monomark.app

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:14:5a:59:19:12:2d:1f:36:d5:63:6f:17:cd:6f:76:b0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=monomark.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c3:14:5a:59:19:12:2d:1f:36:d5:63:6f:17:cd:6f:76:b0
Serial Number (int): 414831258950377737480897094790534669498032
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:b9:f2:03:00:e0:90:3c:1b:81:ad:d3:49:86:3a:34:aa:35:2b:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:ba:2c:bc:99:4e:82:61:af:2b:98:7d:b9:bc:95:3b:df:5f:b9:be
Fingerprint (sha256): 2a:0c:77:ea:b9:92:8c:7a:c5:22:5c:3d:b2:1f:2d:2f:d3:25:bb:6b:74:a6:d7:d7:44:a8:66:9a:20:0c:3d:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate monomark.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monomark.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.monomark.app
monomark.app

Other certificates including the domain name monomark.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for monomark.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414831258950377737480897094790534669498032
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 01:37:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 01:37:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monomark.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836941814410990033321389969465209677868254508424980451067176151133132309749261681774311683585448040030867368022142127751169961144807587932198445406514800895270967259151793323996840149545406865443182390571693714752249080409292350944074244632083603563189816683052337155242725323537374865885447855400853183743538020644628422755478704903150176232287586978001808202849497369085531492038637847407724727895275025012742498559477456199424834106256303794192870090755366408520614291862807552727562044462236107079353774803907805004108387191316395269820972254637089900774838289180130706923580426133962475889630837077202011671462860301783344627536646200197305272674409777236743018480850505778755344316133864536146165774580039940705322674955653727591418083115199298240126196005434400417053050759652680534656675054246906035925224190063982058017394088772760955006859487955948746807759293042382058476958409628205830494845708749014496887449762293020751396971302758092142489457071902142897992456467068478812608928301908500138819153855024690135442941399273943823291233049059130883777098421292671966171704082083434506646002476164261262853319067237063301592301517126736080578893892200677852429097938321453131784738627300812427863195466449284101658509593971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ab9f20300e0903c1b81add349863a34aa352b87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monomark.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monomark.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f2290ca480000040300473045022100f481f74b735047423a9d7374d1dd9049666f4cb77d9094a57e85111aa739dda702201b9c44f2837628ce3b44ea7090889ea2fb8dd7252c0553bbee3c089758c6810f007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2290cb05000004030047304502202685388d26dfd1b0060042f2e7921487694676899b650deaa91aec43b653e18a022100f767159caf185ad324a759b046c12530b5a014bd6d5f94fa6ce0d53205ef86bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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