www.synergyfitnessequipment.com

Issued by R3

About this certificate

This digital certificate with serial number 03:81:3a:cd:65:61:bf:43:59:23:e9:b6:27:eb:46:84:bb:5c was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.synergyfitnessequipment.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:81:3a:cd:65:61:bf:43:59:23:e9:b6:27:eb:46:84:bb:5c
Serial Number (int): 305311444828961021275500530790793428122460
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:43:51:46:69:52:54:27:6a:91:de:da:5f:77:7e:f1:d1:7d:3f:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:5b:25:1b:26:21:1b:51:74:ee:24:ce:64:6d:a4:da:4b:72:e3:a7
Fingerprint (sha256): d6:d7:8f:fd:a7:69:92:48:2a:51:01:e0:dd:7d:a5:b1:db:b9:28:3c:5e:36:04:78:28:26:0d:c0:2a:05:8d:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.synergyfitnessequipment.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.synergyfitnessequipment.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

synergy-fitness-international.thdi.net
synergyfitnessequipment.com
www.synergyfitnessequipment.com

Other certificates including the domain name synergyfitnessequipment.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.synergyfitnessequipment.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhjy3NKksyGgvVB4ZlQQ
Jm1B6i+fZIuIDaHGAUBPZGQE4Ggx8kilLHTVnsc2fIWnHN8HsOsy4HkM4fK4EJlc
Q2SJQOArdmXxHTH68vntIzDgB9TAhDjpMgQw592dfZCb4lZQJRqiWN6IzxrurfDp
L6H+9UzdHwRqJfTKD0LntSgK+1gU1cVWzi0QkshnSNTKyp7aebIP7YEbe98aIqLM
hXnmBDxa1Or8yuO+VQ3xp7KY50ivQlmxHcT1o5+7/OBGYdA4XSQW0b6T3D+2MhIu
a8MhJdWML1upc9vzykCC7rjhjMjUT45ietdAy/pM+Ufrl+4mso7hbXTByBb3D2TH
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305311444828961021275500530790793428122460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 16:39:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-09 16:39:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.synergyfitnessequipment.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21472814497844879963494332852630214404626514655467224727061432733357113906042331828600159885357798386587145418096694196754750509528324095095938511298227280733810020767029700147303158071640233518307902891952813355178492342174449406808551811057200693330008906760775871891305772427931919547719453964204127331769323404954658142856908020864711369819450850862904134683761689855397440096029036547156363192742563898423255641302941891331082420077251206473732226090209231841043073775808281341222924982217500970958772302356485679378416246920846328488043251002825481620610265831046509100702709315978861504109357088303956757891039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17435146695254276a91deda5f777ef1d17d3fb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergy-fitness-international.thdi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergyfitnessequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergyfitnessequipment.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f68bd254f0000040300473045022100eda1c4144adf722f567f90229e29ad6471e52c7f2d7503ca2d5aa4f33015843f0220775dc8476867218ef5cf423b43e21ed118b989869db9a802e2dde14e50368556007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f68bd26120000040300473045022100d5d77b979119f6c49028e3ffc8d5019fdc5df8743cf7309eb267f8973de7c33502206fb85efd38b35dfd8dbca5da53e67d5572707ee45abf94157746c4207888c491
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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