markgrafconsulting.com

Issued by E1

About this certificate

This digital certificate with serial number 04:a6:20:10:48:35:1c:f1:ea:1d:d3:c5:78:f6:b4:92:fb:a0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=markgrafconsulting.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a6:20:10:48:35:1c:f1:ea:1d:d3:c5:78:f6:b4:92:fb:a0
Serial Number (int): 404978636473073167499748538667437688814496
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:60:ef:de:d9:0d:ab:ae:af:d3:ee:bb:0a:1a:57:e4:0a:63:0c:ac
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac

Fingerprint (sha1): 56:01:d7:04:6e:70:35:2b:16:f5:e6:0c:f8:5f:08:08:14:8d:6a:d6
Fingerprint (sha256): 3e:f6:9c:2f:40:40:5f:f7:9a:f6:ac:94:a2:6c:bf:15:e9:0f:d7:d8:1d:a5:6c:88:06:90:7a:4d:e8:9d:98:05

Issuing Certificate URL: http://e1.i.lencr.org/

Revocation information

OCSP Server: http://e1.o.lencr.org

Check the revocation status for certificate markgrafconsulting.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markgrafconsulting.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.markgrafconsulting.com
markgrafconsulting.com

Other certificates including the domain name markgrafconsulting.com

(limited to 100 certificates)
expense.markgrafconsulting.com
expense.geoinstinct.com
expense.viamotors.com
expense.geoinstinct.com
expense.lpros.biz
expense.asmesecurity.com
expense.geoinstinct.com
markgrafconsulting.com
expense.sycorr.com
markgraffarms.com
expenses.teamlagom.com
expense.lpros.biz
markgrafconsulting.com
expense.geoinstinct.com
expense.geoinstinct.com
markgraffarms.com
expense.oxbird.com
expense.puryeartanklines.com
expenses.teamlagom.com
exp.emtmeta.com
markgrafconsulting.com
sweetridebro.com
markgraffarms.com
sni.cloudflaressl.com
expense.lpros.biz
expense.galaxypayz.com
expense.lpros.biz
expense.sycorr.com
expense.sycorr.com
expense.asmesecurity.com
sweetridebro.com
expense.markgrafconsulting.com
markgrafconsulting.com
expense.galaxypayz.com
expense.oxbird.com
expense.printfactory-usa.com
markgrafconsulting.com
sweetridebro.com
markgraffarms.com
expenses.teamlagom.com
expense.one52.ae
markgraffarms.com
expense.geoinstinct.com
expense.banyantree.ca
expense.take2av.com
expense.one52.ae
expense.markgrafconsulting.com
markgrafconsulting.com
sni.cloudflaressl.com
sweetridebro.com
expense.geoinstinct.com
expense.viamotors.com
sweetridebro.com
expense.printfactory-usa.com
exp.emtmeta.com
expense.banyantree.ca
egresos.the-smart-store.com
markgrafconsulting.com
expense.viamotors.com
expense.viamotors.com
exp.emtmeta.com
expense.sycorr.com
expense.oxbird.com
expense.dxbme.com
expense.banyantree.ca
expenses.teamlagom.com
sweetridebro.com
expense.dxbme.com
expense.galaxypayz.com
expense.asmesecurity.com
egresos.the-smart-store.com
expense.puryeartanklines.com
expense.one52.ae
expense.dxbme.com
sni.cloudflaressl.com
expense.printfactory-usa.com
expense.puryeartanklines.com
expense.geoinstinct.com
markgrafconsulting.com
expense.galaxypayz.com
expense.geoinstinct.com
expense.printfactory-usa.com
expense.take2av.com
expense.geoinstinct.com
sweetridebro.com
expense.oxbird.com
expense.banyantree.ca
expense.geoinstinct.com
egresos.the-smart-store.com
expense.take2av.com
markgrafconsulting.com
expense.puryeartanklines.com
expense.geoinstinct.com

Certificate

The complete raw certificate details for markgrafconsulting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEop85DovyzvG0Vv47GCqMV2J0wGSb
F19fhheIxYYzMlLE1RhkGLG0fT+ffWyTKsOYepcJ0Zilc4umfHSY9+NulA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404978636473073167499748538667437688814496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 07:41:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 07:41:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markgrafconsulting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a29f390e8bf2cef1b456fe3b182a8c576274c0649b175f5f861788c586333252c4d5186418b1b47d3f9f7d6c932ac3987a9709d198a5738ba67c7498f7e36e94
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1160efded90dabaeafd3eebb0a1a57e40a630cac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markgrafconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markgrafconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a26b4a82e0000040300473045022030bb0fd046639533287dc87dfbacc791136bb5bd068f5af72caa6e15bb1c028a022100d004dbe388b30bf2f70b58a2fca6ad8ce1602b42d43253343116f866187901d6007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a26b4a8370000040300473045022100e754843c0b46fb64c3fed56e9356ec0c940e0fb29b36316da6d589dc765b545e02200a9d215349c46035b4b430a84a5e33b56a16010e13a1a92bb7e37a26e59c8582
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (832 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38973019478278422858353532605818215922115266504259960552644270987972970936498830247253707382485244539846147274473084
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31170589019620036790615845606882241597827321103610438276118167369914241736156692628796242004607968018590189305927640