navapi.mfa.gr

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:ab:ad:fe:8a:52:54:36:5a:05:5a:3f:97:1b:5c:5e:cf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=navapi.mfa.gr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:ab:ad:fe:8a:52:54:36:5a:05:5a:3f:97:1b:5c:5e:cf
Serial Number (int): 275856918623286907876515065730133170872015
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:c6:75:bb:e5:f5:39:3b:2f:c8:70:ff:67:be:07:1a:54:fe:66:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:98:7c:bc:e9:9e:c5:2e:f5:6c:6e:a6:29:b9:d7:c6:ed:c5:f8:39
Fingerprint (sha256): 31:c0:77:15:24:e0:32:4a:6d:57:c6:ee:fd:0f:26:43:e2:35:dd:2d:f1:78:07:e3:d8:80:b8:95:54:22:38:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate navapi.mfa.gr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for navapi.mfa.gr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

navapi.mfa.gr

Other certificates including the domain name mfa.gr

(limited to 100 certificates)
ypenim.mfa.gr
ypenim.mfa.gr
kf.mfa.gr
mail.mfa.gr
ypenim.mfa.gr
cixplap-acc.mfa.gr
ihra2021.mfa.gr
incapsula.com
www.gov.gr
hellenicaid.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
*.press.mfa.gr
x.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr
catalogue.mfa.gr
ihra2021.mfa.gr
www.mfa.gr
www.mfa.gr
protocoline.mfa.gr
mfa.gr
files.mfa.gr
cixplap-acc.mfa.gr
nautilus-1.mfa.gr
200years.mfa.gr
x.mfa.gr
www.gov.gr
arxeio.mfa.gr
hellenicaid.mfa.gr
cixplap.mfa.gr
www.gov.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
hellenicaid.mfa.gr
visportaltest.mfa.gr
shde.mfa.gr
git.mfa.gr
www.gov.gr
vivlio.mfa.gr
www.gov.gr
incapsula.com
catalogue.mfa.gr
mail.mfa.gr
200years.mfa.gr
vivlio.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
mail.mfa.gr
git.mfa.gr
www.gov.gr
www.mfa.gr
catalogue.mfa.gr
vivlio.mfa.gr
catalogue.mfa.gr
catalogue.mfa.gr
kf.mfa.gr
pharos.mfa.gr
cixplap.mfa.gr
danae.mfa.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
www.gov.gr
protocoline.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
www.gov.gr
mfa.gr
navapi.mfa.gr
ypenim.mfa.gr
mfa.gr
200years.mfa.gr
hellenicaid.mfa.gr
kf.mfa.gr
hellenicaid.mfa.gr
git.mfa.gr
ypenim.mfa.gr
e-visa.mfa.gr
hellenicaid.mfa.gr
hellenicaid.gr
vivlio.mfa.gr
200years.mfa.gr
ypenim.mfa.gr
appointment.mfa.gr
cixplap-acc.mfa.gr
files.mfa.gr
mail.mfa.gr
incapsula.com
hellenicaid.mfa.gr
pharos.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr

Certificate

The complete raw certificate details for navapi.mfa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlTeSjmb8/VxK1ZgVjRj
+83zj+kdRGQzWK4smbb3IoecwjTGIsTMPr7WUABH/ow3szbv8QRrJolO5Q8BO727
N1Kk1jvqS4TvabY3fHQM6oIoZylOKmf8v0X9gJusKwJhSOs4kiaCpBX2OH21XEdM
ctRzoUdTbrYYzGR3kV+5uaCIhYYnJDpJ9Ktcyri4mVP5UlL5ZVs/x2v392/lbhUO
ZG27O5DCSDUwofUbQCrjjZr5e1z2xPzQij4f0i9b3JeJzVyLXXHhYhzHG8Cq3sHR
MHX63X67QrizB3eRgHpt5YWu8SE8AFI4Qbh6Fat5H2rspta4aKuoVv4coJyxIkjF
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275856918623286907876515065730133170872015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-23 08:49:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-23 08:49:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'navapi.mfa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25037034511688755749174125112907805323239686422512530238419408275688242001474960280784759837590738094168163438723974014492251422851716275737265962859316063185794734054124579532050500621581043475828412227716945869064201990523584997503736620315755696581502911185777159786567253928343716764180171932726730537405114686009719137249938996894791836504105434289298079390104643477092006748896075139366869904830095827309476873130287407871841214376229404161160981989189345087325805969235125795714572752058335177743355244950081784098829264772314127078684903983884411927622982238492387395680705337674319702623970720573694178543033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ac675bbe5f5393b2fc870ff67be071a54fe660a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navapi.mfa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017de6b241ed0000040300473045022100f2ecb9675dd93b333475fa864aac356e34c25fe879f1967ebd89be90c7fd9840022062c4e53364b083e40fdc17cadc4715043ff33efe22328da777c759f793fba0580077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017de6b241cb000004030048304602210092fd7ecd673d20ad6d10f40324012c58c57f8d6eec5883e2ccb156e1147f1bda02210098c1bed936d9c51bae533b19d5e8a89e20dbbcb99b022d20441b6fab4d55c32b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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