margo.eu

Issued by R3

About this certificate

This digital certificate with serial number 03:53:72:94:29:e9:80:84:d2:f4:73:3e:33:c4:9a:7a:21:70 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=margo.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:53:72:94:29:e9:80:84:d2:f4:73:3e:33:c4:9a:7a:21:70
Serial Number (int): 289732595551251906242545517872037349695856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:d9:c5:c9:9f:d0:74:3d:14:97:12:56:ca:d8:dc:82:3a:90:2b:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ff:8b:57:4e:64:3c:f8:0e:2b:c5:f8:5c:93:bd:02:27:aa:7d:57:f2
Fingerprint (sha256): 8c:6f:9f:aa:90:da:d9:3f:08:47:c7:4c:58:40:8e:eb:4b:9f:ea:20:5e:79:73:e3:05:73:1f:76:58:49:61:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate margo.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for margo.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

margo.eu
www.margo.eu

Other certificates including the domain name margo.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for margo.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289732595551251906242545517872037349695856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 20:26:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 20:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'margo.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861385762253201612324575303784221704280557205022973254976088398144473759926746449072053771202811991943752911514584850810792567628209140858894690144459348992797278462822351544113634493074709982923858816402851751334311078385860531265197970690690163405879451671987761792506404338805452047493058284948518021068140318446838701708344659612763423482615022124845826115938673136795790157338696990354910570585036052143532320998072834646980467186185823808175488694245535474742795718793676887073138206134368692620573170015067802403676084428319422742607781760318141727527629402268466652325153384570655369070958757084724643630263760113537127502563180802362051307040000619615775906810306485082781978143189882278907636521673297576645407732665017983016237137527226462592010206720174688511005047101382742319826588910694472000746855307145395837409896435826611545382290144212013823720734706500611618460827184518472753669286403263981671406211155945320930519593970882459027025247540658982469187289274673175176303592673562444972515735563036567494185572526661809932390953959420836286299759338638829601621382120335985069003918174383691512723417499587220114375834353236048141828204163254102646858647018870908536455387087499100510157908271299156456140903883397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4d9c5c99fd0743d14971256cad8dc823a902b44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margo.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.margo.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f30e74bcf0000040300473045022100c41505751ad171ea6ae6f2e115d287b9b14c0cbe6fb25349f39fcb0515d9d93902205b6273746c81ef90151260a9d46fe9f2bff7d863f4f783a1d9e9c37bc4ccf0bf007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f30e74bd50000040300473045022100bc883d4e4e3b7e484a4310d72313e79dad1b819cdd0c9511ea961a52304a9ec002204319bf9d53b43d64029342708c3c291371f9e66c50ac295fe9b8cf7294a5aafa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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