cixplap-acc.mfa.gr

Issued by R3

About this certificate

This digital certificate with serial number 03:bc:13:98:1a:7f:c2:66:31:52:8a:c3:21:f6:cf:1a:1d:5d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cixplap-acc.mfa.gr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:13:98:1a:7f:c2:66:31:52:8a:c3:21:f6:cf:1a:1d:5d
Serial Number (int): 325335987874924371735883366754473232440669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:fd:14:f8:74:68:0e:8a:0e:7f:7b:5f:6d:d5:96:8e:a3:ec:b0:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:bb:9a:39:47:9d:bb:87:24:b2:34:5b:20:4f:9f:bb:76:4b:43:73
Fingerprint (sha256): 41:07:7d:20:1d:8d:c5:a4:3e:52:36:35:15:86:a8:83:44:d6:14:b0:51:85:85:78:3d:7c:72:79:9a:16:12:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cixplap-acc.mfa.gr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cixplap-acc.mfa.gr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cixplap-acc-mgt.mfa.gr
cixplap-acc.mfa.gr

Other certificates including the domain name mfa.gr

(limited to 100 certificates)
ypenim.mfa.gr
ypenim.mfa.gr
kf.mfa.gr
mail.mfa.gr
ypenim.mfa.gr
cixplap-acc.mfa.gr
ihra2021.mfa.gr
incapsula.com
www.gov.gr
hellenicaid.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
*.press.mfa.gr
x.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr
catalogue.mfa.gr
ihra2021.mfa.gr
www.mfa.gr
www.mfa.gr
protocoline.mfa.gr
mfa.gr
files.mfa.gr
cixplap-acc.mfa.gr
nautilus-1.mfa.gr
200years.mfa.gr
x.mfa.gr
www.gov.gr
arxeio.mfa.gr
hellenicaid.mfa.gr
cixplap.mfa.gr
www.gov.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
hellenicaid.mfa.gr
visportaltest.mfa.gr
shde.mfa.gr
git.mfa.gr
www.gov.gr
vivlio.mfa.gr
www.gov.gr
incapsula.com
catalogue.mfa.gr
mail.mfa.gr
200years.mfa.gr
vivlio.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
mail.mfa.gr
git.mfa.gr
www.gov.gr
www.mfa.gr
catalogue.mfa.gr
vivlio.mfa.gr
catalogue.mfa.gr
catalogue.mfa.gr
kf.mfa.gr
pharos.mfa.gr
cixplap.mfa.gr
danae.mfa.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
www.gov.gr
protocoline.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
www.gov.gr
mfa.gr
navapi.mfa.gr
ypenim.mfa.gr
mfa.gr
200years.mfa.gr
hellenicaid.mfa.gr
kf.mfa.gr
hellenicaid.mfa.gr
git.mfa.gr
ypenim.mfa.gr
e-visa.mfa.gr
hellenicaid.mfa.gr
hellenicaid.gr
vivlio.mfa.gr
200years.mfa.gr
ypenim.mfa.gr
appointment.mfa.gr
cixplap-acc.mfa.gr
files.mfa.gr
mail.mfa.gr
incapsula.com
hellenicaid.mfa.gr
pharos.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr

Certificate

The complete raw certificate details for cixplap-acc.mfa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325335987874924371735883366754473232440669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-01 01:01:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-30 01:01:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cixplap-acc.mfa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635374800187405160212883480774752906663251244245798617888209462723779279328828468665853941039337580306871024813291190418202636334372673562402366915659401744322522535787002374342765979829846098652372542649780754984606003684306912598788389689982124005987616131086481091231679669242824802127789388200235663400031743778867591848273523061877326206113006637824337006570302860344688850496872569938628179411829679421844819223711123501243329120072442159203895426180846128460317146742403663705790584386631178400894828531040634750893415837261486478212702247976536951720431764580358945324960227937700452814931931810536685219478932964427842148598337601202142508349270565287172902804539513210896469035772312772967172038726109475464725126594259809479260368570426569042954195818355295380419604898004669331877795390343353665596897732740778439203234508826006146551631704272011581334336430328399725378547037873288423888891453258425380775055153054020264727747544416171104914329547605773806657114470765103353767011160297283916270983149889696650501702788432138038675783419226206759500656895400951270246579876396582173785733124830044159625263497461747206161515632549361461642414182127672498424194462028000878380373040263012421921411302013407490032490495879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccfd14f874680e8a0e7f7b5f6dd5968ea3ecb0ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cixplap-acc-mgt.mfa.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cixplap-acc.mfa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017925a928cc0000040300473045022041999ec89004e9da22e16cf678823250410cd1bc83471af049ab551f7270225a022100ca4d3015aff19915a13b0f73e5428ba61dcb3460623dd58eb10951d2cc05188c007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017925a928ea0000040300473045022100c79196a682e41950d068eda5e2d4eac9c932cf9dd79896166f9e0c6a376f02d10220085cd0a8b659b1c8d1f0371c3f4aed5c11ad30e403a4fc8b7ebd5626e1fd69a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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