api.magicardonline.net
Issued by R3
About this certificate
This digital certificate with serial number 03:26:d4:35:9a:69:93:38:e5:52:20:c5:48:e8:50:6a:d3:ce was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.magicardonline.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:26:d4:35:9a:69:93:38:e5:52:20:c5:48:e8:50:6a:d3:ceSerial Number (int): 274549662396971905167981408647560380994510
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: df:35:3b:fc:22:79:65:71:44:24:20:15:33:05:79:b2:11:c4:06:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a5:a6:da:67:36:f3:a5:81:50:7d:67:ae:7d:ea:1f:ee:8c:ce:25:ff
Fingerprint (sha256): 49:6f:33:b8:1a:af:b2:ef:a9:31:a1:41:be:8d:6a:b1:5d:d1:43:6a:b6:f8:a6:5f:de:d8:54:40:d9:45:a2:15
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate api.magicardonline.net
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.magicardonline.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.magicardonline.net
magicardonline.net
mail.magicardonline.net
www.api.magicardonline.net
www.magicardonline.net
magicardonline.net
mail.magicardonline.net
www.api.magicardonline.net
www.magicardonline.net
Other certificates including the domain name magicardonline.net
(limited to 100 certificates)
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
magicardonline.net
www.magicardonline.net
www.magicardonline.net
api.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
cpcontacts.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
magicardonline.net
www.magicardonline.net
www.magicardonline.net
api.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
www.magicardonline.net
cpcontacts.magicardonline.net
www.magicardonline.net
Certificate
The complete raw certificate details for api.magicardonline.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAybUNZppkzjlUiDFSOhQatPOMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA0MDkyMTI0NTFaFw0yMzA3MDgyMTI0NTBaMCExHzAdBgNVBAMT FmFwaS5tYWdpY2FyZG9ubGluZS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDBhYnAOfXU8K7JEvqlymfHl88Ll7BeIovpsWdy0AM28BWgN4VZAV7t tyVDb+JJz+in21yN78SqEWnr86Wlzh739qSC2afQuoP5I9BjdOFCVQJ8JQGAuVWo XmZmiK2UQMg09UclMVqAOuKfovJh/Dkxrn2c9V0AIjpdqSxWwhQIA635cyr6jBHz N/7/hvIUdIsPPIrIlWJ/yr+8NCGSa17Q5xpwdxk8dvJYsci9wLm28u/gXnu5WLr9 k9GT13scxEArrmcudCFyCs54lXfME3GgrDeJqDGcU20JCZOeGsMV3ARB0yVwrHCH TIlaa7MhIgbdQxOBt+OUq682QEwyqp9JAgMBAAGjggKzMIICrzAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFN81O/wieWVxRCQgFTMFebIRxAZVMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIGCBgNVHREEezB5ghZhcGkubWFnaWNhcmRvbmxpbmUubmV0ghJt YWdpY2FyZG9ubGluZS5uZXSCF21haWwubWFnaWNhcmRvbmxpbmUubmV0ghp3d3cu YXBpLm1hZ2ljYXJkb25saW5lLm5ldIIWd3d3Lm1hZ2ljYXJkb25saW5lLm5ldDBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE gfIA8AB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABh2gfQiMA AAQDAEcwRQIhAOVjKBsYneWv7YHjChPKY6Mky15W/uXd7+Iqoiob/XTlAiASK0Ll sEbLyGEAAmroUeprdKmgqQBvgOOT2I0PGkO7RQB2AOg+0No+9QY1MudXKLyJa8kD 08vREWvs62nhd31tBr1uAAABh2gfQdQAAAQDAEcwRQIgELaK7xKY4QF1ro3wAniN kwhXuQEircwpyaVZjMDYzFoCIQCX3z+sPwUs9fMWwTB0W6++ius1XqYjMFue72Lx lb7sxDANBgkqhkiG9w0BAQsFAAOCAQEAombrRr66vRbpjxzugYwEqHyHbMaHqYtr 6Ye8UPuXOlh2CiWXAmhQ133T5+x0jdsaqHhi3ys5KCI4sXScaOuhZp6QCUOOte3d UXQjK19p1mX9SJMsP92eGnmOLuNKQImUT2JiUqFAu1npSj9tFbfOMSEGX+IVDLoR 03nY9MJipCkdDy77eyZAxvMSFTQithl6oGeH2R1nqrskMW90XaT6nY4YwrrE5e9k gnq4GcZVgD+s0yDD6ccIIZfMpy2+Gd1l5Ktr3VvwZMbuDMaglyfst9DP4M9MF/UF S/crWIG5Tk/yEdlRLL3HbiaQJH5p78PbS5rnJMvo2EQX6rg1DnyIBA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYWJwDn11PCuyRL6pcpn x5fPC5ewXiKL6bFnctADNvAVoDeFWQFe7bclQ2/iSc/op9tcje/EqhFp6/Olpc4e 9/akgtmn0LqD+SPQY3ThQlUCfCUBgLlVqF5mZoitlEDINPVHJTFagDrin6LyYfw5 Ma59nPVdACI6XaksVsIUCAOt+XMq+owR8zf+/4byFHSLDzyKyJVif8q/vDQhkmte 0OcacHcZPHbyWLHIvcC5tvLv4F57uVi6/ZPRk9d7HMRAK65nLnQhcgrOeJV3zBNx oKw3iagxnFNtCQmTnhrDFdwEQdMlcKxwh0yJWmuzISIG3UMTgbfjlKuvNkBMMqqf SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 274549662396971905167981408647560380994510 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-09 21:24:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 21:24:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.magicardonline.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24429842944594929663646046496573602678836969179099411154654064709658244187975392782334505461527522512532589901525985070347435710067178496403233897420419199956032403631185686462185537690078888298599388354599178969663010763917366509425413996357415681980915446245467123890539725762985274210014972651598586741298132034484771513619860469039820023387880826773662422552816856674738192101025297975984890291168006620561904685016354945156112910125039440928994711521348530371504544249147414717803652590119074256952409512314228616791402817096878592230003981423891850333027772134740898763162920358256563826327477337271232883236681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) df353bfc2279657144242015330579b211c40655 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.magicardonline.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicardonline.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.magicardonline.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.magicardonline.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicardonline.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187681f42230000040300473045022100e563281b189de5afed81e30a13ca63a324cb5e56fee5ddefe22aa22a1bfd74e50220122b42e5b046cbc86100026ae851ea6b74a9a0a9006f80e393d88d0f1a43bb45007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187681f41d40000040300473045022010b68aef1298e10175ae8df002788d930857b90122adcc29c9a5598cc0d8cc5a02210097df3fac3f052cf5f316c130745bafbe8aeb355ea623305b9eef62f195beecc4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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