lift.snowflake.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:e9:8c:ee:63:d1:1b:d0:86:60:fe:13:8f:ff:dc:86:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lift.snowflake.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:e9:8c:ee:63:d1:1b:d0:86:60:fe:13:8f:ff:dc:86:ad
Serial Number (int): 333787161462219564219152298821166315636397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:09:50:0b:be:a9:b3:f1:8d:bb:13:0c:7f:fc:41:4f:d2:e4:7a:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:25:4b:e2:5f:7d:42:20:8b:86:08:90:32:de:25:ea:91:21:36:7c
Fingerprint (sha256): 0b:b4:9a:f2:ea:4f:74:14:78:70:e1:d8:42:8b:e0:cc:cf:bf:f0:2a:e3:11:ce:c0:53:fc:4a:78:40:5e:23:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lift.snowflake.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lift.snowflake.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lift.snowflake.com

Other certificates including the domain name snowflake.com

(limited to 100 certificates)
1e291ab3status.snowflake.com
1e291ab3status.snowflake.com
developer.status.atlassian.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
attstatus.snowflake.com
glmatching.snowflake.com
finserv.snowflake.com
attstatus.snowflake.com
*.ordevautotest.us-west-2.aws-dev.app.snowflake.com
*.c1.eu-west-1.aws.app.snowflake.com
*.devtemptest2core1.us-west-2.aws-dev.app.snowflake.com
pricingautomation.snowflake.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
app1e-status.outreach.io
event.snowflake.com
*.m1.us-gov-west-1.aws-gov.app.snowflake.com
attstatus.snowflake.com
*.c1.us-east-1.aws.app.snowflake.com
lift.snowflake.com
*.oltp1.us-west-2.aws-dev.app.snowflake.com
community.snowflake.com
partner-payment-api.snowflake.com
snowamp.snowflake.com
abemcertified.abem.org
ciscokineticbeta.iotspdev.io
events.snowflake.com
attstatus.snowflake.com
developer.status.atlassian.com
utc-converter.snowflake.com
*.gfts.us-east-2.aws.app.snowflake.com
app-cdn-staging.app.snowflake.com
attstatus.snowflake.com
app-cdntest1.snowflake.com
usergroups.snowflake.com
attstatus.snowflake.com
snowamp-uat.snowflake.com
seone.snowflake.com
app1e-status.outreach.io
1e291ab3status.snowflake.com
events.snowflake.com
app1e-status.outreach.io
go.snowflake.com
developer.status.atlassian.com
seone-qa.snowflake.com
events.snowflake.com
attstatus.snowflake.com
ipe-em-ssm-activation-code-us-east-1.snowflake.com
demo.streamlit.snowflake.com
app1e-status.outreach.io
*.qa3.us-west-2.aws-dev.app.snowflake.com
sni204121.cloudflaressl.com
*.autotestc1.eastus2.azure-dev.app.snowflake.com
liftdev.snowflake.com
1e291ab3status.snowflake.com
*.capitalone.us-east-1.aws.app.snowflake.com
attstatus.snowflake.com
cleanroom-sso.snowflake.com
accredible.armanl.eu
1e291ab3status.snowflake.com
*.snowvmtest.us-west-2.aws-dev.app.snowflake.com
*.core2.us-west-2.aws-dev.app.snowflake.com
attstatus.snowflake.com
it-ds-chromadb.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
*.qa6.us-west-2.aws-dev.app.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
corp-vpn.snowflake.com
argocd-it-dev.snowflake.com
app1e-status.outreach.io
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
partner-payment-oauth.snowflake.com
events.snowflake.com
*.ordevautotest1.us-west-2.aws-dev.app.snowflake.com
events.snowflake.com
app.my-guitar-tabs.com
*.autotestcore2.eastus2.azure-dev.app.snowflake.com
*.t1.usgovvirginia.azure-gov.app.snowflake.com
abemcertified.abem.org
*.citi.us-east-2.aws.app.snowflake.com
*.devtemptest3core1.us-west-2.aws-dev.app.snowflake.com
api.developers.snowflake.com
lift.snowflake.com
leapfrog-ssl-33.gcs-web.com
*.c2.eastus2.azure-dev.app.snowflake.com
sni204121.cloudflaressl.com
events.snowflake.com
1e291ab3status.snowflake.com
app1e-status.outreach.io
app1e-status.outreach.io
*.c1.eu-west-1.aws.app.snowflake.com
sni204121.cloudflaressl.com
ciscokineticbeta.iotspdev.io
api.developers.snowflake.com
app-cdn-staging.app.snowflake.com
app1e-status.outreach.io
investment-data-cloud-uat.snowflake.com
snowamp.snowflake.com
winternet.snowflake.com

Certificate

The complete raw certificate details for lift.snowflake.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333787161462219564219152298821166315636397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-21 08:33:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 08:33:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lift.snowflake.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734897261837810161333835900377736337828281867759419364734123088121918351681167564666522612529928221120824408453716515965436123993200124183715786762414415778834965782732340292606073189473287789290990927665940710565112167509762536724624771316924297908903663429397277508191168657650502334145269951046531255467945775701609855489417134902564085198305481079068591964246162547386387957644018069192159597328587272183720468887385525231672837964545052047668677468564579641894326970451209927092739875145469047614943936459924550879299760208687737945603205788857134364449069033745205508794427068251870506225893888040427620332012457648668756466726892210621950048782778859184508355316790814610764093137321446740012665929668235763674244777482955109192978954815754871775182170789275690889880227694948213647817853231521623812645228741663999578458543324727311007469097563657805527393846562743797968902697791477092620138766146303331675566029959803060847257533796045746424848270291288803337886838086661859829054910871006626824736061159666184794092886096791917681155779839244342605943936331234357667531992554676465265222955551405917698904096465588228612925784142813827746047798374202300887748694649184548741539810338868556527285369429284421573185985610311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe09500bbea9b3f18dbb130c7ffc414fd2e47a0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lift.snowflake.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001804b77fe6100000403004630440220375bb3c5b9c7dfff875bf38d1cbc171f29e002dc7b350cb2be02d6159cedeb9a022048ce86546fb34b3d46dee822b75eebc80546b71f7708d041b97dae2181fd27ac0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001804b77fee3000004030046304402202da77a2bd3fb15b04536e09e9bb74fd0b0de0fc0af5cf1f73c29821b2ea0b83e022062ef46719fed9d2e437d6a79be8b3a9daca5351695249169d95c169f4e3d10e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005da25690b4fdd3a7da0af79598df9bfe7d2592d7234b48033d1bca88fd1bae8c9f29c83b9f4d5bfa95de749f733229923efe22fb47bb2b20d55badd5c9387c81ff89960931163d07492b3ef7cc3a9e9b7a1f7579762ec12a9bd395fbab985de174e67895b7b1ac5720bed8626b7e7bda95a566e43d4ee74f77fb5311372e00d036f10ab362f6610a740dc1cc3afc6e9e22da1a7b7ba613f5fb55a31c59aa5de6897b3a74a55f83c67027f0653dbaeb92b93efe5f4b6fc2fc148214458fe69b58a5363cf16a4f9b6b1f3c149ae02cb4ec220637eb8e5519f37d7d6f538c69854bc3a79cb76e8ae19a1832680f840d6bbb95078943c7d8293e07e01bb6276a8eaa