www.sportsmedicineindiana.com

Issued by R3

About this certificate

This digital certificate with serial number 03:59:82:d5:0c:84:45:a1:7a:32:5e:9d:01:f7:16:3b:51:23 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sportsmedicineindiana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:82:d5:0c:84:45:a1:7a:32:5e:9d:01:f7:16:3b:51:23
Serial Number (int): 291795894303795752545369844618687724343587
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:b7:7e:62:fc:79:48:cb:a7:92:47:63:0e:ec:7d:5e:e3:ee:f0:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cb:ba:46:96:cd:18:04:25:a6:a3:9a:83:85:4d:a5:8f:2c:1a:3b:08
Fingerprint (sha256): a9:76:59:fa:55:3d:9d:76:0e:36:99:c7:75:59:28:07:ce:9d:70:47:be:74:20:6d:74:e2:22:d0:52:ef:88:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsmedicineindiana.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsmedicineindiana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

badiali.pizza
contentministry.org
creado.stream
hapticninja.com
igiftsightcanada.ca
kokorotokarada.com
rvhba.org
sportsmedicineindiana.com
summerprizeclub22.com
technicallyspeaking.ca
tipobet5055.com
tretinoin-canada.com
unitedstates.me
wateriswet.org
www.badiali.pizza
www.contentministry.org
www.creado.stream
www.hapticninja.com
www.igiftsightcanada.ca
www.kokorotokarada.com
www.rvhba.org
www.sportsmedicineindiana.com
www.summerprizeclub22.com
www.technicallyspeaking.ca
www.tipobet5055.com
www.tretinoin-canada.com
www.unitedstates.me
www.wateriswet.org
www.xn--6db3a.com
xn--6db3a.com

Other certificates including the domain name sportsmedicineindiana.com

(limited to 100 certificates)
cheapveganmakeup.com
hotelsahara.com
trump.tube
www.sportsmedicineindiana.com
www.pittsburghsportsmed.com
samoacarrental.com
ekoenergetika.com
www.chicagofertilityivf.com
www.symphonynovascotia.com
www.ocalafarming.com
www.permapod.com
kbs.asia
www.natusa.com
ketobar.org
sacramentosportsmedicine.org
humanityindeed.org
salmonshack.com
634.me
296.me
www.dermatologistintampa.com
www.adultwares.com
www.onomealand.com
baymoving.com
www.sportsmedicineindiana.com
www.greenflooring.com
polywipe.com
www.professia.com
www.dermatologistintampa.com
nvlc.com

Certificate

The complete raw certificate details for www.sportsmedicineindiana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24hxMElnn3AolHck+JTk
F0tk5BdRVzhZI3BIVSb1a4pBgG5qmo13R5BNYZlanY1bLBAWjFr61WXgj7rCZcga
t3GQYPzJt31kXFs/OSfDSvg/4m4mpeHQTBf1OAS0C07ISXIOWq67pWQwx8pzA78D
rJhd4SOegcnpiIhJtJIDtbkYEaaBCeiXAtP2rytEPLZdnTMlSp9lBxOB4GMHvY07
NtQhelZUTy2nKUTpxBeAbtL33jK1w+Eqv0YlWOO2BFoQx6Ro1tHlwIjlJDHICr8O
RYoJ1uOlrCNcHi0AuuUPmNw68U5Fr+glHIbFPPwijPF1EvwzgWJzQgzdZp59jEOX
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291795894303795752545369844618687724343587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 18:52:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 18:52:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsmedicineindiana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27713470915942648957619269823994010890064309902131741157603742519582623121874556855946173702652562636861587036231649636602030555946210408918283573664414629455014494133695519580391537742853570938490343689819620962070810287894721628069130360667217198367320936976388202003625909038869999008173992583066131311699915150983805730009227024245517434201585898751573154581852560786311506377922336985226392914565251495614375581675327241232620454286526920541649638371230843806358473125189015997952687857086312149311834957420729531950056322756787376100249657208545541368235512405247031868087453137875493312902729303471796550604611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fab77e62fc7948cba79247630eec7d5ee3eef00c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badiali.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentministry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creado.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hapticninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igiftsightcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokorotokarada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvhba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineindiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerprizeclub22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicallyspeaking.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipobet5055.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tretinoin-canada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstates.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wateriswet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badiali.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contentministry.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creado.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hapticninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igiftsightcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kokorotokarada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rvhba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineindiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerprizeclub22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicallyspeaking.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tipobet5055.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tretinoin-canada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedstates.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wateriswet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--6db3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--6db3a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894ba9c06100000403004630440220465774257d480237ed43685c3f072bd5104b042a9f797f1d1b33008dff10168d02206f0c23bf3058c418bb5ef19860ab38972df24e88aaa909135cb4f5c6a94c48ca007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001894ba9c05e0000040300483046022100dd1b29f0b8310fa47401b77caecf07732ac83bebb43bed82c9a026c75df1c9ba022100a91c49b149d0f5592c7be580ee68fd4e0f28f5c63d71599f6d065dd7fcdd07fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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