sex-store.org

Issued by R3

About this certificate

This digital certificate with serial number 03:5c:b9:c1:37:cd:b1:d0:7d:ae:b1:82:b8:45:55:9d:ed:05 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sex-store.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:b9:c1:37:cd:b1:d0:7d:ae:b1:82:b8:45:55:9d:ed:05
Serial Number (int): 292889745976350317649814928343102748749061
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:62:05:41:e5:b8:00:4f:8a:6e:e2:23:85:0f:e3:73:6f:06:18:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:b3:9e:9a:8e:e0:b8:76:af:47:30:39:7d:2e:e5:47:ea:f6:a9:d6
Fingerprint (sha256): 9d:0c:56:73:4d:ce:5c:b6:4b:99:a8:22:c7:30:bc:68:b0:c1:fc:fd:a6:01:52:41:3f:6b:26:09:93:05:59:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sex-store.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sex-store.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bhopaldentist.in
blaschka.com.fckedup.com
digitalsharksllc.com
gensteads.com
linkerfirewood.com
madeinnfts.com
petitesannones.com
sex-store.org
sexorgasm.com.www.stewardingyourinfluence.net.lexingtongop.org
spartanburgrv.com
ursman.com

Other certificates including the domain name sex-store.org

(limited to 100 certificates)
5272653.ca
chrisburns.ca
trailerupholstery.ca
kiesza.ca
sex-store.org
kiesza.ca
leaselock.ca
sex-store.org
trailerupholstery.ca
sex-store.org
5272653.ca
tv4.co.za
sex-store.org
sundayschoolmadesimple.org
sex-store.org
technology.world
shepper.ae
5272653.ca
trailerupholstery.ca
zinnia.engineering
sex-store.org
enerpactoolsgroup.asia
p-c.co.za
frankvoice.org.adultmoves.com.sex-store.org
sex-store.org
trailerupholstery.ca
5272653.ca
technology.world
sex-store.org
wales.healthcare
shepper.ae
allanblock.on.ca
arbitrage.gd
trailerupholstery.ca
technology.world
kiesza.ca
sex-store.org
shepper.ae
trailerupholstery.ca
trailerupholstery.ca
kiesza.ca
trailerupholstery.ca
shepper.ae
trailerupholstery.ca
trailerupholstery.ca
technology.world

Certificate

The complete raw certificate details for sex-store.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF1TCCBL2gAwIBAgISA1y5wTfNsdB9rrGCuEVVne0FMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjUyMjAyNTBaFw0yNDAzMjQyMjAyNDlaMBgxFjAUBgNVBAMT
DXNleC1zdG9yZS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD
qL9tt68QoUiTvfX8aQ+PI11u5IVolXHCj/NoBWBqYP4N761lscBZiX7UZuCkrJkW
Rzb/eryxfHUaKtj3bZcARVID7o7roVmgkiVMsj+UQcilopK7vETh703y+fJjTPBB
4sNu91qUvBrrSSzmangfXkcNy6evPFwCwt+eJvVVXbgbAwQjW4DB14eb60DdLojt
MrdCcSISuH5Yp0LzE8wDO9j2V4N9kWIrL8qGYhKu/Mp6waVOq1lQdt6at9HTG/gJ
LASXFrva5VPyfx8lvTQRwGeNKTdMWcec4wo+YimDFWRNFcW/aPlfNexl6kwjVfpv
ypoHgxBetStSxm/elsBRAgMBAAGjggL9MIIC+TAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFNliBUHluABPim7iI4UP43NvBhgkMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIBAgYDVR0RBIH6MIH3ghBiaG9wYWxkZW50aXN0LmlughhibGFzY2hrYS5jb20u
ZmNrZWR1cC5jb22CFGRpZ2l0YWxzaGFya3NsbGMuY29tgg1nZW5zdGVhZHMuY29t
ghJsaW5rZXJmaXJld29vZC5jb22CDm1hZGVpbm5mdHMuY29tghJwZXRpdGVzYW5u
b25lcy5jb22CDXNleC1zdG9yZS5vcmeCPnNleG9yZ2FzbS5jb20ud3d3LnN0ZXdh
cmRpbmd5b3VyaW5mbHVlbmNlLm5ldC5sZXhpbmd0b25nb3Aub3JnghFzcGFydGFu
YnVyZ3J2LmNvbYIKdXJzbWFuLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYG
CisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABjKM3eU0AAAQDAEgwRgIhAPUziMQv43FCvQheH+3Kf6J5d7dqXGtO
wlBXEK4W95dHAiEAsncbWYLQYTF47ISBs4g6q8ePlVo1ucjs6SgA0nCtUGgAdwA7
U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYyjN3lVAAAEAwBIMEYC
IQDwvKxo5l206mD/5GXmGGb5c2ClHzF3b2BhJYWi/e/HBgIhAOZ6Tvget+H7afUd
ECbr3IFdG69Qc0Jb5rhx7+a4GuwnMA0GCSqGSIb3DQEBCwUAA4IBAQBoTxJGPZQ/
HRSo64RwYNULnJafQ92yUHUotvlAarwj77rl2Gty3tS6R+O5joFWREOI9n1eqL97
kWikuQEAq638U8l53TSLpkM/w0aeEPqtJZeNMbVpuIuXjfjq9rF6Nt2IUgOVypdK
/Rk05di+nrXSBDvjScXKJ436PrEu/eAelu5o8A7Jv1JR53jS3jd9JiHXMLRCIPQx
srMNWLHCwMTpmPsaURJsaZJMEc/PxldhH2d2g/tl7WU1u9l8pkQIIRc9sOMUhgyo
I8WgAlRF4B4CVHIk4FJbGaRmf7JShAo3j+ZBbHNtBSnZYeStDpdV3Sq4+z02f2wt
TbRWCO+0/PSQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6i/bbevEKFIk731/GkP
jyNdbuSFaJVxwo/zaAVgamD+De+tZbHAWYl+1GbgpKyZFkc2/3q8sXx1GirY922X
AEVSA+6O66FZoJIlTLI/lEHIpaKSu7xE4e9N8vnyY0zwQeLDbvdalLwa60ks5mp4
H15HDcunrzxcAsLfnib1VV24GwMEI1uAwdeHm+tA3S6I7TK3QnEiErh+WKdC8xPM
AzvY9leDfZFiKy/KhmISrvzKesGlTqtZUHbemrfR0xv4CSwElxa72uVT8n8fJb00
EcBnjSk3TFnHnOMKPmIpgxVkTRXFv2j5XzXsZepMI1X6b8qaB4MQXrUrUsZv3pbA
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292889745976350317649814928343102748749061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 22:02:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 22:02:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sex-store.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24699682094113119281078781935386055429345064430624702373169506386022251415795879877933526820857122372090906836725411765386612954451873648072497566378496924301915582101876026461994474702886596178799345128211619206750685474039865039639991854709601077889209198267619438265851907198310796600845732943644626401978107200421475089455338616427159511099737939466135194581628893913024213733314873899636627412894144881952338924559580431949546034898693712303506258634197285399167353300256608013201413370791517410876930626074152525307793242931959668204811663982065917360017240326015727624910751519456172614649769353297071812558929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9620541e5b8004f8a6ee223850fe3736f061824
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhopaldentist.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaschka.com.fckedup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalsharksllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gensteads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkerfirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeinnfts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petitesannones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sex-store.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexorgasm.com.www.stewardingyourinfluence.net.lexingtongop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartanburgrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ursman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca337794d0000040300483046022100f53388c42fe37142bd085e1fedca7fa27977b76a5c6b4ec2505710ae16f79747022100b2771b5982d0613178ec8481b3883aabc78f955a35b9c8ece92800d270ad50680077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca33779550000040300483046022100f0bcac68e65db4ea60ffe465e61866f97360a51f31776f60612585a2fdefc706022100e67a4ef81eb7e1fb69f51d1026ebdc815d1baf5073425be6b871efe6b81aec27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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