markandmarina.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3f:96:48:09:ce:c1:f3:5e:2d:34:b0:b9:77:17:e3:48:7a was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=markandmarina.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3f:96:48:09:ce:c1:f3:5e:2d:34:b0:b9:77:17:e3:48:7a
Serial Number (int): 282974405154964127757998646954996397197434
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:db:e5:9f:4a:f5:76:22:ba:d0:d1:c1:7f:88:8e:cc:55:90:a3:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:61:d0:a8:bb:7d:60:89:27:f0:ca:6c:49:b6:d8:2c:ea:31:79:90
Fingerprint (sha256): 7e:11:79:d4:1c:d2:56:25:0c:22:d9:e9:10:e1:29:31:34:53:2d:91:87:43:7c:d4:3e:7f:94:63:14:ad:77:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate markandmarina.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markandmarina.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

certifhighed.com.hempoperations.com.opj.co.in
gjm.co.in.profoundstrategies.co
markandmarina.com
ponderacounty.com
sekase.com
theorganizers.com.palam.co.in

Other certificates including the domain name markandmarina.com

(limited to 100 certificates)
arbitrageurs.id
longhornrecycling.mobi
www.faithfullyeducatingamerica.org
ksn.me
markandmarina.com
markandmarina.com
markandmarina.com
xb1.co.za
blood.vc
markandmarina.com
gotpoisonivy.org
dngo.accompli.sh
markandmarina.com

Certificate

The complete raw certificate details for markandmarina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtihAfxXQjt0mT4YHunzt
l3zDmnmCftvkaBIA7meWfS3Owv7cfiGFJ1fW8fDrkWV4ezS71Ohpr41nvZtTzF+k
RxdGEIAOo1bLMpfb8HzD6iUYCdxD2/Wc1DaZBuHH534pEhn30AGpu6qq+YeyUyQR
Wkm2Ia63KjP028bQbaziodxvdZ/uc0rGLrJRNVyfCZU3xya5t3EHlWMLf7yxRvYn
QloD5TbcQ0KUDz3f2slWdTKdns30BqiKKnL7GKkEqX0qk7saWlWP3A1BS+W1l392
O0DrcErGD1T0nJaNGcDs1FEiGKBevxu655TDCSyJESUxKmmZPkym82X9Rnkz1MNe
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282974405154964127757998646954996397197434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 08:36:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 08:36:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markandmarina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22995220474806933800022327487356467075963811956367283866844977242773528220967849679857186074174936214151349038801141425198275642530491988430908716929868761932527745824384974522501919700286791864946593919794691429277469481270062267321022233994348024645724382557669779554096605337139546957827312317522717015111391056146545451051320877328942821992268934317110604127586155451049822384577090072494056717657463571377548388289264344814542111052792012220807682174388652525295334649689881720791546989885335405475700055279168496526069030751778941954712945781513526410324167338923570356404323929525434513455819843935048049057369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4dbe59f4af57622bad0d1c17f888ecc5590a3e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifhighed.com.hempoperations.com.opj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjm.co.in.profoundstrategies.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markandmarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponderacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theorganizers.com.palam.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c67afae870000040300473045022100814f44242a8b4de10f82b03a42a1d4e9d61ca4907c3f8f12f2855d120fbb333a02200c4e1090e2811cf9015e59fbe7928cd39a50285f6e78ae00956a2e8f17e7a51500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c67afaed3000004030046304402207a7016d213778859fd17af0988c3968ca76c551cfce03fc3f08bd5d3490e9c67022032675fdfdc1c3ae5f2a23818980c5f04900b46883e9ca0e52b7f08dd5831ea8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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