events.snowflake.com

Issued by R3

About this certificate

This digital certificate with serial number 03:64:93:fd:1c:c2:51:c4:56:2a:3f:9b:5f:5c:74:a1:d1:77 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=events.snowflake.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:93:fd:1c:c2:51:c4:56:2a:3f:9b:5f:5c:74:a1:d1:77
Serial Number (int): 295561805237163216303089128025544590479735
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:e7:f7:ee:7a:7f:cb:6a:cb:ae:3e:5b:c1:da:47:96:fd:bc:51:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:d9:b3:91:1a:4e:fc:ca:67:05:5b:03:7b:28:ff:4b:1e:cd:33:c7
Fingerprint (sha256): 06:74:a0:42:2f:8d:07:a9:53:b4:f8:3e:60:ab:6d:98:00:83:57:8b:7e:f5:9f:2c:7e:b1:9c:c7:78:ee:8c:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate events.snowflake.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for events.snowflake.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

events.snowflake.com

Other certificates including the domain name snowflake.com

(limited to 100 certificates)
1e291ab3status.snowflake.com
1e291ab3status.snowflake.com
developer.status.atlassian.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
attstatus.snowflake.com
glmatching.snowflake.com
finserv.snowflake.com
attstatus.snowflake.com
*.ordevautotest.us-west-2.aws-dev.app.snowflake.com
*.c1.eu-west-1.aws.app.snowflake.com
*.devtemptest2core1.us-west-2.aws-dev.app.snowflake.com
pricingautomation.snowflake.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
app1e-status.outreach.io
event.snowflake.com
*.m1.us-gov-west-1.aws-gov.app.snowflake.com
attstatus.snowflake.com
*.c1.us-east-1.aws.app.snowflake.com
lift.snowflake.com
*.oltp1.us-west-2.aws-dev.app.snowflake.com
community.snowflake.com
partner-payment-api.snowflake.com
snowamp.snowflake.com
abemcertified.abem.org
ciscokineticbeta.iotspdev.io
events.snowflake.com
attstatus.snowflake.com
developer.status.atlassian.com
utc-converter.snowflake.com
*.gfts.us-east-2.aws.app.snowflake.com
app-cdn-staging.app.snowflake.com
attstatus.snowflake.com
app-cdntest1.snowflake.com
usergroups.snowflake.com
attstatus.snowflake.com
snowamp-uat.snowflake.com
seone.snowflake.com
app1e-status.outreach.io
1e291ab3status.snowflake.com
events.snowflake.com
app1e-status.outreach.io
go.snowflake.com
developer.status.atlassian.com
seone-qa.snowflake.com
events.snowflake.com
attstatus.snowflake.com
ipe-em-ssm-activation-code-us-east-1.snowflake.com
demo.streamlit.snowflake.com
app1e-status.outreach.io
*.qa3.us-west-2.aws-dev.app.snowflake.com
sni204121.cloudflaressl.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
liftdev.snowflake.com
1e291ab3status.snowflake.com
*.capitalone.us-east-1.aws.app.snowflake.com
attstatus.snowflake.com
cleanroom-sso.snowflake.com
accredible.armanl.eu
1e291ab3status.snowflake.com
*.snowvmtest.us-west-2.aws-dev.app.snowflake.com
*.core2.us-west-2.aws-dev.app.snowflake.com
attstatus.snowflake.com
it-ds-chromadb.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
*.qa6.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
corp-vpn.snowflake.com
argocd-it-dev.snowflake.com
app1e-status.outreach.io
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
partner-payment-oauth.snowflake.com
events.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
events.snowflake.com
app.my-guitar-tabs.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
*.t1.usgovvirginia.azure-gov.app.snowflake.com
abemcertified.abem.org
*.citi.us-east-2.aws.app.snowflake.com
*.devtemptest3core1.us-west-2.aws-dev.app.snowflake.com
api.developers.snowflake.com
lift.snowflake.com
leapfrog-ssl-33.gcs-web.com
*.c2.eastus2.azure-dev.app.snowflake.com
sni204121.cloudflaressl.com
events.snowflake.com
1e291ab3status.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
*.c1.eu-west-1.aws.app.snowflake.com
sni204121.cloudflaressl.com
ciscokineticbeta.iotspdev.io
api.developers.snowflake.com
app-cdn-staging.app.snowflake.com
app1e-status.outreach.io
investment-data-cloud-uat.snowflake.com
snowamp.snowflake.com
winternet.snowflake.com

Certificate

The complete raw certificate details for events.snowflake.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295561805237163216303089128025544590479735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 15:05:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 15:05:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'events.snowflake.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744459847562328915451689516816990685673883319023518561845971309330519464032281027591600931094805564176253178722244776488259483782634661615608841260491538395209748844968592163498037764564497250533744645213539913867811843443990650019959029208228113581931304273345101607263660219141744747638007952817918697130794613816671816952687093839646886859989706214884827387580554640366333365595427129589567415228590094308613515445857021335485463808922223436776872129088263668154823241879426092406164258833736750747983147885886165434516602330243773217160896192125122811424898083575165144832400783942033679039994929212952451395670116479566800067328602875019911306136348554126681502197888417551040083135349660724649066874374225876924001808719562695539756365737226798995310333137936807040180262578782142583420156875376372755204313252795438024580708349226328429084935593805213513539453505581786158629013010840652336913220527592065135296958895520494602787779506809639100726719233033668870239410624494909947128361125849223227668055493245448665939083296823534689290014186186757919138856242851793511238643328406957366052330268902361095292573953562071920228591586574111687684733979448293245627232535496474402842536233766577562962037267359430603533244581001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fe7f7ee7a7fcb6acbae3e5bc1da4796fdbc5167
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.snowflake.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d415e71e00000040300483046022100def38dfeaa2b736e90696ea1f68595aa902e34116b1ec7ee4cc02dfa23736ab5022100ee8b1a93976ff8d088f45d2721df4e9a60cf8016b90a1bc447c6fd42d3c6e3a1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d415e71de0000040300473045022100a8e65e5c27e4b8f4c0d6b8f91932d63957e54aaaabf62481e90c2da33e21099d022052458a064b3e6007b3d1346fa14567bd7cf72b0269515d6e782dba321c4575a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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