DV SSL/TLS Certificate for mar-marina.com

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the mar-marina.com DV SSL/TLS Certificate

This certificate with serial number 06:3e:3d:8b:a4:bb:88:aa:ce:4c:0a:ad:eb:39:07:d4:b6:33 for mar-marina.com was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for mar-marina.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:3e:3d:8b:a4:bb:88:aa:ce:4c:0a:ad:eb:39:07:d4:b6:33
Serial Number (int): 543853030317839018665736756269771031623219
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 43:53:94:1b:4f:18:18:72:be:02:3c:59:e7:2c:80:93:07:5a:96:e7
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): d3:d5:a5:37:49:a0:56:1b:bf:dd:7d:61:32:70:a5:b6:59:6f:8d:55
Fingerprint (SHA-256): ec:15:20:86:d6:d5:28:46:e9:24:6c:f9:92:79:2a:d2:5f:9b:b5:dd:4a:92:82:77:10:c7:15:dc:be:a8:44:ab

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/52.crl

Check the revocation status for certificate mar-marina.com
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mar-marina.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for mar-marina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISBj49i6S7iKrOTAqt6zkH1LYzMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjUwNTI5MTM0OTU1WhcNMjUwODI3MTM0OTU0WjAZMRcwFQYDVQQD
Ew5tYXItbWFyaW5hLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOvnSBR7gogzWrUWKgRqXpvb2eeIh0vzNmgKaGHluWHSgA0rNj8TojaZEiXRiXVB
pMPpbBVCf+lByStMWk9m8WU8POWxjRFyCIRQqLlqZzZc853u3hcgvyTRFipM69+g
De8Mb679+lLRxfoUtFFei3dSYDlc51EeeNOr4w7t5j0+KmADWjrseemo3U3lXygi
vd1zxHE7U0cFzqPjrb6MyBn1GBrteVLUwQpSWPDyYa1gxmLhilzQFYT2XApMcUuS
oViD44nky5oM2PZOw4xT54EMP/pnCZQQUwCm91cq4btFWt4IuoYUIV7GrCQQr2Jw
9hGjNV0xgbhGExpRE45B+8UCAwEAAaOCAlEwggJNMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUQ1OUG08YGHK+AjxZ5yyAkwdalucwHwYDVR0jBBgwFoAUxc9GpOr0w8B6
bJXELbBeki8m47kwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8v
cjExLmkubGVuY3Iub3JnLzBNBgNVHREERjBEghAqLm1hci1tYXJpbmEuY29tghAq
Lm1hci1tYXJpbmEub3Jngg5tYXItbWFyaW5hLmNvbYIObWFyLW1hcmluYS5vcmcw
EwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3Ix
MS5jLmxlbmNyLm9yZy81Mi5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCk
QsUGSWBhVI8P1Oqc+3otJkVNh6l/L99FWfYnTzqEVAAAAZcchA1HAAAEAwBGMEQC
IES5210aGGQnluq1xUuVykBx7eChoteED28W91MFNV8EAiAA7LfUOfU5Cbq+6hWc
brpSNAhViHzcvD9KcPUelxgsdgB2AN3cyjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2
Ciysu8gqAAABlxyEDYwAAAQDAEcwRQIhANiAIFbQhnfOM9X/9znEypOO0mlls9fM
fgVmSIlqa2PBAiBUZKCQB6D5GeR0WXZDniQZLNtWrAKQSLoZBWUCV/9UIDANBgkq
hkiG9w0BAQsFAAOCAQEAWARIbAvOvxA5S6lcHN76z2ERt/2pGFmQZc6OkzXH5xyA
7FQX5LKKWjIK7FHEYpD0LQN6Y6S8KbYNYY21bwoEqW2rzOZq5/JzMQiX6CvEVJ+K
IXBjjWF9uqfrV8w16oRsIxtc+YljhkXPP/Q7hoKLSZSXKvKHNkW+93SCgpFTgaaX
7kBRlsp1VA70K9tH8MpuLSoqDnlRmEq6uZ6BL0kgPYgl3ZU2O6VrCu1vZZfZe63Y
S0hI+BK7i3sb3BtvPZxo1YQeoPs6nDYhPt5bbmCXZO2VCWpsIEbV7vbL79RlA2Lj
VSfdCpSy+YPk5yudaz2/Yf9e/KySRMkSgmnJ/lKzsg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+dIFHuCiDNatRYqBGpe
m9vZ54iHS/M2aApoYeW5YdKADSs2PxOiNpkSJdGJdUGkw+lsFUJ/6UHJK0xaT2bx
ZTw85bGNEXIIhFCouWpnNlzzne7eFyC/JNEWKkzr36AN7wxvrv36UtHF+hS0UV6L
d1JgOVznUR5406vjDu3mPT4qYANaOux56ajdTeVfKCK93XPEcTtTRwXOo+OtvozI
GfUYGu15UtTBClJY8PJhrWDGYuGKXNAVhPZcCkxxS5KhWIPjieTLmgzY9k7DjFPn
gQw/+mcJlBBTAKb3Vyrhu0Va3gi6hhQhXsasJBCvYnD2EaM1XTGBuEYTGlETjkH7
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 543853030317839018665736756269771031623219
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-29 13:49:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-27 13:49:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mar-marina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29780050856182530494433337821717622827077615556974456681753783991920162126498664994267501646316652968418792302828077227833768176288475589824980831958566269578087425522434744138860971521955688477764786026277612136898470055436804367865093291524533586761351127576067983063707185282252607015099487150326372317228465968849228241416287330249280100747128286104025894257233829505526932386220470836891538056098057142785188636911717453108000441794131082348976079088038128266659492840518160244722741430631255606313426992621108410680549541928441558671713095036038001773945686423096140365512169482341846693423007695173100138265541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4353941b4f181872be023c59e72c8093075a96e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mar-marina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mar-marina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mar-marina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mar-marina.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/52.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a8454000001971c840d470000040300463044022044b9db5d1a18642796eab5c54b95ca4071ede0a1a2d7840f6f16f75305355f04022000ecb7d439f53909babeea159c6eba52340855887cdcbc3f4a70f51e97182c76007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a000001971c840d8c0000040300473045022100d8802056d08677ce33d5fff739c4ca938ed26965b3d7cc7e056648896a6b63c102205464a09007a0f919e4745976439e24192cdb56ac029048ba1905650257ff5420
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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