mm.am

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:90:8a:14:3e:1e:53:53:49:ee:cd:17:a4:57:3f:9f:88:55 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mm.am

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:90:8a:14:3e:1e:53:53:49:ee:cd:17:a4:57:3f:9f:88:55
Serial Number (int): 310521057201163396013238490829903286470741
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:88:d8:60:20:a6:f4:86:fa:7d:df:7d:e4:0a:ce:52:c8:d6:e5:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:2e:4f:4b:1f:53:aa:b0:e6:8e:8c:8e:d4:8b:50:51:0e:1b:a9:60
Fingerprint (sha256): e7:bd:99:5f:7f:ca:a0:2d:b7:1e:da:ea:fb:23:fc:f4:6f:00:05:5e:02:a4:b4:45:b7:c0:13:bd:04:08:e2:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mm.am

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mm.am

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.mm.am
mm.am
www.mm.am

Other certificates including the domain name mm.am

(limited to 100 certificates)

Certificate

The complete raw certificate details for mm.am in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310521057201163396013238490829903286470741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 02:10:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-14 02:10:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mm.am'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759558079566255265813137993477778740047333204754970952591336958653798624651595905158503422158377979872529782961057640123832430117451792164903311020723306293372210980224518332603811993136932662080689365003895248833756382674998538410914023874262738407627781633647561031103116409831921407000565303385312801532541924578081574523289164180213657221256230971773888890529790527975852875897406070088717470783676114704642864079582040077654220906838915960757077085099549065052681830618380536103754605593615551700291778838248845606885380441941581499460835732574864124907008983373573758673482425823306663513907155544828397695027804532227299840756058571864732864306490705857293856232724657871977837721003845540764177469993262743009132135596194951716212191402155186748262936701689111319384182391101078743406836919141979338376402532555893353303234260859918833731907295680731184222029222365844863649641713237059952747194077527942403940554726522971443006446888838247742873970600345114378697547197935590381829714291457279576920113407939395194235327143850429816341151674047415816081937391813142704109418442607412483902713332597163475108888864391089972776637724402294222820148591047963567052099989093002018338440959146587747807131459942514451744164543439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e88d86020a6f486fa7ddf7de40ace52c8d6e5ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mm.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mm.am'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001671a7f45b0000004030047304502203bdaec4c641afcd9b88ab65159dcb13de82bebdedff77059fc7ebd21516ab953022100ea7d206274265783a76367dba63578ba597b0988b1b33374d0a920b4367f981c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001671a7f46030000040300473045022100f0de11098cd7cf426c5fe872742466cdc77220383f26962abf50f471c1b30df8022067eec51adb36e13fe54834dc2a3a2db45420441ccc8881d98a04ad45dce53686
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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