mkspamp.com
Issued by R10
About this certificate
This digital certificate with serial number 04:fc:88:43:60:a5:76:05:54:a2:8d:a0:01:4d:b6:7d:63:36 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mkspamp.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:fc:88:43:60:a5:76:05:54:a2:8d:a0:01:4d:b6:7d:63:36Serial Number (int): 434381425042654244212311383838694748021558
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e5:e2:51:1c:52:b9:7b:34:b8:b8:00:65:4b:e2:f9:82:70:6c:d6:a7
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8
Fingerprint (sha1): 23:76:65:c0:5b:3c:09:45:cb:ea:99:3f:cc:e3:1d:1c:b8:d9:07:52
Fingerprint (sha256): 2d:0d:82:c3:f8:5d:ad:40:57:dc:51:b7:10:5e:d6:8c:57:1e:2c:90:1c:3c:7f:07:7a:65:19:9a:de:49:e8:d3
Issuing Certificate URL: http://r10.i.lencr.org/
Revocation information
OCSP Server: http://r10.o.lencr.orgCheck the revocation status for certificate mkspamp.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mkspamp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aadds.mkspamp.com
*.mkspamp.com
mkspamp.com
*.mkspamp.com
mkspamp.com
Other certificates including the domain name mkspamp.com
(limited to 100 certificates)
ithelp.visionrt.com
www.mkspamp.com
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
mkspamp.com
support.erm.com
ithelp.visionrt.com
mkspamp.com
mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
support.erm.com
mkspamp.com
servicedesk.hermesairports.com
mkspamp.com
helpdesk.fast.eu
uat.mkspamp.com
it.littlegarth.org
it.littlegarth.org
*.mkspamp.com
www.mkspamp.com
uat.mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
itdesk.mkspamp.com
servicedesk.hermesairports.com
support.erm.com
servicedesk.hermesairports.com
uat.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
it.littlegarth.org
*.mkspamp.com
servicedesk.hermesairports.com
www.mkspamp.com
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
mkspamp.com
support.erm.com
ithelp.visionrt.com
mkspamp.com
mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
support.erm.com
mkspamp.com
servicedesk.hermesairports.com
mkspamp.com
helpdesk.fast.eu
uat.mkspamp.com
it.littlegarth.org
it.littlegarth.org
*.mkspamp.com
www.mkspamp.com
uat.mkspamp.com
mkspamp.com
uat.mkspamp.com
mkspamp.com
itdesk.mkspamp.com
servicedesk.hermesairports.com
support.erm.com
servicedesk.hermesairports.com
uat.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
helpdesk.fast.eu
itdesk.mkspamp.com
uat.mkspamp.com
servicedesk.hermesairports.com
it.littlegarth.org
*.mkspamp.com
servicedesk.hermesairports.com
Certificate
The complete raw certificate details for mkspamp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISBPyIQ2CldgVUoo2gAU22fWM2MA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTAwHhcNMjQwNjIxMTcwMDU4WhcNMjQwOTE5MTcwMDU3WjAWMRQwEgYDVQQD Ewtta3NwYW1wLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOA6 qi8pe7B/BTUB+3TB6gFVXA0NEgbf3RjvGEuOuywedvRKD1s0ZY/qT4UWExHVo7z7 BRTx05KwwXjH1AKhxzsb+Dp3m6+732ee+8I9ycYiGuwmhEWAGk0Ljr9Ad6N2DX6h 0taWK+jE5Spyha5t9Qf8nsN8p+30OZtSzuYMqIsS7PAttIKIPiW8mZUdgCl85XrE m0q9yTWU1fSE28oOmNOprYfeSatRFGLjCbxh89CCsu+ShuXGB2r0ekW618Cor/UF TyRt+nhotSvSG7Bt0JPl4PQV98jjZZds50AUkQfNhWOd5qiSQfGmgb5EVdEidRI+ 00FPMo1X5Quxq+O6dVsCAwEAAaOCAjUwggIxMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQU5eJRHFK5ezS4uABlS+L5gnBs1qcwHwYDVR0jBBgwFoAUu7zDR6XkvKnGw6Ry DBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRwOi8vcjEw Lm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjEwLmkubGVuY3Iub3Jn LzA6BgNVHREEMzAxghMqLmFhZGRzLm1rc3BhbXAuY29tgg0qLm1rc3BhbXAuY29t ggtta3NwYW1wLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkC BAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB kDv1bzYAAAQDAEgwRgIhAPamElmPIumhOfOPf2yUGBUoYfqn+O9ADdFb+HPNYsrJ AiEAv9LwyEA7N7fbZsI34P7pzpu4URPI+TlkD4UwPPZypJoAdwA/F0tP1yJHWJQd ZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAZA79W80AAAEAwBIMEYCIQDIH3BdMha1 RUFOBkzuwd2w3jwgNSmuZu51D/t7iJVXzQIhALz4ukoRoEduVH27eNBlzJ7v2D4W /JNt3jvcVOdT1+4OMA0GCSqGSIb3DQEBCwUAA4IBAQBF+758iDd+rRwFGwfEO3cK ZRrQYjnl/jmDbUKXe6xdgRV/gRHBaN03vaXkx8UcltYWaXKU+5Ja0XgT9FkliXqu Iu6QtUAFI1bMgvAm+FNDsz5ftMskHsWi1L7cBYq4hnTrYWutGX0cDwON1SSj+ubO 3Fbbc6Q53rJ7gtZcKy188tMkV9SNGbjqZTg8tlXZAXzgn1ICXj6GHFHwj2oTb2Ij ZlWoVOTXnj4jF781TaLxsWdBLs8yNGnLtL08ErwHFKg74nt2kxaA8wZkvnrMpox0 ZxBrit8ddn0aH5E0P4zfOb7WcGxGQvjMK0jvGsrSD1qz1YUDRaP4srK1wP4ZIOaY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DqqLyl7sH8FNQH7dMHq AVVcDQ0SBt/dGO8YS467LB529EoPWzRlj+pPhRYTEdWjvPsFFPHTkrDBeMfUAqHH Oxv4Onebr7vfZ577wj3JxiIa7CaERYAaTQuOv0B3o3YNfqHS1pYr6MTlKnKFrm31 B/yew3yn7fQ5m1LO5gyoixLs8C20gog+JbyZlR2AKXzlesSbSr3JNZTV9ITbyg6Y 06mth95Jq1EUYuMJvGHz0IKy75KG5cYHavR6RbrXwKiv9QVPJG36eGi1K9IbsG3Q k+Xg9BX3yONll2znQBSRB82FY53mqJJB8aaBvkRV0SJ1Ej7TQU8yjVflC7Gr47p1 WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 434381425042654244212311383838694748021558 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 17:00:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-19 17:00:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkspamp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28306308994654985828283562084842430932628168498334661671703981495923880622934115716016485094183347288498270802462120262359878953113078863598266639571241413232629922624924509352466427044026498304481814051913290090051154502146798617189121709440726687342489267401269851114240060926927790105917723571414682230276315773148607345541993962847232920401655213562086739751451564348344070874170582223385945598311449069333915877273758966046869908453486825120559557867349501310655848083409712144625938396879147092281513999317373272870703949549007636105044513627678168416483404824420322372165984608800610450088318869984038323123547 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e5e2511c52b97b34b8b800654be2f982706cd6a7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aadds.mkspamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkspamp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkspamp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001903bf56f360000040300483046022100f6a612598f22e9a139f38f7f6c9418152861faa7f8ef400dd15bf873cd62cac9022100bfd2f0c8403b37b7db66c237e0fee9ce9bb85113c8f939640f85303cf672a49a0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001903bf56f340000040300483046022100c81f705d3216b545414e064ceec1ddb0de3c203529ae66ee750ffb7b889557cd022100bcf8ba4a11a0476e547dbb78d065cc9eefd83e16fc936dde3bdc54e753d7ee0e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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