www.citizentruck.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7d:51:ba:ba:d8:01:bc:29:c1:3d:5b:8b:f8:9e:fd:81:26 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.citizentruck.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:51:ba:ba:d8:01:bc:29:c1:3d:5b:8b:f8:9e:fd:81:26
Serial Number (int): 303980790684914319878975012835757284753702
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 75:27:44:5d:e5:e7:99:9f:af:7e:d2:47:13:a7:44:52:32:55:7e:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 24:a1:f3:4c:54:d8:fe:6b:98:78:67:39:37:54:6b:e9:57:21:d9:a4
Fingerprint (sha256): 61:da:8e:fc:d0:6c:ea:e1:55:02:3b:fd:cd:32:f1:b8:71:05:7c:fe:3f:dc:f3:b4:c0:98:b7:7c:2f:58:16:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.citizentruck.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.citizentruck.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citizentruck.com
krazybooking.com
paintboothinstallation.com
sprayboothinstallation.com
voicetec.co
www.citizentruck.com
www.krazybooking.com
www.paintboothinstallation.com
www.sprayboothinstallation.com
www.voicetec.co

Other certificates including the domain name citizentruck.com

(limited to 100 certificates)
www.hitechautobody.com
www.armariumsecretum.com
moverssunnyvale.com
www.caswellschool.org
www.cbdexpressmart.com
geekbaittech.com
www.citizentruck.com
pledgeforlife.com
www.salestaxbyzipcode.com
www.organicoliveleafextract.com
lasvegasstemcell.org
www.prpboston.com

Certificate

The complete raw certificate details for www.citizentruck.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgISA31RurrYAbwpwT1bi/ie/YEmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjcxNjQ0NDJaFw0y
MDAyMjUxNjQ0NDJaMB8xHTAbBgNVBAMTFHd3dy5jaXRpemVudHJ1Y2suY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxygYVIMwlVAfH1O8O2izquSk
MshlV9S6o+lPihkkEJCaM2tJs7MoJkY7gK7O6KT8OIOg96Be04nf8g6ELWObtouO
KuVEKVzHctPnl1S4Bzu/FMfhrsSnc6pDEg/qJxZloMSTqe+ysskMqIDB9pZJRQDu
o3JeQZKO5P/DT5M2+H1dyyLmM4Hfr9dJ1WxkUAyzW9agFfKpaPtJORgeiFcEy7hA
3hBWO2vDBxcj1nhEd2WokPO5nsQzsowlsjwnVGZAttMbap6OsPeoWoN+6tGLYNO6
qmxY8wwMAB9OB/Yj8SEEWpOEjMXjb7yM3bPwbl4fcetT9rbemtTvo1PtkrCuzQID
AQABo4IDPTCCAzkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR1J0Rd5eeZn69+0kcT
p0RSMlV+WzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIHxBgNVHREEgekwgeaCEGNpdGl6ZW50cnVjay5jb22CEGtyYXp5
Ym9va2luZy5jb22CGnBhaW50Ym9vdGhpbnN0YWxsYXRpb24uY29tghpzcHJheWJv
b3RoaW5zdGFsbGF0aW9uLmNvbYILdm9pY2V0ZWMuY2+CFHd3dy5jaXRpemVudHJ1
Y2suY29tghR3d3cua3Jhenlib29raW5nLmNvbYIed3d3LnBhaW50Ym9vdGhpbnN0
YWxsYXRpb24uY29tgh53d3cuc3ByYXlib290aGluc3RhbGxhdGlvbi5jb22CD3d3
dy52b2ljZXRlYy5jbzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB3APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSm
sKiqjrJzAAABbq33GjIAAAQDAEgwRgIhAMZxxGUWmZLwlOpOvRRvez4FCnwddr86
14S7rdJB6re3AiEA8Cd8ZYP2Og4p8D6E2/XvRn4PCve6bKdRAVZLAhqQxHAAdgAH
t1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW6t9xpjAAAEAwBHMEUC
ID461FrGThJQ28r0ku10RCloW4fgkEYKcH5IuOYh/7eGAiEA981vIvr6usJrRNgr
RjGQ84nbcGCv0ZHIcuJwNb0BHMMwDQYJKoZIhvcNAQELBQADggEBAEo26baLx2xf
Ab7kDLc50Zp0vUfqRpHzvhIkpM68MxKxbyYTzvk1DsIwudfP6G40/A2oakDyNEg7
zbR0nvHcQYizq70jp+8Ui9MxGPgIYHML7uKkwkuM3udb3bPCwV0syTOXtbbwodVp
u93vf8q8g4GptOtfjdJqx0XTOTsOznPIBw6KwJpZwKRJvVCttjBV+WsjBJZ1fbBa
A4tNIXCK7USI7WceQNRq3jmRIcGpqJR7DZJdoiO/X1aRC3yjw+NhzIwlxvYApeZh
78JDlRxrIpu8ooX6j+9BTICqtBW+6xZu9D2OxZOj3EUznxI531C7xH5iokBElpzy
/TvZoLdjQxk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxygYVIMwlVAfH1O8O2iz
quSkMshlV9S6o+lPihkkEJCaM2tJs7MoJkY7gK7O6KT8OIOg96Be04nf8g6ELWOb
touOKuVEKVzHctPnl1S4Bzu/FMfhrsSnc6pDEg/qJxZloMSTqe+ysskMqIDB9pZJ
RQDuo3JeQZKO5P/DT5M2+H1dyyLmM4Hfr9dJ1WxkUAyzW9agFfKpaPtJORgeiFcE
y7hA3hBWO2vDBxcj1nhEd2WokPO5nsQzsowlsjwnVGZAttMbap6OsPeoWoN+6tGL
YNO6qmxY8wwMAB9OB/Yj8SEEWpOEjMXjb7yM3bPwbl4fcetT9rbemtTvo1PtkrCu
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303980790684914319878975012835757284753702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 16:44:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 16:44:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.citizentruck.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25141194289149274876693119971179038195615727974363491864895984811983195876630162887653736077380790604871111112044943185799949954359506020783763460453109259627896175396279755487175153235023046531432273876664624487088050607850853475718236861833216885726937739447214045586388562802155704239599715214552930744469041990573040479821394806192127424734104244061749448174521474696371262918068679611703910529401939555031455486959741914018062700756319653371496642227601528699106441694557188058628196235601492422193070000858594575010194470399694110123665333666965347807671482572705274314397491567995328342035253753638292053601997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7527445de5e7999faf7ed24713a7445232557e5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (233 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizentruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krazybooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintboothinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprayboothinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicetec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citizentruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krazybooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paintboothinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprayboothinstallation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voicetec.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eadf71a320000040300483046022100c671c465169992f094ea4ebd146f7b3e050a7c1d76bf3ad784bbadd241eab7b7022100f0277c6583f63a0e29f03e84dbf5ef467e0f0af7ba6ca75101564b021a90c47000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eadf71a63000004030047304502203e3ad45ac64e1250dbcaf492ed744429685b87e090460a707e48b8e621ffb786022100f7cd6f22fafabac26b44d82b463190f389db7060afd191c872e27035bd011cc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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