sportsmedicinealabama.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bd:22:ef:ac:ef:40:9f:98:52:7b:25:84:0c:e9:fd:ea:f0 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportsmedicinealabama.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bd:22:ef:ac:ef:40:9f:98:52:7b:25:84:0c:e9:fd:ea:f0
Serial Number (int): 412808949293434215792706933511690504760048
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: aa:74:37:fd:60:d1:68:c3:a5:b2:6c:e6:2d:6e:b6:03:ab:98:b0:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:f2:b9:f5:22:5d:c1:23:89:a0:31:a6:01:92:16:df:25:a9:39:72
Fingerprint (sha256): c0:9b:4a:5d:af:76:ec:17:10:f1:e3:44:74:84:4a:43:b4:15:e9:58:91:a5:4b:36:04:f7:c5:2d:85:ad:b0:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sportsmedicinealabama.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportsmedicinealabama.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carouselband.com
fayettevillefirewood.com
freedomfacetoface.com
goodgirljuice.com
kittens.email
leckma.com
mae.digital
malibusuperfood.com
ntnh.software
oregonrealestate.org
sportsmedicinealabama.com
sportsmedicineiiowa.com
universal-logic.com
www.carouselband.com
www.fayettevillefirewood.com
www.freedomfacetoface.com
www.goodgirljuice.com
www.kittens.email
www.leckma.com
www.mae.digital
www.malibusuperfood.com
www.ntnh.software
www.oregonrealestate.org
www.sportsmedicinealabama.com
www.sportsmedicineiiowa.com
www.universal-logic.com
www.xn--5dbld.com
www.xn--9dbn5bc.com
xn--5dbld.com
xn--9dbn5bc.com

Other certificates including the domain name sportsmedicinealabama.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sportsmedicinealabama.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvA5Focj+YpqDQUOdayw
FTh+Yluyn9WX0sjrIbZMe15Ff21bhD+vc5YRqAG0h4jGhLg8pLO3syclfom2bYb0
ZerXh5TpUhVJzsdJqDtvzBem7EqBdUKhZuAFq6YX7iMxk4pQj2/3YcpU/EKvrCgW
H5gmBAWYb2af7olClkGLfQjKkg3sqxGbOfFS9ERxK7xHh6eRaV9WBSdeYaugfpWU
WgNIUH8kqfQ+OJph+rfharYBTO5KYc8echz5OUZnQQ/dMaSRIQFrtconq8aJFyAn
+pZnjeKn+bY/pQ9TUMvYL75dIjQjT9qZUHpNfcRvUSJLRL0POnbryvYP+8xeKIAV
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412808949293434215792706933511690504760048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 21:45:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 21:45:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportsmedicinealabama.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20064110560940601297492586027564103751255692529303951929792903509629599095927941559884913711929015649962326684756870778927726743050056136040023931762884816655247287973420163660667471764948594601323440391073734586676211744898769472779621035596433679071451556498191685956896391816970609739246670578596691045241512666645173291545557830049524999554425529583641386934521800537427259332358436647826740898283000250888816289411032805127481297463803111299618405458859931869426363781370842350421193444896509268938465416554920833129253789102048835683440404064980787600754621123724930053139411963248494812302739691356792366830921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa7437fd60d168c3a5b26ce62d6eb603ab98b093
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carouselband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fayettevillefirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomfacetoface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodgirljuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kittens.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leckma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mae.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malibusuperfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntnh.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonrealestate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinealabama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineiiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universal-logic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carouselband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevillefirewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedomfacetoface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodgirljuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kittens.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leckma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mae.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malibusuperfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntnh.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregonrealestate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinealabama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineiiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universal-logic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dbn5bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dbn5bc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894c47a2a2000004030046304402205191e09bc9e5e3953646b95abe1caa35985645719bd385a677a6fa62b9e81e9f022054f55d3eae6d3097623203674ba750da1bd4a9a59d8ca09a5d29d9618e083606007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001894c47a2c60000040300483046022100a3bd39960104d94a84044743762e1824688c46b9035ad979941e2e9c1b7a557c022100887a132e8ef0f94d9d3109b57f45b156c7a76965daf33dbf239989a7423ab160
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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