www.saltmaster.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bb:c3:63:b5:f2:95:b6:a7:aa:2f:0e:bb:6a:df:51:83:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.saltmaster.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:c3:63:b5:f2:95:b6:a7:aa:2f:0e:bb:6a:df:51:83:70
Serial Number (int): 325229377596398973822815623688468328186736
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:b5:d1:8d:ae:2c:92:da:c0:0b:4f:98:25:06:54:39:a6:2f:13:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 66:f8:0c:3c:19:b5:55:2f:e6:70:e7:29:75:f7:b4:d5:61:61:76:88
Fingerprint (sha256): 17:94:71:b0:15:f0:f6:5c:f9:36:6e:5f:aa:52:9d:da:cc:b8:66:0c:38:03:14:6a:bc:74:0a:cd:93:fc:79:86

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.saltmaster.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saltmaster.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.saltmaster.com

Other certificates including the domain name saltmaster.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.saltmaster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyG4Orv0fYuNM9KrIDa9l
3lolvYLLXHjKycEUsAzbSb7kausNY1RZA5q7m1Et8JWFgAbKOylAmGJGnGOhmsXE
bkUA4wKa70VSu3KXUlxFD4C7go1pesfDnniYspB9oUowBiXWcL+YGPHLOYBe1sE7
zsELQ+uH7GF3u4HEDGXJ/i8OpB6vQKJbdiUph7E8NNnYl43l4FqpJW+Cq2+Jhw5R
Z5f1OQeYGhS2+ZpMHIeL0DKn5LQjY/Hjdf/WcX6k4US9ZmQz7K+fZK8DonWM6vAh
huNdgpoZ2DP6DhT9CDouqI7OstQpPqfefWwha906hkY0rvgzda4RwiqYM4G7e7AR
VB5FiAEapu3AxnIYpIUiIe+RYRCYXnm/JUluA+Akcy01KzktP78DfcOzDjqO+vbr
vW/hA3pxn7VHuxZMFjRnLcuGen9T5n2pYnCurxHjbuloCmNfch/Nh3fLO5vvya1p
2siQnM/7yeD5s8vwk7bMfnbHOWzMzp+SKQXsZv5qko52U0fVU82+SFFf/vL5+Exz
Hn2Ht8BhXtytQpSz5QOUCpprgkPeDmzL3A7bZ6ekTZURi5gGRG7nTbx5XX1mDPU1
zPq6xQUkvvgD01R4RLhTrG+zmbyraiXfdMxteZ57iI6/KFzv4LwAH3QD55ju9B3+
5jj7ySppVX0j/Ivdqo7XXAcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325229377596398973822815623688468328186736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 09:09:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 09:09:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saltmaster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817682699721769337562192749108563737186749004536117438954460336921102224534559002173998922738589410779322655039691477457386462698672986061483198271182223506383807704717535870188836205139262628880010958446225601482064952166208046722036866273762731547523394945322441239658808793916796874975127326617258111791540497238287414790583148838333495282161657993681944563453584924220560955799680241297667317124277789783877662886804039148664340582401150993159093101669398200509955005914398305731902112710138752806024817310951476278796925996998012446123792271815293632082751468805065484332317291286690727603027466335820881771919310522502789266739409443590920453590379870570968260313899936316514095861957338528057204439919913046884694927079351710301662033375388083519867682706249782569888147873468220864149466833570543057424950864368580715318671292858603921585140734126989053165102196661318710442781861994530040278750531626691670823514106009313662937597168446939051263576762363690325763836464298075392195675649328853047892673389026064615636090735088843443250076460804637228288726329101502628792493097587667604405758507638356210053088049418109349800666688663799521200711532732479884971601853051766145506832934096796413001129081258069693661795802119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bb5d18dae2c92dac00b4f9825065439a62f13ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltmaster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbf7202af0000040300463044022040dee78e3e3d9b26b22739a6e8d6f18d7c21305eabd24f21e0398cfa754e58220220008d0893211bf04d8093e39d324b79d74bf69602db961f2c4a464563132b738d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbf7203890000040300473045022014546a43863d800e8bc01da921aaa835626746d598f5c4b4b073d25510eee386022100967908a45290f63875b258d4003daff7505f75bb9369b15f28e6f7997cd792ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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