kf.mfa.gr

Issued by R3

About this certificate

This digital certificate with serial number 03:b8:44:1e:43:c0:e8:2d:03:67:ef:9d:26:c6:4e:a9:3e:d3 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kf.mfa.gr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:44:1e:43:c0:e8:2d:03:67:ef:9d:26:c6:4e:a9:3e:d3
Serial Number (int): 324039357955557653128744427094096155852499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:c4:7a:1b:55:78:af:5d:01:4b:1b:bc:48:c0:d1:b0:6a:ac:cf:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:c4:ec:b4:84:1f:d4:b2:81:60:40:c5:b0:7f:a8:f8:e3:94:1f:ce
Fingerprint (sha256): 02:48:8d:d1:85:8b:71:e5:39:88:94:36:55:7e:16:80:ae:6b:57:35:6c:16:69:ca:7c:84:91:10:b6:76:ae:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kf.mfa.gr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kf.mfa.gr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ee.mfa.gr
kc.mfa.gr
kf.mfa.gr

Other certificates including the domain name mfa.gr

(limited to 100 certificates)
ypenim.mfa.gr
ypenim.mfa.gr
kf.mfa.gr
mail.mfa.gr
ypenim.mfa.gr
cixplap-acc.mfa.gr
ihra2021.mfa.gr
incapsula.com
www.gov.gr
hellenicaid.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
*.press.mfa.gr
x.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr
catalogue.mfa.gr
ihra2021.mfa.gr
www.mfa.gr
www.mfa.gr
protocoline.mfa.gr
mfa.gr
files.mfa.gr
cixplap-acc.mfa.gr
nautilus-1.mfa.gr
200years.mfa.gr
x.mfa.gr
www.gov.gr
arxeio.mfa.gr
hellenicaid.mfa.gr
cixplap.mfa.gr
www.gov.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
hellenicaid.mfa.gr
visportaltest.mfa.gr
shde.mfa.gr
git.mfa.gr
www.gov.gr
vivlio.mfa.gr
www.gov.gr
incapsula.com
catalogue.mfa.gr
mail.mfa.gr
200years.mfa.gr
vivlio.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
mail.mfa.gr
git.mfa.gr
www.gov.gr
www.mfa.gr
catalogue.mfa.gr
vivlio.mfa.gr
catalogue.mfa.gr
catalogue.mfa.gr
kf.mfa.gr
pharos.mfa.gr
cixplap.mfa.gr
danae.mfa.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
www.gov.gr
protocoline.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
www.gov.gr
mfa.gr
navapi.mfa.gr
ypenim.mfa.gr
mfa.gr
200years.mfa.gr
hellenicaid.mfa.gr
kf.mfa.gr
hellenicaid.mfa.gr
git.mfa.gr
ypenim.mfa.gr
e-visa.mfa.gr
hellenicaid.mfa.gr
hellenicaid.gr
vivlio.mfa.gr
200years.mfa.gr
ypenim.mfa.gr
appointment.mfa.gr
cixplap-acc.mfa.gr
files.mfa.gr
mail.mfa.gr
incapsula.com
hellenicaid.mfa.gr
pharos.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr

Certificate

The complete raw certificate details for kf.mfa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324039357955557653128744427094096155852499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-22 18:54:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-20 18:54:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kf.mfa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738922626080044605444753043884889789367961503447836746146732464560027792218961156747438436593708381450728898453510798079113618558055684776505220034917886922587270339443100875877895256253512112380015126758714112742965565515815021163326700886289836426048566522340926199238752092162990188718403411716035768436862684679552888042461564927981217192767994387438699787470660508910805478909137960692793212059264696616347721258246790436527961132876962867399852744339855758831795410290332648209175440837847922331045784934307748652807899681335418970052868263788627021098051631400936726333537856717626762683361084018536392852200253809604770774534869457386862874451714374435553875719396709656088107138591727898116571357485164365349559024447090018911084926609468802827400090736472586883199464034974135217667061137133646416422252614171503634002510766477478700367254186779527889253869572084956977470244947068770768570393727670648316224429056772749714147762487546857474771133662189946072823699483527912081719665174126910961033429014537170633122894173127524803098234512707372349801894311747844361426211502525047353931962269877646179755864668171159591996850428321105282540810091280409640059545119347175835337343979363505660967793271868921812685037608001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3c47a1b5578af5d014b1bbc48c0d1b06aaccf2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.mfa.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc.mfa.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kf.mfa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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