axischiropracticclinic.org
Issued by R3
About this certificate
This digital certificate with serial number 04:17:b5:55:de:d0:5e:6a:30:be:0b:8e:84:fe:84:a6:d7:64 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=axischiropracticclinic.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:17:b5:55:de:d0:5e:6a:30:be:0b:8e:84:fe:84:a6:d7:64Serial Number (int): 356516674297896226260374435375017196181348
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3d:e3:7f:cd:d9:d3:1b:84:08:d9:c2:1f:a4:8e:c6:21:57:0d:d4:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b5:93:7a:04:e4:fe:ff:f2:30:9c:a9:b9:de:f6:76:ae:e3:b7:42:33
Fingerprint (sha256): d0:be:bf:6b:39:2d:5a:7d:62:c3:b7:35:ce:7d:73:cd:90:a6:01:8e:f5:32:05:07:b4:64:6e:aa:aa:63:a3:8f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate axischiropracticclinic.org
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for axischiropracticclinic.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
axischiropracticclinic.org
ccheadshots.com
exchangedchurch.com
externalcbd.com
pureadventures.net
ccheadshots.com
exchangedchurch.com
externalcbd.com
pureadventures.net
Other certificates including the domain name axischiropracticclinic.org
(limited to 100 certificates)
jerauldcounty.com.axischiropracticclinic.org
micromobility.vc
axischiropracticclinic.org
everyshotmatters.golf
axischiropracticclinic.org
thematch.co.za
norwoodwaterworks.ca
axischiropracticclinic.org
axischiropracticclinic.org
axischiropracticclinic.org
equitasse.com.charlottehomemovers.com.axischiropracticclinic.org
micromobility.vc
axischiropracticclinic.org
everyshotmatters.golf
axischiropracticclinic.org
thematch.co.za
norwoodwaterworks.ca
axischiropracticclinic.org
axischiropracticclinic.org
axischiropracticclinic.org
equitasse.com.charlottehomemovers.com.axischiropracticclinic.org
Certificate
The complete raw certificate details for axischiropracticclinic.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISBBe1Vd7QXmowvguOhP6EptdkMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMjYyMzI5NTFaFw0yNDA0MjUyMzI5NTBaMCUxIzAhBgNVBAMT GmF4aXNjaGlyb3ByYWN0aWNjbGluaWMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAzplMApdlgeXJ3YyB1063YisJD9PaFPhoobW+1MLe4D+na4td Obq1TNGMwmGKBIUR5zdVtM/PBLLA7tcBPjDqiaz0PitMdOyGNyawHlvksvJKpn+1 Q3z/3qlfC+crZG6C78gN3cZw6y0/vafEqL6ockjMLsJZlFh5JhA70kqE+zRr5ZSO 93tU/yKN3CfonfCtP6GJz1rri8JGUryL8M8FQPY/mXKpD2WHf4lC2FDufWJveUdZ oLnfiSgRw9d0zSx7OcrkgOzaR3F8GNt4flCigZ8dcdtUsUW8d64lSBvANl6DjsYC sePkA1coGLCxMNmndbe0A3lXzf+RPdjW/vN7awIDAQABo4ICaTCCAmUwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBQ943/N2dMbhAjZwh+kjsYhVw3UhDAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzBwBgNVHREEaTBnghpheGlzY2hpcm9wcmFjdGljY2xpbmlj Lm9yZ4IPY2NoZWFkc2hvdHMuY29tghNleGNoYW5nZWRjaHVyY2guY29tgg9leHRl cm5hbGNiZC5jb22CEnB1cmVhZHZlbnR1cmVzLm5ldDATBgNVHSAEDDAKMAgGBmeB DAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOsc UgHLVt0sgdm7v6s52IRzAAABjUhSo2EAAAQDAEgwRgIhAJA+BjPf6ODmCG/fhlYR asrSJ0EaWUzAOtxR2T60uGCKAiEAh1q3wRjOUT9J1KhaXlbnFDgtqx4MyIFIrbRx 4nLv1SEAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY1IUqNz AAAEAwBIMEYCIQC4aEy0ZhYahe9HO1RCWAPYusopqjtCmRY4VgrGeFFc1gIhAOPu WvEAWea5M7Ho0K0vqJAmPkhO8Butr4HWwOKCd2TaMA0GCSqGSIb3DQEBCwUAA4IB AQA6fhQ9ikGdn87+qlhaLfiKTH9TuMlc/1Tgpnf9ZMAVUpDTYd6gMuPOTkhsxsSU EewjP5ahveKu13Y70BxvHGE99J9DTZFvaLTRxXen3VgRMgoL/7mLKHrZLKmcLp6q OPapJn6XjyK33DHIqsSUpGo78ZvaAuu3p6c1D/Wxxw1zhTI6Q0C+erFgd/7XW98K V4OTdjyCzRUJhjAHF3KBajiVWbC3rtAgdLsmKw/Ksu4A30A0Vb0qjZc/Cleu1BMR UxZReoWSvhjrE6GlrIgms0GcCI5nDIzRzkJBULm596y6wR3+FmPXNd++PthrOyYD kmwSy01PbTkP8kq+Eahqs3zV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzplMApdlgeXJ3YyB1063 YisJD9PaFPhoobW+1MLe4D+na4tdObq1TNGMwmGKBIUR5zdVtM/PBLLA7tcBPjDq iaz0PitMdOyGNyawHlvksvJKpn+1Q3z/3qlfC+crZG6C78gN3cZw6y0/vafEqL6o ckjMLsJZlFh5JhA70kqE+zRr5ZSO93tU/yKN3CfonfCtP6GJz1rri8JGUryL8M8F QPY/mXKpD2WHf4lC2FDufWJveUdZoLnfiSgRw9d0zSx7OcrkgOzaR3F8GNt4flCi gZ8dcdtUsUW8d64lSBvANl6DjsYCsePkA1coGLCxMNmndbe0A3lXzf+RPdjW/vN7 awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 356516674297896226260374435375017196181348 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 23:29:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 23:29:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'axischiropracticclinic.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26080684348977792635364214442615697751772697183163252555158795805681947041620677709248238870938630110654334872005221886226112166411593441161549642725318828082043043228404894372377586653846573276454723586898022914639438929394008293858624069799187684502983162381984675609424420675068761626162888970556419022768254175416819752533109930246505728821327068548506352263241079759194450369635308150087742971563383905021815747539968242920503146592308417343829516814828958168222848472547983748016998012833576502277342518576698692129289366884417272951623645605202438299229170761171715690422785069511562137609388322337907459455851 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3de37fcdd9d31b8408d9c21fa48ec621570dd484 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axischiropracticclinic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccheadshots.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangedchurch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'externalcbd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureadventures.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4852a3610000040300483046022100903e0633dfe8e0e6086fdf8656116acad227411a594cc03adc51d93eb4b8608a022100875ab7c118ce513f49d4a85a5e56e714382dab1e0cc88148adb471e272efd5210077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4852a3730000040300483046022100b8684cb466161a85ef473b54425803d8baca29aa3b42991638560ac678515cd6022100e3ee5af10059e6b933b1e8d0ad2fa890263e484ef01badaf81d6c0e2827764da . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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