monumentregroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ee:87:68:20:60:dd:61:18:9b:43:63:ac:15:e5:0b:38:b0 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=monumentregroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ee:87:68:20:60:dd:61:18:9b:43:63:ac:15:e5:0b:38:b0
Serial Number (int): 429616333489240116643092882392487689926832
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c0:7f:d4:0d:8e:ed:fd:d6:80:11:0e:81:58:c4:bd:5a:b1:1d:1d:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:ac:84:e3:27:af:75:03:ee:8b:aa:5f:52:c6:62:56:26:4f:d8:fe
Fingerprint (sha256): 90:e8:7b:c7:c3:93:59:da:37:6a:8e:d6:6f:90:da:36:07:a3:85:11:8e:b2:cf:f3:54:0c:6b:9c:98:2e:8a:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate monumentregroup.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for monumentregroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monument.dev.twkmedia.eu
monumentregroup.com
www.monumentregroup.com

Other certificates including the domain name monumentregroup.com

(limited to 100 certificates)
monumentregroup.com
sdp.hja.net
servicedesk.monaghancoco.ie
cosmic.monumentregroup.com
support.bong.com.pl
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
monumentregroup.com
helpdesk.alivetravel.com
itassist.harrowschool.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
help.thereader.org.uk
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.endrich.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
monumentregroup.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
servicedesk.ambient.org.uk
servicedesk.durbinglobal.com
helpdesk.greenfood.nl
servicedesk.labbuit.it
monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl
help.thereader.org.uk
servicedesk.monaghancoco.ie
helpdesk.cartrawler.com
monumentregroup.com
sd.kormotech.com
cosmic.monumentregroup.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
ithelpdesk.ocugroup.com
helpdesk.nauit.lt
ithelpdesk.ocugroup.com
help.sch1584.ru
itassist.harrowschool.org.uk
itservice.roxcel.com
servicedesk.endrich.com
servicedesk.ambient.org.uk
helpdesk.cysec.gov.cy
servicedesk.lumanity.com
itsupport.actibel.be
helpdesk.greenfood.nl
servicedesk.durbinglobal.com
servicedesk.monaghancoco.ie
itdesk.solargis.com
helpdesk.vandenbraembussche.be
helpdesk.nauit.lt
support.sysco.uk.com
helpdesk.trinity.croydon.sch.uk
helpdesk.adc.ro
help.idowa.de
servicedesk.cplaromas.com
servicedesk.cplaromas.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
helpdesk.trinity.croydon.sch.uk
monumentregroup.com
helpdesk.aldaholding.com
servicedesk.lumanity.com
servicedesk.monaghancoco.ie
www.monumentregroup.com
helpdesk.alivetravel.com
helpdesk.alivetravel.com
helpdesk.szallas.hu
itdesk.solargis.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
www.monumentregroup.com
support.sysco.uk.com
servicedesk.durbinglobal.com
service.myspock.work
servicedesk.monaghancoco.ie
help.idowa.de
helpdesk.adc.ro
helpdesk.porvairfiltration.com
servicedesk.cplaromas.com
sdpondemand.monumentregroup.com
demo.servicedeskplus.nl
servicedesk.phmg.com
demo.servicedeskplus.nl
servicedesk.endrich.com
itsupport.actibel.be
servicedesk.monaghancoco.ie
servicedesk.moredun.ac.uk
helpdesk.greenfood.nl

Certificate

The complete raw certificate details for monumentregroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L2vO2jTialIuajGgyJj
9IPiJrtbFJimIFPAGhp1tgc0FrVwiYjNJ89pdemrbRVikL4L2axGoojy8T9JgYN8
yX8aG5NbNdPVd6mWHHh8cgHK5C4/CRMzGQcCUp2aQ7N22Nb3jG5nd/qxR0F61rYq
2BZG+sKjwCpC2i2971Oy4sA3Rj+Mnev3xw2Muwsz7HjeVvssRHt+yRwUcOZeT7bY
NjASIJ9V6tbtPPjKguZlfezOM3bLJ+3rvJCt3aCkUsTXqfJQd/hSbZeiutdkMdgW
MwPxHBvwWtyjyO7lS3PCka9kb2FczMS0Q2HQgXWvM0vWQmgLvFkWX0On2EcB95fy
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429616333489240116643092882392487689926832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 22:41:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 22:41:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'monumentregroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30895683324968307220477154841356543352086353527918187691522065699512123655337342843452995852851033602361950895877790279887666036988810953192876661218921991743464957742615196424596175259976681413341483118453055682163463975630266650171999270547682596313406795962192428402102138540924825607613057427492022991626626799054480889906076367236825639644441755551555718892723123742944616264388651176133616360219628745167842349307445572178839645603549255392876801672612634730963092160617938867433906433072581341663848776886935771899932482492990159918615447194474554001684694564372395917628359462988663098115306622321525746299551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c07fd40d8eedfdd680110e8158c4bd5ab11d1d8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monument.dev.twkmedia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monumentregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monumentregroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cda9abc56000004030046304402203fb0b8811ebd0695bcf6c604fc88e40041e2093f4b769b758ec9a7c6c67619ed022065f26b494fa46a1f5c8b146d969fba8bec837b85aa7d71c5b1c30c54545e4b0b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cda9abc560000040300473045022100a99ee636461bc0558307cdcc5937fea81ae7f04c7c130e3e80cadef5fe596430022048b5018c115665c05bc7e92680db4a179dea9285282db03f93a28260bcc1f504
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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