cardent.pl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6b:ca:0c:70:fd:51:7e:08:21:eb:75:05:b0:9f:3a:cb:b6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cardent.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:ca:0c:70:fd:51:7e:08:21:eb:75:05:b0:9f:3a:cb:b6
Serial Number (int): 298015639710231832328660299072848157920182
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:db:88:9e:9f:e1:d8:26:10:a4:e8:a1:0f:7c:c8:14:f0:5e:dd:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:4f:53:ae:a1:6d:b6:6b:52:e3:55:45:ff:45:6d:6d:d3:d6:43:bc
Fingerprint (sha256): 6b:9a:38:f9:3b:39:ce:28:ef:d9:bd:19:4d:f3:7d:19:d5:c7:e9:06:a0:92:81:18:e3:1f:70:e8:66:58:58:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cardent.pl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cardent.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cardent.pl
www.cardent.pl

Other certificates including the domain name cardent.pl

(limited to 100 certificates)
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl
cardent.pl

Certificate

The complete raw certificate details for cardent.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq5TVf+ILXW4xHp+M4stU
yi+hdkuItjHW+2aL21j+gR3w+7zpWXXY1DVLBaEsau8Zh9bRGkLyP96HPKKlkFPc
nMthi/0A0hEjb+dSE15LN2xRlg+7iRClE26GFOoe5O0JByqZN06qckSCSFllLM7E
xH9KORNYzSkO2PAPlZMHvMgzeSGFlNGHrKBekIZqs2jCm8mlGpdekWY19eApUT6f
1ngbuSpGkHLQz6T8dzmDmsrPGE49vIqWjfaMWibpbvGAIIT98Hd0uGFQpAKvQqU3
armywbpvnLDcfV8YLhj4QznpNRM6WXY+r+wbLqYCikTTFEz10qggjVafTga7hkSO
qERFDXOM4/4Eh7sQZILhkrV/wDVngpw3p9oMv78h7ZVcjEVFPzr9QiCK/9UD4yKo
cnCE5UOTU6tjDUY5XEwqs3xujpADkhcCC3QWI1scd4V0rGbA0/TUL/gM44k4RW8c
vjAxb9AdAndQ/85ijMVIUdqPW1LHGYCTBN8QwDCaHlKdavuE5G+61xU3+ulnpOm+
W7ADw6BHuLRj9bluce/EsZnyMRjNh0pJC/mkB0xpvx9fDcc0BLKsFuisnk6NBome
a0ooo3aDA2VQnKPve6bqjkr5PJhDaFti6qLbafRLllIzZHx1hvg2JafSVsop6tj1
bjlGvnZHbUepL2RGA2O1wnsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298015639710231832328660299072848157920182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-08 17:04:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 17:04:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cardent.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699990970296250667145063460681432900341736600089077683230218137993195781621067837287639036857791803924518599289590050483538959388437400114724303275867523634283312486734525814659401063384984424773545674779303741696228440268854653197600180232270924556566815279451285577262930021664047973274103207322135997065347427146923374615217135326535013521151283632508837547444204031232604761254485641306925760740053180327457424368192135323398671060878707195209072683338416253216140012568054404593722652130630164985765619675239990295711987052690017263730069708629627803073116190204094605727671157475908277363953266437031319799836792323836215044187536476487133856856282028451233599003791976564328221858725844876373674386755267423400708731298600640418478899262114477243721012797615108730621383492294200779851055108912395407441954046596062776300369437551120226664542854222300688734200130695356541454425315092416868036306464814438047794582964739972922738987780826662163331385707423824339879306086484375768345879300543474014592042837182662496886029089678014792055061591879927492300900432462754319390625391637374377650844055087410198315927217567647931768988614282340472927226956020130954564112754337068028137506585240269149074630503610691275499893015163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25db889e9fe1d82610a4e8a10f7cc814f05eddc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardent.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardent.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001651ab5d3480000040300473045022100f2a25cb2db20f1cbb09351e9bf90c535a01a83a1613e85da3323daf1f2ebf32102206140815621c92d18a39f14128a3ea1cd8abb57ce81c58d118f738cab52728843007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001651ab5d52d0000040300483046022100dbfc906163345b745af441adda12b0af9406e08d20bbcde740f32bea5ec04a55022100a6bf38a932368b481d206c24adfec55317e0345fee6aa43f9797f0d2fdee750c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00049c027f66c1e2a78d188877a506a6252fd4e648113a70ccef97c1d008d6a11e864abf1f047f10ad066ffe8917045c5cbf2409ef4046fae893afad4fefa95df4d202b40e7003d2f4840281a235c253ddac14b816ed646d650dbe67932eb550e91b036cddca50a8122cad6c8ffac65972bdebb6d638025a6eda95d3d6b674768c9c5e11a4c085bb524b3df657b65c4289ebf964d263c4c3a01a387509a66d9198997d18b07f3f436b98b6a5346de7a53d2641347ac6e717f2ff6dd3c8cb45c29e78b8a0847c9b6545c337d9793a4e35cb45b7b80955c7eed62c7c829a61fa7ca71208bbaf2f56579c9915bf28fac970dac2b59f0605df69fb4aed795112cec477