candidrecords.com

Issued by R3

About this certificate

This digital certificate with serial number 04:32:ca:28:db:5a:42:b6:71:4d:c5:64:34:67:c5:ea:c3:cb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=candidrecords.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:32:ca:28:db:5a:42:b6:71:4d:c5:64:34:67:c5:ea:c3:cb
Serial Number (int): 365731978269109688555305065901750471017419
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 35:13:93:9c:d1:71:c9:8a:60:36:86:ee:a9:2a:78:43:6c:9d:9a:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:d5:f9:01:39:dc:b7:bc:be:93:80:ae:cb:ee:61:9d:74:d3:db:c7
Fingerprint (sha256): 23:51:4c:cf:20:f9:d3:bb:f0:4a:11:22:03:08:55:86:6e:2d:6e:e6:07:7a:13:fa:1e:d0:0f:db:f8:35:62:26

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate candidrecords.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for candidrecords.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

candidrecords.com

Other certificates including the domain name candidrecords.com

(limited to 100 certificates)
candidrecords.com
candidrecords.com
candidrecords.com
candidrecords.com
candidrecords.com
store.candidrecords.com
candidrecords.com
store.candidrecords.com
candidrecords.com
www.candidrecords.com
store.candidrecords.com
candidrecords.com
store.candidrecords.com
candidrecords.com
store.candidrecords.com
candidrecords.com
store.candidrecords.com
store.candidrecords.com
candidrecords.com
store.candidrecords.com
store.candidrecords.com
candidrecords.com
www.candidrecords.com
candidrecords.com

Certificate

The complete raw certificate details for candidrecords.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8FU0V/gwRa/V7hOk7zB
JB6toDkHW4tlKV9NNM6h8UrZ8ZoEmLtBpEoWdnvtt9JE7dLh+4dzpn0A8/X2QxZT
AZWu/hWci+k7T+VCuNpyJBmY69V2ONA9qh9z6WJrvT4xjnhWrptv85Cchyu8+IeT
7m2AuzH7RJBpnRa2LFb208xr5ZIaMajQU4mGCwdousk88ouuWFt0MlN+TEVf+KHN
yHrtH5jBgOdiMvHGzwAfmzVGQHqon115oa4RoawoUmN7ZPlOVYeO+jd4fskSnx/r
Nux+roGmLGoVt79U4iJ9e3wA7SmYFFhb/3oaurakd//ZVHZ/MFenWKsZELTWTfi0
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365731978269109688555305065901750471017419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 22:57:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 22:57:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'candidrecords.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19157319276861632112482009354286671396098730620413070338504530813207958397530978534630470940488485249580340710455129652793022231555289782972430590762357762500810374792687592274721573416278751116425491218365560881932916233513183799991516525067800530631010793089344040139954121980843301839684089980811065016802202797964401831844085407841807032899197738815788622551359153819616074006511582524379895312251137804329157424622976076527143453248742347033448794930473335562815261120480352050034558393046046657869277534442521868854765896423679822702419862292554711485697722625100902875488692248111226562829618417872075411207311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3513939cd171c98a603686eea92a78436c9d9a84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candidrecords.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cadb697a10000040300473045022100f0ac9ca696d16a95eb06b38f05f2cd56317b65470256d8f5fae0093524c9e70102207d3bd3bd6c65c0ceffa088320a2b77daf2bf09426b6e0091de2c306944782fef0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cadb697a500000403004830460221008547007e3bfde903f21ad17e6452abb1ac7ff163554129715220fe64f9416f630221009eba6f5e01e8f8602885a1508319edad667874d8d8f6916919250df521a7126f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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