cavium.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a9:b4:1b:d2:6d:bc:b2:b6:e4:c9:9e:6c:3b:fd:98:b4:5a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cavium.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:b4:1b:d2:6d:bc:b2:b6:e4:c9:9e:6c:3b:fd:98:b4:5a
Serial Number (int): 319083983304176091277889654560884646261850
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:11:02:10:50:26:28:b9:fd:04:01:76:0d:51:ac:a3:87:2d:99:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:72:27:fb:55:e5:58:66:4c:7c:9a:d4:a9:e9:c5:72:56:cd:a2:27
Fingerprint (sha256): 0b:a0:6c:fc:ce:52:5a:14:7d:c3:29:c8:94:19:13:3c:b7:97:eb:4e:b5:70:69:13:cd:45:ac:16:29:10:fa:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cavium.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cavium.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cavium.com

Other certificates including the domain name cavium.com

(limited to 100 certificates)
fsus-7.freshservice.com
fsus-7.freshservice.com
fsus-7.freshservice.com
*.cavium.com
supportcrm.cavium.com
webapps.cavium.com
cavium.com
*.cavium.com
xmlgtestsd.cavium.com
b2b.cavium.com
cavium.com
cavium.com
helpdesk.cavium.com
wexdev.cavium.com
biprod.cavium.com
*.cavium.com
support.cavium.com
cavium.com
fsus-7.freshservice.com
xmlgwprod.cavium.com
leapfrog-ssl-9.gcs-web.com
fsus-7.freshservice.com
repo.cavium.com
helpdesk.cavium.com
fsus-7.freshservice.com
support.cavium.com
cav.cavium.com
cavium.com
helpdesk.cavium.com
helpdesk.cavium.com
cavium.com
fsus-7.freshservice.com
repo.cavium.com
xmlgwtestsd.cavium.com
repo.cavium.com
leapfrog-ssl-9.gcs-web.com
oracleappstest.cavium.com
cavium.com
helpdesk.cavium.com
fsus-7.freshservice.com
www.cavium.com
leapfrog-ssl-9.gcs-web.com
fsus-7.freshservice.com
fsus-7.freshservice.com
leapfrog-ssl-9.gcs-web.com
helpdesk.cavium.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-9.gcs-web.com
localca.liquidsecurity.cavium.com
fsus-7.freshservice.com
helpdesk.cavium.com
fsus-7.freshservice.com
repo.cavium.com
leapfrog-ssl-9.gcs-web.com
bi.cavium.com
helpdesk.cavium.com
helpdesk.cavium.com
supportcrm.cavium.com
bidev.cavium.com
helpdesk.cavium.com
connection.cavium.com
wexdevsit.cavium.com
fsus-7.freshservice.com
fsus-7.freshservice.com
leapfrog-ssl-9.gcs-web.com
repo.cavium.com
fsus-7.freshservice.com
lca.liquidsecurity.appliance.cavium.com
cavium.com
fsus-7.freshservice.com
cavium.com
fsus-7.freshservice.com
helpdesk.cavium.com
wex.cavium.com
fsus-7.freshservice.com
support.cavium.com
fsus-7.freshservice.com
leapfrog-ssl-9.gcs-web.com
*.cavium.com
fsus-7.freshservice.com
repo.cavium.com
cav.cavium.com
helpdesk.cavium.com
repo.cavium.com
leapfrog-ssl-9.gcs-web.com
oracleapps.cavium.com
bisit.cavium.com
wexdev.cavium.com
cavium.com
supportcrm.cavium.com
fsus-7.freshservice.com
cavium.com
cavium.com
helpdesk.cavium.com
leapfrog-ssl-9.gcs-web.com
cavium.com
cavium.com
fsus-7.freshservice.com
cavium.com
*.cavium.com

Certificate

The complete raw certificate details for cavium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkeTwTVWXqmHWtTGONr+
cjH5USAI9NwliFGbXYy/OTA8TaJcZ15VZR5zq652EGU1zrsy21cSWjxJyG2fEIGm
GFMq4SSL6MwYL60nHkLq6U5VEwgOKiNjnk4BPTo533dhg1eNkDFkAqxPRLPQM/hY
uLTffPHVIucMCFgvQjDaQQu6JUhWMrbaxsHSVYbsiIsCrIbaE7tFvx6M2tXoBw5W
G3Qu3D/HWIqCiwrAGfsT9ND9u6c7SDtEYMevmlm+dznAEN7yboPAa1pJZNGWRE8Y
2CU8jklSKdWNbhed8/2Iuw5XxPROfSK4VVEMdawbSNmtVV0lPc/f2KSmkdxlvKrZ
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319083983304176091277889654560884646261850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-11 02:20:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 02:20:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cavium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22000761080581031781306712366251715499425898787305509559486225676738619951105875899478200793080588232632233489712460418645363166618487842669013653541762649217008920092643949442628124031400678856481387832298340043225901797756139500583972452609614718321888858008459384967782977908910582081633657624729091650252551949267524371072241856393474947944722478366528175633433314727164517232872142740545356259342644830513424602003997418936916008058810218888706783297023369883180022104493230396480660641592356928354453992881202841435289509771556996282568185724730582655494355535550303615857261151038590858727143306546969523706351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6110210502628b9fd0401760d51aca3872d9965
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavium.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186ceaed6e70000040300473045022100c4be6559a93a759cd2978d4e436690d9c36a319e35f9e610b855ce47de3df8b9022049e16c5f7af588141392b4b410b5a89cfd6f4f92f3aec15178e3461791550db8007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186ceaed6fa00000403004830460221008eb11dc1f33f8aeccf9f0da87db402d0a8df2dfead2cd22475b11472822e4b760221009e24e9a98239fca298275b20bea58505e1651b48c1e6d78698da6bb0bf8e7a50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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