markseangarcia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:d0:d5:fb:ad:5f:61:88:a1:b0:f1:60:8d:a9:a8:72:18 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=markseangarcia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:d0:d5:fb:ad:5f:61:88:a1:b0:f1:60:8d:a9:a8:72:18
Serial Number (int): 323886121428787410792017175291190584046104
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:6f:f7:97:05:42:d8:b9:ec:d4:82:83:46:6b:6c:c8:6d:3d:e0:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:78:c2:aa:be:a8:34:9e:fa:09:11:bb:e9:cd:bb:02:5a:1b:c0:58
Fingerprint (sha256): 21:14:e1:ed:2e:a3:b0:9a:4c:06:fa:1a:b9:5f:a5:3b:6e:4c:4d:d3:2d:72:8b:36:7b:9c:79:7c:14:37:db:66

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate markseangarcia.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markseangarcia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.markseangarcia.com
mail.memsofemms.com
markseangarcia.com
memsofemms.com
memsofemms.markseangarcia.com
pirate-fancy.markseangarcia.com
www.markseangarcia.com
www.memsofemms.com
www.memsofemms.markseangarcia.com
www.pirate-fancy.markseangarcia.com

Other certificates including the domain name markseangarcia.com

(limited to 100 certificates)
mier.info
markseangarcia.com
emmswish.org
crm-altas.tarjetaredmas.com
player.eduplus.lk
markseangarcia.com
blogs.ajitsingh.me
markseangarcia.com
costco.parkalot.io
reps.fabrictent.com
www.markseangarcia.com
hannahbuchenau.com
www.igorandsue.com
thelovingchristmasdoll.com
www.mypantry-ai.com
www.sondercolombia.com
www.designaky.com
nutrientcheck.com
thelovingchristmasdoll.com
emmswish.org
links.munily.com
weunify.app
www.alexkuzmin.io
www.designaky.com
www.designaky.com
www.coachandcoffee.hu
pearpartner.com
www.slewsoft.com

Certificate

The complete raw certificate details for markseangarcia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1U6cA/EcMXd6lYANtSv
OCrH3s1CFwMri+tbo677pyWm+cs9q5QLWvs+Lxw+gh43r4Yz+vMfbAsy2ga+gtaF
tvN2+wk6uT44kIw9iMHC8lSIqPY2upBQX8WL4cLqmNkE4ZlF8BNYaKtXMT4b0V2P
lyf5Vc2c1rbxU3fd+v4ykYSgBNoxGQbl3E3dc502/gBBAncZA6xkE2oXsL86Xl1U
n6MdisfMfcY26C7P7I3AM9R/heW7oeQ54oImwAehYInq5A9n5b5M2xxXjx6888yJ
USMXwhrLrRZKOg5iUPYp5pPv6M5MeJRmAM5nnAhLHutYAX/8Cr/0u8vba3U+Aw9H
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323886121428787410792017175291190584046104
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 10:18:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-09 10:18:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markseangarcia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22638684216447986422289580866027010069348464336475308242128622296096614115746260810858012068357006633904454868003599154890605013225414654940247909251081320857067306628289448686878453676382633395919747316405562424305567067190614118242116996326779708407664414558005652839602627759665960148771728705807004218475546011080380908577023174689846040483662473001041226595904681910414924955195634674801216150872362257357469708401507770976296800198827238076936524434660181716566841355273581929021688116136673494083822640468463624585189262564470032852414133470227239533302739487972150541393370875530423441439890728284157310355327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b6ff7970542d8b9ecd48283466b6cc86d3de096
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.markseangarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.memsofemms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markseangarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memsofemms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memsofemms.markseangarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pirate-fancy.markseangarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markseangarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memsofemms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.memsofemms.markseangarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pirate-fancy.markseangarcia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001696c79b5ed00000403004630440220014667d0fc31586281ce8f49d588a3bcaadfcde0951a31292047232940d31683022045b94be71c95b194ca491fa5405aacfafd569306c19e6b52d905705cefdc2b30007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001696c79b62700000403004630440220281c9804dd210aef3a1a52a8789ad96eb7f258256b95d0bdd5adb8a34228df8802206778a4dc20652605fe43c459a68c291c38a39c8b915da09e0262e81df0baf3c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005882c17bb401b8ee12dfff392c8a2a5679e1a6a1d1518a7c287309ae65dc85a11d0a83a0e57651578fd05b519cf5bc17b147beac7f75926ef8771a7860cd704f856e48433d736418b57cba8860ff03de145b32a0e412b26d8de6b5ff0fc6e368178f2ba9ab2f9fbff6554bd9e390bbe3ed14349f9a929279d2f8ab4a2d7326650b2713f3f04b713fd5d92ce002d411d539b4ba43b0dd1924e352ba3dc2465b23870ba985ce36118c90b19a14f1151c0d91bc6d7355df386e15f56f95499c38a60aea3b0319d6a93d969ca22b8930f18a0aedb7a6484335283421be672c0f60fb41635d565e6d5fee2f4f10702257aa5a2ac2df72b1b630e231605450d3f0a60e