markgrafconsulting.com

Issued by E1

About this certificate

This digital certificate with serial number 03:9a:5b:81:8b:64:e0:50:35:c2:6c:bc:e6:82:b8:15:ed:53 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=markgrafconsulting.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:5b:81:8b:64:e0:50:35:c2:6c:bc:e6:82:b8:15:ed:53
Serial Number (int): 313861974682263614419575815415644598693203
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:0a:eb:3a:18:a1:e6:21:29:82:be:66:5d:37:9b:2f:58:58:c2:e1
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac

Fingerprint (sha1): 8e:c6:69:cc:8b:d3:1f:b7:85:71:ec:62:19:2c:fd:35:31:f8:97:47
Fingerprint (sha256): 5b:ad:5b:5c:e0:5c:d9:53:57:a9:cc:00:06:bd:a9:f9:26:f9:0f:fe:84:09:a3:56:54:ab:fe:54:45:e9:b2:17

Issuing Certificate URL: http://e1.i.lencr.org/

Revocation information

OCSP Server: http://e1.o.lencr.org

Check the revocation status for certificate markgrafconsulting.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markgrafconsulting.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.markgrafconsulting.com
markgrafconsulting.com

Other certificates including the domain name markgrafconsulting.com

(limited to 100 certificates)
expense.markgrafconsulting.com
expense.geoinstinct.com
expense.viamotors.com
expense.geoinstinct.com
expense.lpros.biz
expense.asmesecurity.com
expense.geoinstinct.com
markgrafconsulting.com
expense.sycorr.com
markgraffarms.com
expenses.teamlagom.com
expense.lpros.biz
markgrafconsulting.com
expense.geoinstinct.com
expense.geoinstinct.com
markgraffarms.com
expense.oxbird.com
expense.puryeartanklines.com
expenses.teamlagom.com
exp.emtmeta.com
markgrafconsulting.com
sweetridebro.com
markgraffarms.com
sni.cloudflaressl.com
expense.lpros.biz
expense.galaxypayz.com
expense.lpros.biz
expense.sycorr.com
expense.sycorr.com
expense.asmesecurity.com
sweetridebro.com
expense.markgrafconsulting.com
markgrafconsulting.com
expense.galaxypayz.com
expense.oxbird.com
expense.printfactory-usa.com
markgrafconsulting.com
sweetridebro.com
markgraffarms.com
expenses.teamlagom.com
expense.one52.ae
markgraffarms.com
expense.geoinstinct.com
expense.banyantree.ca
expense.take2av.com
expense.one52.ae
expense.markgrafconsulting.com
markgrafconsulting.com
sni.cloudflaressl.com
sweetridebro.com
expense.geoinstinct.com
expense.viamotors.com
sweetridebro.com
expense.printfactory-usa.com
exp.emtmeta.com
expense.banyantree.ca
egresos.the-smart-store.com
markgrafconsulting.com
expense.viamotors.com
expense.viamotors.com
exp.emtmeta.com
expense.sycorr.com
expense.oxbird.com
expense.dxbme.com
expense.banyantree.ca
expenses.teamlagom.com
sweetridebro.com
expense.dxbme.com
expense.galaxypayz.com
expense.asmesecurity.com
egresos.the-smart-store.com
expense.puryeartanklines.com
expense.one52.ae
expense.dxbme.com
sni.cloudflaressl.com
expense.printfactory-usa.com
expense.puryeartanklines.com
expense.geoinstinct.com
markgrafconsulting.com
expense.galaxypayz.com
expense.geoinstinct.com
expense.printfactory-usa.com
expense.take2av.com
expense.geoinstinct.com
sweetridebro.com
expense.oxbird.com
expense.banyantree.ca
expense.geoinstinct.com
egresos.the-smart-store.com
expense.take2av.com
markgrafconsulting.com
expense.puryeartanklines.com
expense.geoinstinct.com

Certificate

The complete raw certificate details for markgrafconsulting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1jkLPGp8tHqFV8Y+vz28YOO7QPPH
+bZXlVwgrgfpnSN2QFZU7MJuOPrfMGQkXsQQ7x5sqDNsuAcidGTbEuA8gQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313861974682263614419575815415644598693203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 10:06:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 10:06:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markgrafconsulting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d6390b3c6a7cb47a8557c63ebf3dbc60e3bb40f3c7f9b657955c20ae07e99d2376405654ecc26e38fadf3064245ec410ef1e6ca8336cb807227464db12e03c81
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							940aeb3a18a1e6212982be665d379b2f5858c2e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markgrafconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markgrafconsulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c86e834e60000040300483046022100eb4dda36031c39283ee0c3927796115ae96f36fd7fd2bbc34c5a411c470ea9d2022100f96508c5270ba880f12360b3f5e3edcafc481a7b86ad64b0e12f53f90ce7e91600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c86e83570000004030047304502207e358d48e88a6e29e3c6241ef19e0542fb3bdf5e68c43eab723900d139c8b6f50221009ba3203ae4643c2a73649ba3cc7e739478b0eb46b35ef1650f5f25ae592bda24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18186144171626754600887066046590811902535919689970520367253274574333212348882895554685853101048134813841535012416751
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20883109952094418287890081577430079576838883508240390118726006407810044029316528814380422411223205960181413233235112