www.cardglass.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:ce:fb:46:08:35:64:51:0b:1d:67:4a:54:17:1c:85:91 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cardglass.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:ce:fb:46:08:35:64:51:0b:1d:67:4a:54:17:1c:85:91
Serial Number (int): 327626762632005008299869572928100024223121
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:6e:9c:d7:a0:10:63:03:a4:99:ee:23:a9:dc:69:0b:90:44:0e:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:fe:f3:39:06:c1:53:f0:db:c2:d3:16:cf:d9:67:08:36:17:b0:73
Fingerprint (sha256): 32:1e:71:58:1f:6f:05:15:bf:8d:63:30:10:d4:07:ab:a9:41:5b:7a:05:3d:d2:f4:f1:4b:4f:94:08:b4:41:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cardglass.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cardglass.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cardglass.com

Other certificates including the domain name cardglass.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cardglass.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327626762632005008299869572928100024223121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-20 18:45:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 18:45:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cardglass.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929854394095426269482534370539535540829353201253289878704954730202664368505695841966416642834874351296023516760921465197767295843278410722050767441248282342379899540206679273300537847503409048021868839465430846363311656172144117409847063873210398936871654909299964327348585308182136931376287009642828063470754683820797126534666548384935857750888690739680152809674235070578559162863330097923525135270716231465674763037177020567909556022292285210794962577826892869881632391875440769055621094460110030131886056073114205011346598763404923769234536478753425302672109230921521370461516990582786897639903628551014073343643002590870649254932906632645249819292958793456851356876653355142891173197582006928649477462327514013938587505456906998767261403988444950474467484148112200133268056617421156717833894410787445277194466402757236871040191037813371128398888887616856419884197865775092259564143717757842677160772686890479580393601408979875430135546357210938227679358227591992358836335227837321801873603149345127862010697863980047734268546823419753086736598670309141223541315754440184389810513830523145292430534224964626458952113038922107955688351862988956334809130017947647915330714108465228383157362010090335669321600047965913570728561026231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							016e9cd7a0106303a499ee23a9dc690b90440ef0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardglass.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016deab397fb000004030046304402203779c3ff5b3a675e17a97eda538bd75e6b3000cabaef0519353f8c16e683f62502203cb6d4f05994f2699e669389a5528bb2ed22560957cd6d55004ed7e39ca0ff43007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016deab3980700000403004630440220190f0450be7429d6b44b3ec805e245a9e03a447548870a1a74fecea33d02ad4a022047010394867199526a81fd0ee06354f30f1d4493ddf1fba9c59cb16eb7c25f59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002e08721f7b8d56ab8c541779b170040b187d4d5f899169803d1968844e378d584e32a4959bae4862cc60c0f284b42a9380b814184304b6e63b7e0d3a90d490d2d19ea39b6e7331b0578540f4a7921db5c06da913d66d98e8dd0ec5984d84a2351ac616d0c778648f93953ceb71785b92bd08d660849646ecff2ac6a4262b200b8df827b23065406dab2352c6f701f7230ee7cadb74c03c8205f72b0be11f0695988de3d17bd45a3ead28879cbd915d428f46bedec5fedca325d4c740cc985ee5c88b54d34387ef02ccd3b72f4da545231cdb89027ba9c6cf6951dafb52de78a40af155b158fd15b2dedb7d4b91f1ac9cb4a01d11155f98464b36360e79803da0