blog.stockcard.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0a:c9:28:91:52:a4:37:0e:00:4c:ed:65:d3:4d:ac:be:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.stockcard.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:c9:28:91:52:a4:37:0e:00:4c:ed:65:d3:4d:ac:be:6a
Serial Number (int): 265007066931014158012375591530632311520874
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:42:37:be:2b:4a:47:36:71:71:92:c0:8e:55:98:59:f0:73:34:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:23:29:6d:df:fa:49:87:0a:ff:e3:12:22:56:c4:d8:5e:46:ba:1b
Fingerprint (sha256): e5:9d:1a:d5:0b:4f:44:6f:2f:60:48:ad:c8:d5:75:9c:f5:f3:83:2c:0e:4e:b1:c5:9c:78:d2:e1:50:00:fa:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.stockcard.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.stockcard.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.stockcard.io

Other certificates including the domain name stockcard.io

(limited to 100 certificates)
www.sneberger.cz
blog.stockcard.io
stockcard.io
ihsabs.com
stockcard.io
12n.app
stockcard.io
www.byrkje.land
ancla.me
dev.stockcard.io
bodhiblendedlearning.com
agile42.actionableagile.com
thechocolateowl.ca
howtoinvest.stockcard.io
blabla.cam
tridev.jp
hvch.d1.stx.world
widget.stockcard.io
dslpos.com
run.photo
stockcard.io
www.heywork.co
eazyclass.com.br
howtoinvest.stockcard.io
tamadoko.com
galirage.com
stockcard.io
backoffice-staging.towa.network
stockcard.io
giocapadel.it
www.anthonygangel.co.uk
krezus.co
dev.stockcard.io
www.mistymusings.art
funwarioisii.me
app.lendroit-reims.fr
blog.stockcard.io
www.dev.manager.woonig.app
anyhousecafe.com
lwdgo.acaisoft.net
manager.corroo.app
stockcard.io
influenftial.com
chrislr.com
baisetamere.fr
www.mxm2018.com
blog.stockcard.io
ionic-lib-demo.iotize.com
intechligence.com
blog.stockcard.io
delivery.melhorpedida.com.br
koobii.pinco.fit
tour.narimilwaukee.org
gonzalesinquirer.column.us
lwdgo.acaisoft.net
app.bitalpha.com
tridev.jp
stockcard.io
emn.orderq.ai
blog.stockcard.io
manager.corroo.app
onlinegamesinfo.com
blog.stockcard.io
run.photo
www.deeplearners.group
pod.getraddle.com
rentalclub.io
cdn.savedby.io
rentalclub.io
howtoinvest.stockcard.io
casestudies.okbye.io
ganeshkirana.in
manager.corroo.app
manager.corroo.app
howtoinvest.stockcard.io
www.antandtracy.com
blog.stockcard.io
ss-canal.makebetter.co.za
www.readthisover.com
stockcard.io
youjo.sx
maria.chat
dev.stockcard.io
alhadist.com
slimsistemas.com.br
blabla.cam
idleideas.biz
longpham.ca
jmisencoes.com.br
visualyze.es
stockcard.io
blog.stockcard.io
teachlonger.com
stockcard.io
www.kashirajima.work
howtoinvest.stockcard.io
salsanena.stage.freshfox.at

Certificate

The complete raw certificate details for blog.stockcard.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVv1XReBxbreOGbi8mRB
RBbuidphxEdNkWopKeUaRdWpVwpk1/yEJbS3yaMqWxL8gjYdh5lDR0cnxgF8Djk+
N5LgL4LuRDLa/BUWs2DjM3FXVigmInYjrZ3N3bnQnW3PwaW4YGhBvUU2p9RjzuDH
iCcKLc/5v2U8tj7+1JR9w9nN1wIsDRbm6AFbrndCdY7vT+TXuyoffFcorE94zDgV
DZHd8mQxw6HdujXYjtu0OcBXh0vcmfxCWaum7KkLGQ3YU+7qqZN/f4hHYsdpN0HJ
vh/1o2Z5hF/jNewwUXvbgCUK+JyoJYEDCAht12/l+VP9W9mcmkItShLhkUngTonP
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265007066931014158012375591530632311520874
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 20:35:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 20:35:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.stockcard.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24914292480939514075330923810063420941863582578895303182570547134547142760243733862974263180251233201165489881569388238914582822461243516910685678429938026238216473381858279349685276700909676593484750796414630792732340596736683687503580007058547230758746345489437910722401333510592549986831414941667526042980467325542036082293297517164496192639329732607812725894924072414687012240263581700647566208410188779144918999628090694498585417042467723372779815401973764998888932606309428989913848318416394011642800645719102125780502973949771639312199341822886458909162259958667809921525362231046572204470240440798044750467049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a94237be2b4a4736717192c08e559859f0733486
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.stockcard.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b675dd863000004030047304502210096783202be127a31634b856f0eb9e6c374009dbcaf55f2ca2938e3d9342b1dec02206f72232a5a64eda5dd83ba7c152b3490927982f2e00f22a150f5427168ced9a8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b675dd88600000403004730450220347e7252ee89a7f6455d6589b8cd0720e50032e4b97706592321502359725cda022100de19f4a0d12b486600c7ee0b684c87750608662720cde8ac7f4113642f508b46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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