cardion.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:b6:a9:7a:01:f8:33:fa:84:ab:4a:11:db:bc:3c:56:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cardion.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:b6:a9:7a:01:f8:33:fa:84:ab:4a:11:db:bc:3c:56:f4
Serial Number (int): 266003328033264901968342766557856670701300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:0b:2f:0d:e1:5f:52:53:9c:45:df:c1:be:ae:73:cf:8f:14:b6:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:30:77:d2:bd:5b:30:ba:97:cd:74:48:7e:ee:f1:46:dc:c0:0f:ec
Fingerprint (sha256): 54:1c:e6:55:32:d0:34:e3:b1:a9:fb:4a:8d:99:43:34:a3:30:17:c1:45:ba:6a:19:13:34:6a:fe:00:4b:69:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cardion.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cardion.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cardion.com

Other certificates including the domain name cardion.com

(limited to 100 certificates)
cardion.com
www.cardion.com
cardion.com
www.cardion.com
www.messaggiare.com
cardion.com
cardion.com
www.concretearmor.com
www.tamaralanier.com
www.trainenquiries.com
blockconversion.com
cardion.com
greennewdeal.world
www.cardion.com
41349.com
41496.com
frvco.com
conwayliao.com

Certificate

The complete raw certificate details for cardion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266003328033264901968342766557856670701300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 05:24:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 05:24:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cardion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780867786360216659840944972859421655805330795524778846086400857841667011692634614893530999734232231951340782180098780235527023297718985009624879523930379611735475633816179495569606846677811404209621009324638272615478120629915115208893146149827834366756011121634965326195758173031104277114313832395139150825499178840949171350182563715301653473950955306622874470721561009447556874379674922781722981157875730736285391382383757624665618395036077798262489978932353234905255693944001802426105787148981289659326845931320283614620119760175826211744655865730514785228682693560609240556155357663254952001294515149579023802030231164971142875374342675765734974710777419545507500203457606513475243382661867758695943785380470403682937242737827319782488535415926290500832572205468937944824669352602621359185294818192795348634329432554853538516295073807772571195674389884441726414734520876165917822798472123767421212421567801427844353716464681004072299269652238358365694992664800971527028311484813821060486841807996592789034752242457602671304414313686117010276021688481987862689233637861514047727884030072197042850205439451946870903407319520470063302094644916197086063500514568555377906535063782674798241724142060790420152850729709462798409244121889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f70b2f0de15f52539c45dfc1beae73cf8f14b615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbea39a7300000403004630440220642c5c6323aaeaf80e0f9251e834e1b4b1a67171ce059ea437cd66d2612bc6b702207b8611383e3f6722e67b737547d0ac64c15e242e7e47db3297c1a81a6379f2ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dbea39ae60000040300463044022067ca5575cb36160af08683838cdf0591eb9282b6b02f101f53e0c9e23919444b02200a2013de44bd0e120442922f50e4dcca2f40cd9df70ca23f1d1f2fc0148fe73e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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