markgrafconsulting.com

Issued by E1

About this certificate

This digital certificate with serial number 04:4c:08:85:b5:d6:fd:d9:79:23:23:03:81:03:30:1e:88:51 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=markgrafconsulting.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:08:85:b5:d6:fd:d9:79:23:23:03:81:03:30:1e:88:51
Serial Number (int): 374321931700630301924216968315702085584977
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:58:65:6d:bf:31:10:92:ad:a6:0d:2b:2c:7a:29:24:8e:d9:3d:29
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac

Fingerprint (sha1): 58:6e:0b:38:7d:cf:71:57:fa:95:8b:40:27:27:76:e6:42:b0:01:13
Fingerprint (sha256): 12:33:71:c0:48:e6:73:68:d2:44:94:ab:c1:c5:77:f7:4b:f0:21:f4:e2:ff:9e:d0:ea:dd:51:21:f2:7b:b2:66

Issuing Certificate URL: http://e1.i.lencr.org/

Revocation information

OCSP Server: http://e1.o.lencr.org

Check the revocation status for certificate markgrafconsulting.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markgrafconsulting.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.markgrafconsulting.com
markgrafconsulting.com

Other certificates including the domain name markgrafconsulting.com

(limited to 100 certificates)
expense.markgrafconsulting.com
expense.geoinstinct.com
expense.viamotors.com
expense.geoinstinct.com
expense.lpros.biz
expense.asmesecurity.com
expense.geoinstinct.com
markgrafconsulting.com
expense.sycorr.com
markgraffarms.com
expenses.teamlagom.com
expense.lpros.biz
markgrafconsulting.com
expense.geoinstinct.com
expense.geoinstinct.com
markgraffarms.com
expense.oxbird.com
expense.puryeartanklines.com
expenses.teamlagom.com
exp.emtmeta.com
markgrafconsulting.com
sweetridebro.com
markgraffarms.com
sni.cloudflaressl.com
expense.lpros.biz
expense.galaxypayz.com
expense.lpros.biz
expense.sycorr.com
expense.sycorr.com
expense.asmesecurity.com
sweetridebro.com
expense.markgrafconsulting.com
markgrafconsulting.com
expense.galaxypayz.com
expense.oxbird.com
expense.printfactory-usa.com
markgrafconsulting.com
sweetridebro.com
markgraffarms.com
expenses.teamlagom.com
expense.one52.ae
markgraffarms.com
expense.geoinstinct.com
expense.banyantree.ca
expense.take2av.com
expense.one52.ae
expense.markgrafconsulting.com
markgrafconsulting.com
sni.cloudflaressl.com
sweetridebro.com
expense.geoinstinct.com
expense.viamotors.com
sweetridebro.com
expense.printfactory-usa.com
exp.emtmeta.com
expense.banyantree.ca
egresos.the-smart-store.com
markgrafconsulting.com
expense.viamotors.com
expense.viamotors.com
exp.emtmeta.com
expense.sycorr.com
expense.oxbird.com
expense.dxbme.com
expense.banyantree.ca
expenses.teamlagom.com
sweetridebro.com
expense.dxbme.com
expense.galaxypayz.com
expense.asmesecurity.com
egresos.the-smart-store.com
expense.puryeartanklines.com
expense.one52.ae
expense.dxbme.com
sni.cloudflaressl.com
expense.printfactory-usa.com
expense.puryeartanklines.com
expense.geoinstinct.com
markgrafconsulting.com
expense.galaxypayz.com
expense.geoinstinct.com
expense.printfactory-usa.com
expense.take2av.com
expense.geoinstinct.com
sweetridebro.com
expense.oxbird.com
expense.banyantree.ca
expense.geoinstinct.com
egresos.the-smart-store.com
expense.take2av.com
markgrafconsulting.com
expense.puryeartanklines.com
expense.geoinstinct.com

Certificate

The complete raw certificate details for markgrafconsulting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEClETZ3ltRRZlSMjyJSNTcbXkarWh
SYnrtEyX/mO4y4nIBmLx6RunyiCgEdthhlL129mmT7JXsZQvNTOhhnTS4g==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374321931700630301924216968315702085584977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 02:56:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 02:56:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markgrafconsulting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00040a511367796d45166548c8f225235371b5e46ab5a14989ebb44c97fe63b8cb89c80662f1e91ba7ca20a011db618652f5dbd9a64fb257b1942f3533a18674d2e2
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3558656dbf311092ada60d2b2c7a29248ed93d29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markgrafconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markgrafconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187c601666c00000403004630440220642d1a086b13d0ec414b16614e2f113269453694d94b2053a431f567fcb7055e02206547847a9bca5204d954ec9c5268ac255ccbb067220c0f0d3e941a05c3492168007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187c60166790000040300473045022100d06b0dfec4647e4d27575700ee58c2a68385503cf92748e9611a5bf1a2d439470220668711cb0c20d8ea289ec9d57d86c35fe00508fff89509ee4270b30ead356b6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30484150727757293074042993280008485779250432044211844855731375403255256011965904618617190788328637619239458712613478
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19083783797708124433546353118566388695531403158117676783964745968875380253037012184206322415821447014138581898360529