www.cardassociates.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:2e:7c:bc:02:4f:37:6f:2e:94:20:a9:dc:00:4d:87:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cardassociates.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:2e:7c:bc:02:4f:37:6f:2e:94:20:a9:dc:00:4d:87:cd
Serial Number (int): 292364345330978682707098737676311298148301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:9e:ad:5e:fa:c7:e8:6c:7e:4b:7b:33:c7:17:ac:6a:63:fe:05:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:33:bc:6f:47:fb:f3:19:22:1e:bb:48:96:be:e6:81:e8:58:3c:5f
Fingerprint (sha256): 23:75:a7:3e:80:38:0c:08:af:1a:73:37:70:9d:77:87:ec:44:5f:78:99:12:19:4d:da:e0:99:96:ad:17:73:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cardassociates.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cardassociates.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cardassociates.com

Other certificates including the domain name cardassociates.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cardassociates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292364345330978682707098737676311298148301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 09:21:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 09:21:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cardassociates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688079757388078560114170152634588974742864520354649517198332826204764161646696094989357208204042950103063931982192184746810034724571925363017944590686759906320652034304969213188460034520195041263122178595335208397308229595204861107510684266443219477086616518770997288406033538860119425369667930648423379087445061082965449791159092256755525751883325995919489465846575339911630726275888400516959453550943933032288468021314405278924710228557421049198835601006317662589464635107326047192546196476704376539352840872887440080888729306924861953719703707813361729244630503459222448152539509629006432547281270594491280807408998741188903595847554301091836296199778852616727585674629237794544405946378580904408746695921837952427601425742108362509801363927170938997296776090479438568990066640856339262487070889991926822976718246482891633055856539979991688633619522379004138097870479121100033202345664122298933638013094490712606032638964198162630985305104400809160873160902501352137509912440509622464683821598444581838124932902904772080370708835207514131768737258760271189426203683556179677756648861270944174803780431657401540806458663094628760207968289594797109375143033572493684593829601160036668574704848406836273925796347429673687448694954293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							839ead5efac7e86c7e4b7b33c717ac6a63fe05e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardassociates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef9a078cf0000040300463044022051d3cc7ab3375944bb77d0e0b4e5257313a57370b7865f24ce8be4e5f6f8268a0220109b2ef6ae3f6aad92eba40ff6907bf7fd2c8a83e22b48f1bd06cb14257bbed60076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef9a07a93000004030047304502200738d0f0b3c807bf123e5aff8db68734e79e44edc2cf24deddd1d0e5d1a797d10221009fa04f5bdaa6418b21b75254e3d228683d359482e5f826f44f7277b1880f1444
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003c8b13f7cb2d065e36cb1d067826a9e5d699f671b05396f7b3b7c609dc7a9ab62b8bb42420484344cda3a1dc5506d9e8c6e0f2d8cb934ebbebdffada10c10035626231f002190163f5df0e88f9e5e0e9c4162f05b8cf3462091890d00aaf85bc8cd294172555cf9c0d0fcb76e27335490ba088583be04bd5c1a35a9e783969bddc7b97612261d5e1599a0972fe96edcad0564f46d32acb25e888ca1a5072062c5c1d31b7013bf6a46bb3b994a82bd7ebc65ebf8612e09b03cf286c5fed7382f5cf7827e9ea446b907c5a16783549da630df3bca5c83127436c62b29e59ad35b1a667761527480593a0c8d2b053c1eeead09ed67adab196a375cb5686a001ca8