mfa.gr

Issued by R3

About this certificate

This digital certificate with serial number 03:35:4c:f4:53:a6:18:57:ff:a3:a8:b3:0a:2f:66:c1:15:9a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mfa.gr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:4c:f4:53:a6:18:57:ff:a3:a8:b3:0a:2f:66:c1:15:9a
Serial Number (int): 279474113186803020712173575948497177351578
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:2b:8a:94:22:03:b9:36:d9:c2:89:bd:b4:72:49:96:ef:5a:dd:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:b6:59:d2:e1:d7:a6:95:6d:0e:e2:28:bc:f5:18:85:82:e4:62:69
Fingerprint (sha256): 12:96:aa:ad:b9:16:67:41:44:4a:d8:ab:fe:4c:43:51:b4:8e:19:3a:4a:01:b6:70:9f:ea:fa:13:68:83:f1:0b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mfa.gr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mfa.gr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mfa.gr
www.mfa.gr

Other certificates including the domain name mfa.gr

(limited to 100 certificates)
ypenim.mfa.gr
ypenim.mfa.gr
kf.mfa.gr
mail.mfa.gr
ypenim.mfa.gr
cixplap-acc.mfa.gr
ihra2021.mfa.gr
incapsula.com
www.gov.gr
hellenicaid.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
*.press.mfa.gr
x.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr
catalogue.mfa.gr
ihra2021.mfa.gr
www.mfa.gr
www.mfa.gr
protocoline.mfa.gr
mfa.gr
files.mfa.gr
cixplap-acc.mfa.gr
nautilus-1.mfa.gr
200years.mfa.gr
x.mfa.gr
www.gov.gr
arxeio.mfa.gr
hellenicaid.mfa.gr
cixplap.mfa.gr
www.gov.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
hellenicaid.mfa.gr
visportaltest.mfa.gr
shde.mfa.gr
git.mfa.gr
www.gov.gr
vivlio.mfa.gr
www.gov.gr
incapsula.com
catalogue.mfa.gr
mail.mfa.gr
200years.mfa.gr
vivlio.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
mail.mfa.gr
git.mfa.gr
www.gov.gr
www.mfa.gr
catalogue.mfa.gr
vivlio.mfa.gr
catalogue.mfa.gr
catalogue.mfa.gr
kf.mfa.gr
pharos.mfa.gr
cixplap.mfa.gr
danae.mfa.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
www.gov.gr
protocoline.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
www.gov.gr
mfa.gr
navapi.mfa.gr
ypenim.mfa.gr
mfa.gr
200years.mfa.gr
hellenicaid.mfa.gr
kf.mfa.gr
hellenicaid.mfa.gr
git.mfa.gr
ypenim.mfa.gr
e-visa.mfa.gr
hellenicaid.mfa.gr
hellenicaid.gr
vivlio.mfa.gr
200years.mfa.gr
ypenim.mfa.gr
appointment.mfa.gr
cixplap-acc.mfa.gr
files.mfa.gr
mail.mfa.gr
incapsula.com
hellenicaid.mfa.gr
pharos.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr

Certificate

The complete raw certificate details for mfa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6pbjFOg4AIofzFv+CIS
b4XEkDr4m3RKMrh6IHP+g3uVXUHEu4l7RjhLFUxVfsOIkmj9PVAcwdmyUAHuqIUl
+XtdUgqR8ndFYHQqehcCrohIRyzt7WW+JqFTcyzE95G9KAPS0bb6XtJ3KBQ9qXmk
iwbdxYOptSxD8g+9gDu/MdWPjFKXH/Lk0gaEFXA9PRs2XXdX8mWtJ1YTTgcFfepq
cLddy1z2PoE+QAiM17+RuMrrHDYIMli0ya8KwlBvnXFWPT0dYHlLIheV9/R2hDV+
UMn5/wvQ7BetakVJ8pTcn/rkvQUUQlDb7pMFLySG2khP7Rb/F4Bc8AhduoUUsOmk
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279474113186803020712173575948497177351578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-12 02:15:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-10 02:15:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mfa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25205429156683417931596004618892258559558685507044298291925944522382901637809501554411215130264979430499903955657370340921719319249269348441063546845965981440045962158417693303762150649104417678143814028226729656532772683486582391638359314814562673729175078833368121186056353868600627552922636840514910988139752245694122601676779515467630414073839472052527867162201440070383355924107252697401325823205726334055776465191802951773367986085449377668406964529360987818524778047223632819658169508167593010176208145525165045288137239575547278900428749053220806795687966777644677570474605152617569954895213773480691329770501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							912b8a942203b936d9c289bdb4724996ef5addeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfa.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017f7c1fa135000004030046304402203d8a533fc206dfa0e390c3608ded8d3bdd258193883ff955dd3eaa508b9b4634022063bb85d3299b0cff70122ab58a9e147f1f68f022b1fae7b1649ac144fdec59b40077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017f7c1fa2960000040300483046022100df6114efbb08a8c9986adf44edc5f7206516951e9e8954bce5487d3e7e41709c022100b34c11d396bf7dc385a2d4a2dc141592bc9cdc888e552ff9d18c48de06b39c4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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