www.saltmaster.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bb:c3:63:b5:f2:95:b6:a7:aa:2f:0e:bb:6a:df:51:83:70 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.saltmaster.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bb:c3:63:b5:f2:95:b6:a7:aa:2f:0e:bb:6a:df:51:83:70Serial Number (int): 325229377596398973822815623688468328186736
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4b:b5:d1:8d:ae:2c:92:da:c0:0b:4f:98:25:06:54:39:a6:2f:13:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 66:f8:0c:3c:19:b5:55:2f:e6:70:e7:29:75:f7:b4:d5:61:61:76:88
Fingerprint (sha256): 17:94:71:b0:15:f0:f6:5c:f9:36:6e:5f:aa:52:9d:da:cc:b8:66:0c:38:03:14:6a:bc:74:0a:cd:93:fc:79:86
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.saltmaster.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.saltmaster.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.saltmaster.com
Other certificates including the domain name saltmaster.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.saltmaster.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISA7vDY7Xylbanqi8Ou2rfUYNwMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwOTA5NDNaFw0y MDAxMTAwOTA5NDNaMB0xGzAZBgNVBAMTEnd3dy5zYWx0bWFzdGVyLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMhuDq79H2LjTPSqyA2vZd5aJb2C y1x4ysnBFLAM20m+5GrrDWNUWQOau5tRLfCVhYAGyjspQJhiRpxjoZrFxG5FAOMC mu9FUrtyl1JcRQ+Au4KNaXrHw554mLKQfaFKMAYl1nC/mBjxyzmAXtbBO87BC0Pr h+xhd7uBxAxlyf4vDqQer0CiW3YlKYexPDTZ2JeN5eBaqSVvgqtviYcOUWeX9TkH mBoUtvmaTByHi9Ayp+S0I2Px43X/1nF+pOFEvWZkM+yvn2SvA6J1jOrwIYbjXYKa Gdgz+g4U/Qg6LqiOzrLUKT6n3n1sIWvdOoZGNK74M3WuEcIqmDOBu3uwEVQeRYgB GqbtwMZyGKSFIiHvkWEQmF55vyVJbgPgJHMtNSs5LT+/A33Dsw46jvr2671v4QN6 cZ+1R7sWTBY0Zy3Lhnp/U+Z9qWJwrq8R427paApjX3IfzYd3yzub78mtadrIkJzP +8ng+bPL8JO2zH52xzlszM6fkikF7Gb+apKOdlNH1VPNvkhRX/7y+fhMcx59h7fA YV7crUKUs+UDlAqaa4JD3g5sy9wO22enpE2VEYuYBkRu5028eV19Zgz1Ncz6usUF JL74A9NUeES4U6xvs5m8q2ol33TMbXmee4iOvyhc7+C8AB90A+eY7vQd/uY4+8kq aVV9I/yL3aqO11wHAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FEu10Y2uLJLawAtPmCUGVDmmLxOsMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LnNhbHRtYXN0 ZXIuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgA AAFtv3ICrwAABAMARjBEAiBA3ueOPj2bJrInOabo1vGNfCEwXqvSTyHgOYz6dU5Y IgIgAI0IkyEb8E2Ak+OdMkt510v2lgLblh8sSkZFYxMrc40AdgBvU3asMfAxGdiZ AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW2/cgOJAAAEAwBHMEUCIBRUakOGPYAO i8AdqSGqqDViZ0bVmPXEtLBz0lUQ7uOGAiEAlnkIpFKQ9jh1sljUAD2v91BfdbuT abFfKOb3mXzXkq0wDQYJKoZIhvcNAQELBQADggEBAFtOXO2dmCIHbjAtEd4ccsQs QMb6PWQ1Sx0LVfB2t+DS44m9lWO8IT13LE293FE0QqrxCMjF8j1Ol56d4o4ZHFRa tAcmYjyARRcMfCahx3z2/4TVIMNbPyNfRHAjdD1zOzQqqpnPMz5aQJtmXirmVm/o jyutcY96c8S3REVTUQeemrOX7BdtIN6V4lP5KFOcjUIwVc0hcnpKSaPWIOPyI863 XGfE/axAsM1rMcNXnUiPxP4pD8r9p0l9FZ/WpQD/wksfiyus1MJaIfCrPqU9s0PV Lu2dYh2oakIc1a2238kUhkN/4f+9gDdxbLLa3RZoT5ctvuCv0KqkOtZyYZ3ybKk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyG4Orv0fYuNM9KrIDa9l 3lolvYLLXHjKycEUsAzbSb7kausNY1RZA5q7m1Et8JWFgAbKOylAmGJGnGOhmsXE bkUA4wKa70VSu3KXUlxFD4C7go1pesfDnniYspB9oUowBiXWcL+YGPHLOYBe1sE7 zsELQ+uH7GF3u4HEDGXJ/i8OpB6vQKJbdiUph7E8NNnYl43l4FqpJW+Cq2+Jhw5R Z5f1OQeYGhS2+ZpMHIeL0DKn5LQjY/Hjdf/WcX6k4US9ZmQz7K+fZK8DonWM6vAh huNdgpoZ2DP6DhT9CDouqI7OstQpPqfefWwha906hkY0rvgzda4RwiqYM4G7e7AR VB5FiAEapu3AxnIYpIUiIe+RYRCYXnm/JUluA+Akcy01KzktP78DfcOzDjqO+vbr vW/hA3pxn7VHuxZMFjRnLcuGen9T5n2pYnCurxHjbuloCmNfch/Nh3fLO5vvya1p 2siQnM/7yeD5s8vwk7bMfnbHOWzMzp+SKQXsZv5qko52U0fVU82+SFFf/vL5+Exz Hn2Ht8BhXtytQpSz5QOUCpprgkPeDmzL3A7bZ6ekTZURi5gGRG7nTbx5XX1mDPU1 zPq6xQUkvvgD01R4RLhTrG+zmbyraiXfdMxteZ57iI6/KFzv4LwAH3QD55ju9B3+ 5jj7ySppVX0j/Ivdqo7XXAcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 325229377596398973822815623688468328186736 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 09:09:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 09:09:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saltmaster.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817682699721769337562192749108563737186749004536117438954460336921102224534559002173998922738589410779322655039691477457386462698672986061483198271182223506383807704717535870188836205139262628880010958446225601482064952166208046722036866273762731547523394945322441239658808793916796874975127326617258111791540497238287414790583148838333495282161657993681944563453584924220560955799680241297667317124277789783877662886804039148664340582401150993159093101669398200509955005914398305731902112710138752806024817310951476278796925996998012446123792271815293632082751468805065484332317291286690727603027466335820881771919310522502789266739409443590920453590379870570968260313899936316514095861957338528057204439919913046884694927079351710301662033375388083519867682706249782569888147873468220864149466833570543057424950864368580715318671292858603921585140734126989053165102196661318710442781861994530040278750531626691670823514106009313662937597168446939051263576762363690325763836464298075392195675649328853047892673389026064615636090735088843443250076460804637228288726329101502628792493097587667604405758507638356210053088049418109349800666688663799521200711532732479884971601853051766145506832934096796413001129081258069693661795802119 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4bb5d18dae2c92dac00b4f9825065439a62f13ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltmaster.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbf7202af0000040300463044022040dee78e3e3d9b26b22739a6e8d6f18d7c21305eabd24f21e0398cfa754e58220220008d0893211bf04d8093e39d324b79d74bf69602db961f2c4a464563132b738d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbf7203890000040300473045022014546a43863d800e8bc01da921aaa835626746d598f5c4b4b073d25510eee386022100967908a45290f63875b258d4003daff7505f75bb9369b15f28e6f7997cd792ad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005b4e5ced9d9822076e302d11de1c72c42c40c6fa3d64354b1d0b55f076b7e0d2e389bd9563bc213d772c4dbddc513442aaf108c8c5f23d4e979e9de28e191c545ab40726623c8045170c7c26a1c77cf6ff84d520c35b3f235f447023743d733b342aaa99cf333e5a409b665e2ae6566fe88f2bad718f7a73c4b744455351079e9ab397ec176d20de95e253f928539c8d423055cd21727a4a49a3d620e3f223ceb75c67c4fdac40b0cd6b31c3579d488fc4fe290fcafda7497d159fd6a500ffc24b1f8b2bacd4c25a21f0ab3ea53db343d52eed9d621da86a421cd5adb6dfc91486437fe1ffbd8037716cb2dadd16684f972dbee0afd0aaa43ad672619df26ca9