mkt.marzanoresources.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0d:ff:68:86:08:08:49:01:94:28:b8:75:af:57:80:74:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mkt.marzanoresources.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:ff:68:86:08:08:49:01:94:28:b8:75:af:57:80:74:0b
Serial Number (int): 353212310353290904109740078847224776258571
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5b:6a:6b:1c:e5:ff:df:d3:90:13:ec:70:5d:97:8d:a7:0f:10:d1:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:7e:e6:ef:c9:41:56:69:fd:50:58:6e:a0:14:ec:c1:81:9a:4a:cb
Fingerprint (sha256): 7e:a9:4b:7b:82:98:45:1d:89:69:e2:29:c0:d1:91:ff:04:33:29:61:d1:80:eb:b0:bf:58:5b:da:9d:e2:f8:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mkt.marzanoresources.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mkt.marzanoresources.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mkt.marzanoresources.com

Other certificates including the domain name marzanoresources.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mkt.marzanoresources.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISBA3/aIYICEkBlCi4da9XgHQLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTIxMTQ3NDJaFw0y
MDAyMTAxMTQ3NDJaMCMxITAfBgNVBAMTGG1rdC5tYXJ6YW5vcmVzb3VyY2VzLmNv
bTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANHym1IHva7OHK8WOV3s
Cm8QZ34tdEodZUbtE9GPANFzajOHQDBTL2uydD9GBV/TPye5to07jGadCl91cLkg
jWsu4Q/+Igmofh33aYAL3jCtcyrrPyA5cqK80ft6f/RzaPQRbPzUJtDWVYeZFdeI
zhhCMVlwp9ueNVT6gIWpdkU+8XemMWEuZ1nbWK3+MfHxpqSvGVbLcKFzTgL0jhxx
oCm+5mflr5enIxa5MJCGB1qiSBqmH6z4KVBCj9slK8a0YG5IT7pVeGaRPNLl66AV
Cs70tJOxelRlZFNPwbwbCuCTGyq36afV34U5qyNss2V/OfD1BUlAR4gGxjhGBkHH
jc7pMAnOVHhpUbD/Pwj7gtKt9z5gCMKfpKloUsg86s5hWNNNw7h4Gg1uThXpv+na
vbqdk5Vqy8IbLnDqEK6xGkkvmF+TlJjuwGGrjUh3SzOF+Bb8Xyogx8Gmlj4E8nYS
VyrCBPFBfK++dzG2LxoDmf5INAbj4L4yc9p0W0VkeHTRP3Fsms1niNFBJPeuV988
gCFvQ2LsUfPjRIjGpMY/mHv3oDP2ieFSIXslgNB+ufr6+UpwmG3HHcKSgNvCahUG
D+b0MR0GdU7s+GoTEZgenJWELn3jqBE1WEmXmd9n5+cn/bZTu5b0l3SMCtNgW7Dl
BHUE6/gd275URYglbzwRlOCLAgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFFtqaxzl/9/TkBPscF2XjacPENEQMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYbWt0Lm1h
cnphbm9yZXNvdXJjZXMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfj
meHQNKawqKqOsnMAAAFuX6fN1gAABAMARzBFAiEA5R4fexVNcvSSS/j1JD3lqmSA
Jaq7bpKoXuPpXDCic3MCIEWcS9OFTi/G2xPeYWo20aFPiUqtJfHoH4Q1dMDxQxry
AHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuX6fN/wAABAMA
RjBEAiBRR0yPQm11lgTVI92bxKyDa/YunWZ/fJzk0Eji1LrXAQIgHA9epAiRfI7f
ggUIP1sCRfS1NDLT11tUpN+u+Hy0o+gwDQYJKoZIhvcNAQELBQADggEBACtptzrC
qkBAT0vHWIGSBb9vkcNxsX7Ddq7/eQV5KplxOAKdCMFPRm425eeyNktHhqjqjTqy
Mb2JOBnlBF1YLPxjUk6xNIKPSwPRK5rJViS+Lc8MVPEFRBAw3bn8UAJJlbKkQtY5
z1vH2IiciIBZpJ1NfHLbGYlecgoyK8YSm5mJkGLOo5mXHs6ozxJwhonNNKszRtKj
k8kyzCda7lCvCP141yNgjfPpAmC9PhchQIAkV11Yu1zb5EZoVLOG67T4JGk1TvPQ
+ZlbHah35IUc6N9KqjM33wITa8zHQF8h9ZFX/NYGUKPe1Y92YwqJlJf5/Ivjivd0
fLqeBo6XY+SzvAI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353212310353290904109740078847224776258571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 11:47:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 11:47:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mkt.marzanoresources.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856511817512584009483340196091684084307274443253572227794355581089965667998811770030419929109987536249157461123361094165774939754818697352323550298723967794414830627013090321180298087039903056832408502565044570252933101550873409907968469373294336230995202637208537884154623476766009138598299375372675387014022688207216661855649045013884625448526826553788824244824244486570486257120498474525509660363967470591163189019990222990455550065689931146666425945332746991800478357137034608361555311513511263722302671124430710660831869107966689156313463365562400401437853780970462224609664042874802025898551372798598727397089125379704147008026804077625226044355856748968087836032183576345681345664012625497016298368366983403649508845648384010613705453298618950965789271742958086679795533127762700743572493922425064613850704300028715905311143718300253835112338548598500809888972120084147284066653261168890212188217476098265268406818222735205701445151717937861974307342641255308395387694175500013708397674725589879519817594526534416678103606120603658638785243743647585287794232579160163990151280662925688902039094863969415416991036457770677583798176674359713947587580092882114371596062960549641247380248238257696698532377546825505264943823642763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b6a6b1ce5ffdfd39013ec705d978da70f10d110
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt.marzanoresources.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e5fa7cdd60000040300473045022100e51e1f7b154d72f4924bf8f5243de5aa648025aabb6e92a85ee3e95c30a273730220459c4bd3854e2fc6db13de616a36d1a14f894aad25f1e81f843574c0f1431af200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5fa7cdff0000040300463044022051474c8f426d759604d523dd9bc4ac836bf62e9d667f7c9ce4d048e2d4bad70102201c0f5ea408917c8edf8205083f5b0245f4b53432d3d75b54a4dfaef87cb4a3e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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