cardassociates.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:b9:c3:31:a9:57:ec:cf:59:f4:b9:53:28:fb:20:71:e6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cardassociates.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:b9:c3:31:a9:57:ec:cf:59:f4:b9:53:28:fb:20:71:e6
Serial Number (int): 275195073156480743731661116851821435974118
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:b9:4d:a9:33:54:e8:d7:2b:c1:f4:2a:01:56:e4:44:8b:0d:b8:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:f4:1b:21:ea:48:e2:09:0a:58:13:f6:d6:fe:fa:7b:fa:a8:75:b1
Fingerprint (sha256): b0:49:00:63:60:29:29:95:a3:9a:99:7a:29:a4:34:50:f7:56:ad:d2:e0:dc:be:e8:1f:16:3e:a6:81:9b:a7:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cardassociates.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cardassociates.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cardassociates.com

Other certificates including the domain name cardassociates.com

(limited to 100 certificates)
cardassociates.com
udgco.com
www.cardassociates.com
www.cardassociates.com
cardassociates.com
www.cardassociates.com
technologymasters.com
www.pay4mykookies.com
www.silkleaves.com
cardassociates.com
cardassociates.com
pearlandsportsdoctors.com
palmacampania.org
hytechsystem.com
www.reatha.boston
www.cardassociates.com
cardassociates.com

Certificate

The complete raw certificate details for cardassociates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275195073156480743731661116851821435974118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 04:26:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 04:26:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cardassociates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907840337293436299413217542741902144264117675886282214246819368897683127942466566944470117662733788958312037486043751220424903286759335156557987508491712521584552222741485604093856696506721844381027558694872099772201892024023760891171049232715066564660854886673802418234807649218219248343670429054610918401885576127414939230242826975720447891834603953919276627784658975058942189072324152550053830519308438889448766641028469146642027260760694807855758357008388731087656262449493601821599313541626925555044941978382063031969120878151476675931172680412246137454153295929691854082199678309984811231853344235155847838803855451415915523218970524276872473866809395857814016037348099097639131659345617723619178412402428427669981210563929850607793002089671705413988438522415827378546759918904304182692654911601669044441954770856498411752462425349178102405812409806517805723664683609615771845787954737655091220980827316859590429652388797762562574539185208434864252031849245485225158237991215284118049174362264594247886793879580476194493009529353839900512469636140269016311718452317367041642900163737263130062026992016912895772962282469671941881282131427325279408132190251935763579006764065880311996654956856006966330124272919952717615537275671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5b94da93354e8d72bc1f42a0156e4448b0db811
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardassociates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017032b6e2e5000004030046304402207149e5e7650285b3c64f0389fe68c4912fae5707f73c42c228acbf6475010ef9022022e7cd40c36dbe7fb1e5defae9b1545294b594fc24ae0ac5a6ac10dc80a3451f007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017032b6e2d900000403004630440220106b8fb94df7a1c33de7c60b1a6ff75d13572551c73486e6519011ab70390b78022012cf8ec323434ba86a055551c9b16688cde303dd3efdb157035759fb43856978
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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