transcompliance.marcafranca.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7b:cb:76:c5:09:dd:4a:12:b7:77:7e:63:8e:6f:38:51:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=transcompliance.marcafranca.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:cb:76:c5:09:dd:4a:12:b7:77:7e:63:8e:6f:38:51:bf
Serial Number (int): 303462038897146047095801997238350181323199
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:8b:af:6b:f3:55:19:98:9d:09:a8:31:ff:14:ac:93:59:39:39:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:de:18:58:75:02:b8:e7:01:5b:c9:96:19:6f:71:94:7c:a0:d0:ce
Fingerprint (sha256): 00:f2:ba:35:68:68:e0:bd:30:56:13:87:a2:c7:00:ca:35:a0:43:50:a3:4f:ac:06:fc:0d:80:e3:8e:d5:9d:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate transcompliance.marcafranca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for transcompliance.marcafranca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

transcompliance.marcafranca.com

Other certificates including the domain name marcafranca.com

(limited to 100 certificates)
errad.marcafranca.com
match-the-element.rccsonline.com
transcompliance.marcafranca.com
notef.marcafranca.com
canal-etico.marcafranca.com
www.casperzandbergen.nl
visiontest.me
newpeace.jp
web.marcafranca.com
web.marcafranca.com
candidate-react.staffshift.com
plexus.marcafranca.com
www.airpix.io
app.ioniaregistry.com
gomsamed.marcafranca.com
www.shelleytushinski.com
gkubota.com
signpost.dev
elplural.marcafranca.com
transcompliance.marcafranca.com
mfreg.marcafranca.com
scalingscience.ai
rsnchallenge.neoufitness.com
dev.aptitudelabs.com
gustavogranado.com.br
www.moonlocker.org
removalsbyalaski.com.au
ahmedkamhawy.com
auth.middletonfbla.com
admin.redthemes.net
mfreg.marcafranca.com
login.source.topic.com.ar
www.iphone-news.it
errad.marcafranca.com
www.live-event.nu
lefebvre.marcafranca.com
www.nfg.dk
hmorders.afivn.com
livestreamja.com
yearegistro.marcafranca.com
eemaxtours.com
fastplanet.io
survey.app.buildbetter.app
costablancagarden.com
progboost.com
cxclabo.com
app.fxr-insights.com
votum-group.com
www.makkan.trade
www.mind-of-mary.com
go.allinahealth.org
sanmarcos.marcafranca.com
isys.cc
assemblytx.com
writr.space
web.marcafranca.com
sennder.com
emvento.com
auth.astrafit.com
kachifo.farafinaeducational.app
staging-superadmin.evfy.sg
*.marcafranca.com
www.iconss.co.uk
staging-member.youdowell.com
test.interfaces.fvbank.us
filmania.dardan.tech
fastplanet.io
join.gdgadoekiti.com
skysushi.mewo.es
marcafranca.com
canalresponsable.marcafranca.com
cburg.galander.berlin
yabuchin.com
www.privuo.com
events.rinno.la
demologin.okularid.com
workspace.copixel.dev
www.privuo.com
transfootball.com
unfunctionals.com
69games-uat-backoffice.cbdata.cz
foo.marcafranca.com
www.marcafranca.com
cofares.marcafranca.com
flightstatus.stgairasia.com
maxumspa.com
covi-srl.it
wallet.decaf.so
solutions.byebyeq.com
qiriqu.com
marcafranca.com
www.pantaurelawan.com
marcafranca.com
buuze.me
axtherocker.com
app.ecolora.io
plexus.marcafranca.com
www.saguji.com
canal-etico.marcafranca.com
www.lukasgeiger.com

Certificate

The complete raw certificate details for transcompliance.marcafranca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaxHTjbNsg6np1kn7alI
+sSagw94aEMmd9BCFx4yDWULZzuyQJJoEzJu/LkPxVftlbd/my70Eieo1fwXyUbd
7g468uWotF2AFo+u/OcOV5t5ZNQCHc4zfaf9wZVOqi218RZFabzVAtCtiE6hAabs
AU+224BVJw8N1WmMhDGUH7gzO5qo3Tcdxk2lrtF9TaSP3GTJlb8hhLxBFm5r20My
aUo2f6HEE+PrR6FRXg15n8i/9OuhgYX32+RJnPY0rrclvBEE14D6z7S9NdckNElv
DentyLVUhLp0Gox4Wg0QvYCoTXvXr5jj9dJpUAfPj0Tc4fREyepJRZPC1uIqF8mz
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303462038897146047095801997238350181323199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 22:06:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 22:06:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'transcompliance.marcafranca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24953899791276141956667663724485489479628918192400557471899959758127057255134214561276182703324493234099869002238425759700179938800419041024665188425546974489154408095373156498694393828627497451397704740537393256226263214730682041331222306635370767157623122767939044295184431159990753506028203613593443091334027799796135768655757236746520502156212483764123845226720913452845327254292055180422541200964347124314033285074231721869348397104173575736514219634872775395651609972778695599641046972801526278356422136675634750135766042952593561103408825629585919985795142940095948836787977137177093411740959186143678575522719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d68baf6bf35519989d09a831ff14ac9359393974
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcompliance.marcafranca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016495e5028c0000040300483046022100c08bcc2b25f855e0027f91ef1443f61e599743655b8ced899c54480a9fa15e6c022100f5745f405042273d82784216398324b4ea68e1d7be53dea51b9039ff5a23c1ba0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016495e502e300000403004730450220756727d2d2ec9aa96f118744707c9c178c7dfe1839ce54368eea3c57fa193607022100b453e0a00e62bb8be8689e86b08871ba2b60313779364209a657e0207adc1c30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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