www.cardioagent.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:e4:cb:5c:ce:16:63:02:3f:c3:5c:b9:e5:b3:86:d0:4c:21 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cardioagent.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e4:cb:5c:ce:16:63:02:3f:c3:5c:b9:e5:b3:86:d0:4c:21Serial Number (int): 426303838539420319044981066433969249078305
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6c:d8:54:08:1c:e3:1f:8c:2c:74:ff:08:c6:a7:2e:ed:8b:7d:29:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): aa:6d:d3:14:8e:18:62:f4:73:95:27:03:02:bb:a6:d5:cc:19:72:4a
Fingerprint (sha256): 1d:82:3a:eb:69:a9:e5:26:bc:b6:19:e5:29:81:39:c9:93:16:c5:87:67:72:1e:ea:2f:0e:2c:c2:a0:68:36:ee
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cardioagent.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cardioagent.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cardioagent.com
Other certificates including the domain name cardioagent.com
(limited to 100 certificates)
www.cardioagent.com
www.ebaojian365.com
cardioagent.com
worldsmostdangerousplant.com
www.wellnesscoop.com
www.cardioagent.com
massima.org
www.polyrest.com
cardioagent.com
cardioagent.com
www.chandelierfixtures.com
7xes.com
cardioagent.com
handmadedogcollar.com
saleslogics.com
www.cardioagent.com
www.cardioagent.com
www.ebaojian365.com
cardioagent.com
worldsmostdangerousplant.com
www.wellnesscoop.com
www.cardioagent.com
massima.org
www.polyrest.com
cardioagent.com
cardioagent.com
www.chandelierfixtures.com
7xes.com
cardioagent.com
handmadedogcollar.com
saleslogics.com
www.cardioagent.com
www.cardioagent.com
Certificate
The complete raw certificate details for www.cardioagent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgISBOTLXM4WYwI/w1y55bOG0EwhMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwODAwNDNaFw0y MDAxMTEwODAwNDNaMB4xHDAaBgNVBAMTE3d3dy5jYXJkaW9hZ2VudC5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC0x6kUB5eBk0bMBVtvooX74/q5 AwaSQlX6nwegTgaS6cxUMgh4hI24iPtOn2+O7Zd9sFfP1hJ+Y3Y0gbncP2MfCMc6 5eYjFXiqOF6s0ho51Iqc5CUiqzzTKuH3pnRXtzI0cwCRIB4VscZJC9yTLuMitL4B 1DOEvcyh/ReUzVrXnEhiTUnm4tQc+BmpMAUJoOh451ysLMGBXlnZfK3WmyQRF2Jh o4pfBrxWlyn7AxgNs/ObB4NpoujN4o7ytZyuXqd4VnEa9VQnOpRpcG1jqLoU0WBO zy3rsMLMuDxViXU/VsE9iDQ4cKIafDqVih7/j6WQud7HcM9IIl/Rd+w3dkKOs5Ch Vi66MfXxF9XyEQPnaUJv42puc1mbmrfbYffZpQGe0tRrbXQTtrKg1AseTbNWpnlo MQnPWA6dIzibxhMcyZwqgR+3UjnziQiNoo2zXXQwtzeUVEZkMzkm+9XzsEj4tp12 Nz7yCSAnnhsnOvBJahEEQ/mfC7g17d7Xd/tQi1740vyKd2Yuza6xVDA2Ihr/i+k8 bqvKR2uCn2kmpHu42jkPUTdSaUTAoop53PQEzMvZxoUPMFRdUj5/FLD3bLF0XUU+ U8/uc+ykQldCQ+crzPLd+00WgVr0QTS+Hu1Va+beEicQk4Gs9UCp8BXKrK3dTTtN 0PguLorzN8PGPAsvdQIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRs2FQIHOMfjCx0/wjGpy7ti30pcDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3d3dy5jYXJkaW9h Z2VudC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEE AdZ5AgQCBIH1BIHyAPAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFF WAAAAW3EWTXrAAAEAwBHMEUCIQCs7kV7b4n6EN6eIjDW+Rr8RMo0Qbj1lAkJglYV nTbkcgIgYbvNa6VUe6798X3jpYyv8v2DY3s6CMJnRA29u1AoReQAdgApPFGWVMg5 ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW3EWTXiAAAEAwBHMEUCICvS//AG tjRcCb22i772uwOOQzq5Y+nvJqMJLqc13ZbmAiEA3m+WaOmdg0+bzmZyEf69EStj S+bLh1i1/2gZcnrFJOEwDQYJKoZIhvcNAQELBQADggEBAGJnFAHG5K6nRkgyoCzJ eNPqEP/F27orBOLYAUf6/xfSYkILwdGejam1msa+cO3vzXVAj37LCgpdd2fV0mVV 1TxJMgFBYCDkoeOIVbDCwl9Hc+SayaVku9HzPLzWXMvr8ElQW3XfHwmS09cSEaVT azZEm7BulZLUWXjht1eKbi/6ZcVIs5PJaunBzVlfBp1nBTkwQxP09u9csEIvnRJ3 X3UAAGVUVUw403Rwq6lxQ8RMuVSdXKEipZyumLw5ZCTU2B+wIwsM0Raum6FR+YtQ ThjMePOjkkcKdL2mDJ8Q7H5Ql6PrHfgJlC8puCOkwYelwwXDe14LBFFe3iSKFHbT 8Tg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtMepFAeXgZNGzAVbb6KF ++P6uQMGkkJV+p8HoE4GkunMVDIIeISNuIj7Tp9vju2XfbBXz9YSfmN2NIG53D9j HwjHOuXmIxV4qjherNIaOdSKnOQlIqs80yrh96Z0V7cyNHMAkSAeFbHGSQvcky7j IrS+AdQzhL3Mof0XlM1a15xIYk1J5uLUHPgZqTAFCaDoeOdcrCzBgV5Z2Xyt1psk ERdiYaOKXwa8Vpcp+wMYDbPzmweDaaLozeKO8rWcrl6neFZxGvVUJzqUaXBtY6i6 FNFgTs8t67DCzLg8VYl1P1bBPYg0OHCiGnw6lYoe/4+lkLnex3DPSCJf0XfsN3ZC jrOQoVYuujH18RfV8hED52lCb+NqbnNZm5q322H32aUBntLUa210E7ayoNQLHk2z VqZ5aDEJz1gOnSM4m8YTHMmcKoEft1I584kIjaKNs110MLc3lFRGZDM5JvvV87BI +Laddjc+8gkgJ54bJzrwSWoRBEP5nwu4Ne3e13f7UIte+NL8indmLs2usVQwNiIa /4vpPG6rykdrgp9pJqR7uNo5D1E3UmlEwKKKedz0BMzL2caFDzBUXVI+fxSw92yx dF1FPlPP7nPspEJXQkPnK8zy3ftNFoFa9EE0vh7tVWvm3hInEJOBrPVAqfAVyqyt 3U07TdD4Li6K8zfDxjwLL3UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 426303838539420319044981066433969249078305 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 08:00:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 08:00:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cardioagent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737517743255028796019846171432116060161489117410127647464182978857913946921513866626120126922507140715089414641008362454020572698541276508299257855806665658733976338374366972713877274397257224495371941052510812056190138777685827725437138413102190613992409974646464862886707740351381403626680087912681822670882641846899359443616228562816261460056906362155332976214299557222853885906142999205581527611059622990477808011184967157436459443196151321786767604693869425194455386652205894332620794045792266689101578841297300221770105896711105098448121072614776284587718403507119028686787090856843710281886784188038086270162007160668207846695317486443570127605741994671439293608403018139043078283142929829235439466263010030654718109147273275495432463177818912911123362838260188207527680205965170578567450725257245733281430702668728295289806769284906105031694521464811974572561104148583117868177984093281393462902257404466106762747118442250756842420429208226180589303900074422700347085521473678015422701079448416830064365909237995432193423195479430996495178258430657816332879996128146729577854464083686510560222383472486657487790936333645953536516719852773280251270267834659935085117927931692219620616285544340781143044274790303976812385611637 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6cd854081ce31f8c2c74ff08c6a72eed8b7d2970 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardioagent.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc45935eb0000040300473045022100acee457b6f89fa10de9e2230d6f91afc44ca3441b8f59409098256159d36e472022061bbcd6ba5547baefdf17de3a58caff2fd83637b3a08c267440dbdbb502845e4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc45935e2000004030047304502202bd2fff006b6345c09bdb68bbef6bb038e433ab963e9ef26a3092ea735dd96e6022100de6f9668e99d834f9bce667211febd112b634be6cb8758b5ff6819727ac524e1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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