556364961436655959492328553617601777985921282055535035410906596811723134423907192284443931967416551387203973267113359704600097560797593836927627103799692294576657819602478157409682312697995260447317500458656780382894969251064026915836751204356191257816989143879425232051060585814943265636452324924433629318602591663778810490122168205766274087528340219175806678424291106001704960161893894285574991156749412289553682993053876169747463001860065103905809782441001800508310623154854416772229452001488585973365414656198793787307062882027438759174203640798316058541272999205512758981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5423d8f78b7aedaca9b74eb1fbb0456a802f85ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genefacelift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genefacelift.fightbcnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusdailydating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusdailydating.fightbcnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.genefacelift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jesusdailydating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genefacelift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genefacelift.fightbcnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusdailydating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusdailydating.fightbcnow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169779a5c23000004030047304502203fcbe7699ce2e7c6e45869cf16397134a2fe5873d546ad5513821deadc18f81c022100ef4bf9d9d7cc01e9e88185b53591889f9ce0804c2ce7f6e251c35c055c1a3007007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169779a5e770000040300463044022064c029309939803f6f146cc2aa3b5ad10516c0cdfcf2f60c9103b0d1f3dd415602205f10f31e2e8284394546cbd42db08c0b7c68c41353134265229a17f31b83bd5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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