mekpoint.com

Issued by R3

About this certificate

This digital certificate with serial number 03:13:6d:17:c7:90:38:3a:4a:dc:dc:cb:1a:9b:e3:da:c3:b1 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mekpoint.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:6d:17:c7:90:38:3a:4a:dc:dc:cb:1a:9b:e3:da:c3:b1
Serial Number (int): 267947232088772641037371112439037076095921
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:76:57:cd:2b:54:64:eb:45:72:0c:43:ff:69:04:2c:77:0f:6a:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:3b:15:05:2f:ec:47:91:44:f6:f0:11:69:6e:0e:53:b8:cb:49:37
Fingerprint (sha256): ef:cb:79:0b:45:18:4c:3d:0b:9e:b1:d8:e3:13:fd:78:11:73:f3:b8:6f:17:7f:95:8d:0e:f9:62:81:60:9b:a0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mekpoint.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mekpoint.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b857406.web06.cust.bluerange.se
mekpoint.com
mekpoint.se
www.mekpoint.com
www.mekpoint.se

Other certificates including the domain name mekpoint.com

(limited to 100 certificates)
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
u705594.web03.cust.bluerange.se
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com
mekpoint.com

Certificate

The complete raw certificate details for mekpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267947232088772641037371112439037076095921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 20:19:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 20:19:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mekpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821026838013477215676092131463739113109935843668162813656708919059640762270270918196618100474490847610545524056560763816447608796406803776986520729343722247021573764995848960705556042072684082953906667698338157501278913228988192023335539040726422939544168201641163530726802838557813860576573421631810202554037352935224894474351425527850268537629288012807679711933086866329237922867741012045918627713372071585305164827236479858558238164700353038913133352064389725578776879815474021054869156009554308981849566170927273306378492630863594947110600014623100772050221105235003596101798097888321645914213888492769256732237938990023386607433546222544593705901630020520558710308866296635730326805678711237750153076720064317594318894574980980195374205572876207724427286604253122803227511972064851776489706309416759599712807962975934999396685941491683546326024276472007789154954870583706431235279294691841101416258265078574875965322559222581406047533525127206917437040406254413183992557250171638481049420979519089396027016817576651232845490871912983958878462611357055429613927130917291008385936526664991565913321659290598129579161486997256672407635386782874851576220976332059356876124128367974639183027646919438839441578433361277033925272072277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a7657cd2b5464eb45720c43ff69042c770f6aa8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b857406.web06.cust.bluerange.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekpoint.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mekpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mekpoint.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ccc0bc1d10000040300473045022040d2d0beaefa2a7b3962ded37fd3b997ed91eb8161b44436e7d26376956b965d02210088bd4157797c83e605433029579838001020c7fd75e0ad52ab5e4b967d4ea17700760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ccc0bc34300000403004730450220317c2201571c345e127f5e3bfa8481be9433342279aebf7da84c15464e5d162d0221008c83bd759e411a1f3b43c611efb5f88db2ac5289bf93da9ed6633c2a17f23beb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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