www.sportsmedicinenewmexico.com

Issued by R3

About this certificate

This digital certificate with serial number 04:34:dc:4e:5c:c2:7a:09:07:be:39:af:65:4c:bf:7c:d7:53 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sportsmedicinenewmexico.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:dc:4e:5c:c2:7a:09:07:be:39:af:65:4c:bf:7c:d7:53
Serial Number (int): 366436663846547149047002085061353312933715
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cd:a2:0d:5c:58:ec:8b:9a:61:7f:4c:d1:9e:54:c1:b3:8b:60:6d:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 76:67:75:49:f1:97:e8:5e:a0:fb:fc:37:fc:c1:ee:1d:44:4d:6b:43
Fingerprint (sha256): 56:50:a6:38:14:eb:4b:ef:91:36:22:7a:71:ee:64:d2:1d:bc:7c:cd:a3:dc:67:2a:03:07:a5:9f:35:ce:7b:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsmedicinenewmexico.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsmedicinenewmexico.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

341bergen.com
aslanstadium.com
atlanta-homes-for-sale.com
bannertelecom.com
engagenotenrage.com
eyebehold.com
gokanni.com
hotelsinknoxvilletn.com
immunicann.com
luxurylivingboston.com
ncpolkgop.org
relaxalon.com
samueltaylorlondon.com
sportsmedicinenewmexico.com
www.341bergen.com
www.aslanstadium.com
www.atlanta-homes-for-sale.com
www.bannertelecom.com
www.engagenotenrage.com
www.eyebehold.com
www.gokanni.com
www.hotelsinknoxvilletn.com
www.immunicann.com
www.luxurylivingboston.com
www.ncpolkgop.org
www.relaxalon.com
www.samueltaylorlondon.com
www.sportsmedicinenewmexico.com
www.xn--6dbdxrj1c.com
xn--6dbdxrj1c.com

Other certificates including the domain name sportsmedicinenewmexico.com

(limited to 100 certificates)
www.thedevilridesout.com
www.definition.id
www.hxtwings.com
www.stopstain.com
www.mobilityking.com
www.1-leaselock.com
www.sportsmedicinenewmexico.com
www.miwani.com
franklinbenjamin.com
consulenzaarredamento.com
www.coloradospringsstemcellcenter.com
bambooabatement.com
www.humanmissionstatement.org
47594.com
www.ooobusinesses.com
airforce-cases.com
www.ibyco.com
ibootycall.com
69480.com
kvbco.com
epoline.com
hmwco.com
www.keywestbrewscruise.com
www.1-leaselock.com
www.agilebackup.com

Certificate

The complete raw certificate details for www.sportsmedicinenewmexico.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVYxljOQfL0dN6CTlAMJ
M3CkmMBmDy5bGRo7yV4ACist1+rBSHJYVMeZ7irsojyo2htn+8CQNMk2rfaDU0s/
4JPuVKJdO/+vt4HPf51pPRyz5QMvbMlAYeBVcxE6nmyAjvM6koqO2IWWoeFt4ya1
Lk51a32F15/3H4a3LdTPFT9knu3J6PZeIZ76P44+s01T12sX2tAUsbu3WK8NNTV5
YRzePs4gE7RO4CV7ExAZv/ewpOJfT1wXNtA/zaoZ3h/eJMDpKp6Mgx7PteOtmgzb
kdLT2qCHd+xhhLoSo8l2kq5nHaaeBQic+NAOSaZBAncV9PNj/yo4otXI/SKOzMyC
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366436663846547149047002085061353312933715
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-08 06:16:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 06:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsmedicinenewmexico.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25416402994865992685528802979202921910141922525846663634110787086598917639276988070937134735037224939978003664214420361429291778459670967294431745284703247723870705419704586270420931038632554805894450500350402098586612775577643989380523871861370906648873900825040867985108429047370566505009745874364263177782038090773582987057500537909504984440411438651370493080844767180040515282149406345338414041938499108842519546467977319720038090689282347470857644936397909588293039990270552811658917130440448800465844582482020879440092227775983633985791972008430323213228011106677332457690579207261556892176625576309620854260431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cda20d5c58ec8b9a617f4cd19e54c1b38b606dc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (656 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '341bergen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aslanstadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta-homes-for-sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannertelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagenotenrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyebehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokanni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsinknoxvilletn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunicann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxurylivingboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncpolkgop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaxalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samueltaylorlondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinenewmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.341bergen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aslanstadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlanta-homes-for-sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bannertelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engagenotenrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyebehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gokanni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsinknoxvilletn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immunicann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxurylivingboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncpolkgop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.relaxalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samueltaylorlondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinenewmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--6dbdxrj1c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--6dbdxrj1c.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186c013d13500000403004630440220249262c944341fac74327ee3b9661d411ab2f5c3fc611c980877783fcdb25189022056b8ae7e1d7b79ca05727ebd1038ee3bdaf19b0a77b9f9383fc1179bac83673c007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186c013d12d0000040300483046022100c2bb786fb845eb8e40460e58b770e2abc9feec6707fca5789b384b88fd246de6022100d957225388cf3138b331bfbe3e47979066d9f5308177d305b82759ddfc6b07d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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