cardioscan.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6a:ed:8e:33:29:c4:05:bb:e4:f5:9d:e5:7f:47:28:bd:b7 was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cardioscan.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6a:ed:8e:33:29:c4:05:bb:e4:f5:9d:e5:7f:47:28:bd:b7Serial Number (int): 297722554067767064517571060168266542005687
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 43:9b:1d:f4:c8:6f:b3:02:26:6d:b8:11:f3:b7:2b:41:fd:be:61:00
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d8:0b:cb:c0:c5:60:8a:4a:66:33:03:0a:3b:8d:d3:15:33:fe:1c:e4
Fingerprint (sha256): 81:07:55:50:2d:d3:f1:98:36:c5:31:ef:07:7e:a6:4c:7e:97:64:17:76:20:73:d7:86:8a:28:16:d3:15:68:00
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate cardioscan.co
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cardioscan.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cardioscan.co
hong-kong.cardioscan.co
resources.cardioscan.co
singapore.cardioscan.co
uk.cardioscan.co
us.cardioscan.co
www.cardioscan.co
hong-kong.cardioscan.co
resources.cardioscan.co
singapore.cardioscan.co
uk.cardioscan.co
us.cardioscan.co
www.cardioscan.co
Other certificates including the domain name cardioscan.co
(limited to 100 certificates)
www.cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
www.cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
www.cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
www.cardioscan.co
cardioscan.co
Certificate
The complete raw certificate details for cardioscan.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISA2rtjjMpxAW75PWd5X9HKL23MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjIwNTAxMTNaFw0y MDA0MjEwNTAxMTNaMBgxFjAUBgNVBAMTDWNhcmRpb3NjYW4uY28wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpM2788sbA4FwwmqbI4qrZX8PEKK7sGDY 3XbpaOIFg409z2PNYx8wZBcgg/vYY8j0l44XoHpXd0czX111auzAHoxjcvu+3R88 iOvxTc8Nqz0dvRaRICgRuHbmuKcNuTE5OaBuNa4M34TKvs732e3g8IWBzSxF4YrK OeZl6EyVyyBR4FR64m7UEgsOUXHbQ31M9uIyQdrTVKGLWyIhLM+KP80OMHbivsML OwQbFjtw9kTN9pNg6Gc16K2+yNb8C1y7SCsDj1sCLkgnGJM5gxSmaEph3+cLA8Ht 4mFukaoEe75NcNDXQm9YDRmvhIR9FY0ivAjevNuA5EJssPcPheGVAgMBAAGjggLm MIIC4jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEObHfTIb7MCJm24EfO3K0H9vmEA MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wgZwGA1UdEQSBlDCBkYINY2FyZGlvc2Nhbi5jb4IXaG9uZy1rb25nLmNhcmRp b3NjYW4uY2+CF3Jlc291cmNlcy5jYXJkaW9zY2FuLmNvghdzaW5nYXBvcmUuY2Fy ZGlvc2Nhbi5jb4IQdWsuY2FyZGlvc2Nhbi5jb4IQdXMuY2FyZGlvc2Nhbi5jb4IR d3d3LmNhcmRpb3NjYW4uY28wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC 3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBvU3asMfAxGdiZAKRRFf93FRwR2QLB ACkGjbIImjfZEwAAAW/L1yvsAAAEAwBGMEQCIHuKTGPDlW6Ewax2KEQ0SqkQD6lz y0+SvTK53xYH0IWIAiBOzhJnwAnrj7zBXLYSD0YrO2IvUUjeD6Hoteo/La3rHAB2 AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABb8vXK/AAAAQDAEcw RQIgHt7ZjxDw6L6tNd4VTy3mN2OUt6i3Xpi/If+t/Ia0GKICIQDtpI0qsmiRLI2K j9r1PCqu7wz8Qz+H+2fHyPk4VkBf4jANBgkqhkiG9w0BAQsFAAOCAQEAJFiEWyHA LS6V9lATPXnF4U7JaY408k57pIwa2Fj1QcWKOveQFg9aQL95biodHjP1znGuLWWz DkZtywugJEZ1XgAuQfzMrp6r8mnCVeVw4ji3dzZsoYtbMFEVYGFmlZ8AwWVue7RL Y99Oalc49EXcL/ISP+OpO9S4V43tlJIGoqF5zdmW0o57v7tT3uQ7SAK5hUM8KNHx X65e47yUb3W0zEDmSh0FRdyM4imed4ByGUu+syilRkgYREYvVdCNx42wUK8zBz9G tvkcPbOiYJyq2CPQ7j4ONhJpWH1LIXUoymKwOa2sURFXVXFprZpDFVzo8DaMttAY cJhUza1wnTpP3w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6TNu/PLGwOBcMJqmyOK q2V/DxCiu7Bg2N126WjiBYONPc9jzWMfMGQXIIP72GPI9JeOF6B6V3dHM19ddWrs wB6MY3L7vt0fPIjr8U3PDas9Hb0WkSAoEbh25rinDbkxOTmgbjWuDN+Eyr7O99nt 4PCFgc0sReGKyjnmZehMlcsgUeBUeuJu1BILDlFx20N9TPbiMkHa01Shi1siISzP ij/NDjB24r7DCzsEGxY7cPZEzfaTYOhnNeitvsjW/Atcu0grA49bAi5IJxiTOYMU pmhKYd/nCwPB7eJhbpGqBHu+TXDQ10JvWA0Zr4SEfRWNIrwI3rzbgORCbLD3D4Xh lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 297722554067767064517571060168266542005687 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 05:01:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-21 05:01:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cardioscan.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25202690396542713774765217419059835431525023362890190327577210471177835251509810941845701416683111167173664787179105105017859004425377664361651340007803096583699010339903757959916385785620586896652124367388336144450111866498994880304128186216523317887103638828747767660105599441663366079966712363940558190885222688932135891633371920252325692634714182699129199929157296743429700185552958209345994808274684988302212270804950380221347629893889237774971076067314391175765251204221251854821254547242813208616960737752565693482989579675851627600367538869606929632166990714027322543517313081281947379700166577673470480867733 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 439b1df4c86fb302266db811f3b72b41fdbe6100 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (148 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardioscan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hong-kong.cardioscan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cardioscan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singapore.cardioscan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.cardioscan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.cardioscan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardioscan.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fcbd72bec000004030046304402207b8a4c63c3956e84c1ac762844344aa9100fa973cb4f92bd32b9df1607d0858802204ece1267c009eb8fbcc15cb6120f462b3b622f5148de0fa1e8b5ea3f2dadeb1c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fcbd72bf0000004030047304502201eded98f10f0e8bead35de154f2de6376394b7a8b75e98bf21ffadfc86b418a2022100eda48d2ab268912c8d8a8fdaf53c2aaeef0cfc433f87fb67c7c8f93856405fe2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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