markan.me

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:c7:aa:a3:64:ca:cb:1f:40:94:da:4f:8c:45:5f:a0:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=markan.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:c7:aa:a3:64:ca:cb:1f:40:94:da:4f:8c:45:5f:a0:70
Serial Number (int): 314346027043671694134258155347857868038256
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:7e:da:f0:48:98:27:81:da:45:29:ba:3e:4c:98:3b:40:c8:c1:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:cc:9a:c8:6b:08:99:94:35:db:0d:28:5f:41:37:07:17:1c:b4:41
Fingerprint (sha256): 54:c0:3a:82:b8:8a:46:2b:f7:2b:aa:ae:14:9c:4f:29:f3:ef:00:31:96:46:0f:96:b3:1c:0a:56:11:20:9a:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate markan.me

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markan.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

markan.me

Other certificates including the domain name markan.me

(limited to 100 certificates)

Certificate

The complete raw certificate details for markan.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M52yLh3ABJzLq90AG02
oSqF37pyBEDaKHMXI2p/7aZFnM81pdaUShoQejp6Vyc/GTTxFNnfnHzFMCnlapyt
lQTb1mu8068WjHPhCHZHjCiPot5CwT55gGhytAm/JTy7zcLwCgmmVyDXGRupIP3N
7muBmH0sjjm+4RMZCheN++nG3W94xOwTDbeygq8Si4DrN5+Gp2C9XGgaGxw+RK8q
zfZ4tYUGPomjAxX0tWRWtl0tsMJ2HnPm4o3wNEtxjoaWmqDNU8hs4M9c0KopNeOs
4QZtmWwBdf1ouCWVaRVWf45oykosoW7FAXLJ5kqnjmXAyq5gpNqzpkrydfOAL+e7
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314346027043671694134258155347857868038256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-10 23:37:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 23:37:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markan.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27874238285612670708044781935320889009882051345867723136108684316093616661173300297486439511037832800557427851445479206471966682732284658665168285078713789520395848496879820535949384136816398029360981313810935907796961648747888505702009386358833384236286297042170393828276139020256926913771447642613297910153368036036460459671970515580544971865356082100858763654318061147580030508291982491304106736187105382810821288491034484200973736430215329534116462156872312803650560911269936635727087585122052467402503020746107393567403802443793410242307600928713635335320123154127463589986740516985884263844633824190357987375923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c7edaf048982781da4529ba3e4c983b40c8c165
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markan.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018942616dcb0000040300483046022100e5f494e96007659b9e941db4e205d425a32c1fdce00e6cb1d160741bc50244a1022100ba2a94842c77d693182cf2a04e403b48a0d3d1b652d65c05cf6b73e01544c58e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018942616db6000004030047304502205140f4174734bd0c9159c32225e211a56d69b7508f49fc34886a1f50a00d2545022100c73bae921822444e4439f96de1a26b6357223598fea894347c7a869c412ee3d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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