www.marketinghorn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:c4:9a:cf:b8:23:28:7c:3a:16:f4:81:d9:49:20:5a:c8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.marketinghorn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:c4:9a:cf:b8:23:28:7c:3a:16:f4:81:d9:49:20:5a:c8
Serial Number (int): 303112639073572941134489297153233361328840
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:10:f1:93:27:4b:7b:f2:ee:60:f4:d5:4a:72:a5:18:4e:9d:97:fc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:4a:ca:ae:30:86:43:ed:00:fd:b7:75:fe:53:5a:93:6d:df:2e:ab
Fingerprint (sha256): d1:ff:f6:68:46:49:62:d4:20:32:6c:b6:84:95:e0:17:d5:bc:1a:59:a1:23:4d:64:56:0a:47:37:df:16:83:05

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.marketinghorn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marketinghorn.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.marketinghorn.com

Other certificates including the domain name marketinghorn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.marketinghorn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303112639073572941134489297153233361328840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 06:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 06:25:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marketinghorn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800282938175659985628422706063421453480993517070657825617248518367680845387206027307150846109744400997879078690073203830486526557832028149892386139571012768622339057568316102898435452397284827480945904332511930398106104545679727298462653821251603181784855385469874301854032795311120812081196066502057470136690490664639488283876940517300307224748828639049287533931459758100969872074434862463098446690465923533107189233519972425606691137579718324449471903597254371481765708674547096089164302430700323361719303636645207206620371487132949705462232323791419766578587635304502108683196932177908515066949780270644547171630241283547112716361078314183039664957072876479784384054683319718663403111277454094459144375330074989951238247702490417037440642453835923394494509570330473463209214351904782675480548170541078681593946187314933576825546172316193521216592955897530801626713148127738475157747796439110023912899149371123390206443168158574131063451215478257245582307574091224055929311168648045373508933056544566149254948629022506215065416536297295309364511058839221564618369738935559873072126361161884126262150161005931263800829955802539936593175527890021694920046787251452740290237561430370389293083084044336566996251141891489970879399449771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb10f193274b7bf2ee60f4d54a72a5184e9d97fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketinghorn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f3bf2b16d00000403004730450221008f2365bbfb4e4771356f5767a3c5fcbb42c9edd146da463d2799ca3ecdcf6bde022063944093e5518558ac0c04e01be2d42e381aea288e8cb897b526bea19bac5ecf007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3bf2b15c000004030047304502203ed1cc3af37bf570319ae259801052b02b4b48ed124a3e527fc0b091723f91c0022100ae96bce47d189b447d7b29bbe4e5ba8679bd6889b20fb74178387c9160a00be7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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