chef.base42.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:dd:e9:23:42:02:af:fd:8f:4a:ab:f6:b8:5c:a4:38:d5:2e was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=chef.base42.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:dd:e9:23:42:02:af:fd:8f:4a:ab:f6:b8:5c:a4:38:d5:2eSerial Number (int): 423961440008828277706920703814828536943918
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 13:4c:66:ed:2e:ce:9b:7c:0b:c0:73:ec:24:53:b4:cc:e0:0d:62:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 01:a3:58:ec:df:c7:77:45:67:a8:99:f6:c8:17:5f:7d:96:4a:16:b9
Fingerprint (sha256): 27:44:4e:69:eb:15:65:4f:e0:7d:b9:5c:d8:ae:90:45:04:30:84:10:4d:f5:f1:37:52:1b:73:a2:2d:5e:87:73
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate chef.base42.net
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for chef.base42.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
alertmanager.base42.net
chef.base42.net
config.base42.net
graphs.base42.net
logs.base42.net
logs.paramount.rocke.tech
ph.base42.net
ph.rocke.tech
ph.tax.dpd.com
pkgs.base42.net
prometheus-archive.base42.net
prometheus.base42.net
pypi.base42.net
chef.base42.net
config.base42.net
graphs.base42.net
logs.base42.net
logs.paramount.rocke.tech
ph.base42.net
ph.rocke.tech
ph.tax.dpd.com
pkgs.base42.net
prometheus-archive.base42.net
prometheus.base42.net
pypi.base42.net
Other certificates including the domain name base42.net
(limited to 100 certificates)
prometheus.base42.net
chef.base42.net
chef.base42.net
chef.base42.net
chef.base42.net
mail.base42.net
prometheus.base42.net
chef.base42.net
chef.base42.net
prometheus.base42.net
prometheus.base42.net
mail.base42.net
*.base42.net
mail.base42.net
chef.base42.net
prometheus.base42.net
mail.base42.net
prometheus.base42.net
chef.base42.net
chef.base42.net
*.base42.net
chef.base42.net
chef.base42.net
*.base42.net
chef.base42.net
chef.base42.net
chef.base42.net
chef.base42.net
mail.base42.net
prometheus.base42.net
chef.base42.net
chef.base42.net
prometheus.base42.net
prometheus.base42.net
mail.base42.net
*.base42.net
mail.base42.net
chef.base42.net
prometheus.base42.net
mail.base42.net
prometheus.base42.net
chef.base42.net
chef.base42.net
*.base42.net
chef.base42.net
chef.base42.net
*.base42.net
Certificate
The complete raw certificate details for chef.base42.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISBN3pI0ICr/2PSqv2uFykONUuMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDgxMzMyMzFaFw0y MDA1MDgxMzMyMzFaMBoxGDAWBgNVBAMTD2NoZWYuYmFzZTQyLm5ldDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMyGxVpiVWrWU09loCtS5AuHYa791swS 5QnVF47YLX/NALdD5KT136eDJbOWY3gyogs+lU2GvBD3d+9+CnAg75aEnziuASyq MKxDgqijMnNMpBGUPmiCcXFqu45IgArsDq9lep31MLP+ly6PxHBazfyuFGTSkwc3 UjzFAngb6rCr92RmqJqPMV1ggp7NIMWuvCzesRfYhmLDkg6j3SJHehz0vetFBRr5 fGauVKebT0teby98w+XvrnvgiyDlPldP8UlCL+gpMOTgwnwyv8PCnFVCAMcGIQV0 aQE6llAOHhORV4IcrENlxXs644Uubtrb3jzsThrLIasJRE2diRYKUoUCAwEAAaOC AmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUE0xm7S7Om3wLwHPsJFO0zOAN YiIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu b3JnLzCCAQ8GA1UdEQSCAQYwggECghdhbGVydG1hbmFnZXIuYmFzZTQyLm5ldIIP Y2hlZi5iYXNlNDIubmV0ghFjb25maWcuYmFzZTQyLm5ldIIRZ3JhcGhzLmJhc2U0 Mi5uZXSCD2xvZ3MuYmFzZTQyLm5ldIIZbG9ncy5wYXJhbW91bnQucm9ja2UudGVj aIINcGguYmFzZTQyLm5ldIINcGgucm9ja2UudGVjaIIOcGgudGF4LmRwZC5jb22C D3BrZ3MuYmFzZTQyLm5ldIIdcHJvbWV0aGV1cy1hcmNoaXZlLmJhc2U0Mi5uZXSC FXByb21ldGhldXMuYmFzZTQyLm5ldIIPcHlwaS5iYXNlNDIubmV0MEwGA1UdIARF MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBxHOjtJEMLNYhHOlFALOdVs4bMqd3gLOp4T1Xwn0HjcGW+ WhiprA2jXJgWfemzSrXiyOxgKPdwxdcyonbwVA7cuQcYIjYnVzW6Zi8ZZY9FwTmz x1ThFuVX2FMCZS9AgBRJODIobrU81L9DY5BWkbOCDNmNrjDBc/7QcbJY8fjW6L6A ghk0r4+rP+BLnf89r6tvJbQUic1U9nvJo7Hfyg+0mL6evThcHv8aB0GD62rMTQRt v6+RMm84L0ntamAAyESCP4Pg8YABG/BfW7UKuARzBXmqwZmBiePgp+6u4GQzIdt7 yf5leenLlahV1Ez0Z3w4Htd/AC3rG746r9LKekp0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIbFWmJVatZTT2WgK1Lk C4dhrv3WzBLlCdUXjtgtf80At0PkpPXfp4Mls5ZjeDKiCz6VTYa8EPd3734KcCDv loSfOK4BLKowrEOCqKMyc0ykEZQ+aIJxcWq7jkiACuwOr2V6nfUws/6XLo/EcFrN /K4UZNKTBzdSPMUCeBvqsKv3ZGaomo8xXWCCns0gxa68LN6xF9iGYsOSDqPdIkd6 HPS960UFGvl8Zq5Up5tPS15vL3zD5e+ue+CLIOU+V0/xSUIv6Ckw5ODCfDK/w8Kc VUIAxwYhBXRpATqWUA4eE5FXghysQ2XFezrjhS5u2tvePOxOGsshqwlETZ2JFgpS hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 423961440008828277706920703814828536943918 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 13:32:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 13:32:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chef.base42.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25819072225919322449815321409936469443936278693999854485919345339911748988613912926813896827468271679811795576068533341489806249025397535968298266660004057714208592058924728689435045457718655074909884460522610277281440640798056262347787076506144961866250706444452627543361653249536390447212968333017250567219787637651424391979522817446171685855952146826739966933345366260426448718123388199472726454602099523416259825333012571649027491949010715847132270693798018404278026803304994633962093812007263629023016223443415307473735355227020792586280875585070825191479978093687832400669256834584442969671029443788695545729669 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 134c66ed2ece9b7c0bc073ec2453b4cce00d6222 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (262 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphs.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logs.paramount.rocke.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ph.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ph.rocke.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ph.tax.dpd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkgs.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus-archive.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.base42.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pypi.base42.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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