nakarin-varnish.cognite.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9f:6d:e5:db:44:a3:e1:5a:5c:4a:da:96:4d:f6:f4:5c:8e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nakarin-varnish.cognite.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9f:6d:e5:db:44:a3:e1:5a:5c:4a:da:96:4d:f6:f4:5c:8e
Serial Number (int): 315587833470517052678533277582869226871950
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:62:b2:f0:4d:c3:38:3e:81:2a:9c:ca:7b:90:16:34:d1:11:13:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:ab:a0:77:93:53:06:72:ec:49:32:67:61:ae:a3:73:25:89:f3:19
Fingerprint (sha256): 1e:6a:56:ad:24:1b:99:c1:b4:e0:0b:db:5b:8f:e0:fe:08:0e:82:22:3d:11:45:ff:fa:fe:d7:a5:43:b1:72:d7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nakarin-varnish.cognite.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nakarin-varnish.cognite.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nakarin-varnish-exporter.cognite.ai
nakarin-varnish.cognite.ai

Other certificates including the domain name cognite.ai

(limited to 100 certificates)
webhooks.dev.cognite.ai
www.foodchat.me
development.fas.cognite.ai
www.juliehsieh.com
opin-api.dev.cognite.ai
cognite.ai
service.monitor.backend.sre.cognite.ai
yopass.cognite.ai
fas.cognite.ai
jenkins.cognite.ai
naikebata.site
shd.sre.cognite.ai
cards.cognite.ai
shd.sre.cognite.ai
cog.cognite.ai
staging.wayfind.health
nakarin-varnish.cognite.ai
www.fastapp.com.ec
renshu.app
opin-api.dev.cognite.ai
development.fas.cognite.ai
cog.cognite.ai
development.fas.cognite.ai
cog.cognite.ai
releases.cognite.ai
dashboard.u360.app
jenkins.cognite.ai
alertmanager.cognite.ai
grafana.cognite.ai
development.fas.cognite.ai
development.fas.cognite.ai
fas.cognite.ai
between2subs.com
www.foodchat.me
fas.cognite.ai
cognite.ai
dashboard.cognite.ai
fas.cognite.ai
www.brightmedia.cl
fas.cognite.ai
development.fas.cognite.ai
odata.cognitedata-production.cognite.ai
www.findmy.contractors
merthin.com
*.production.cognite.ai
jenkins.cognite.ai
fas.cognite.ai
cognite.ai
development.fas.cognite.ai
development.fas.cognite.ai
development.fas.cognite.ai
www.stevenminken.nl
www.mipasion.co
www.amanshankarsingh.com
static.getmeasured.app
development.fas.cognite.ai
spinnaker.cognite.ai
fas.cognite.ai
click-clock.com
incidents-test.cognite.ai
kartfinity.com
development.fas.cognite.ai
powerdemo-graphql.test.cognite.ai
iap.cognite.ai
grafana.cognite.ai
cog.cognite.ai
development.fas.cognite.ai
fas.cognite.ai
www.cargo-planner.com
jenkins.cognite.ai
jenkins.cognite.ai
odp-api-dev.cognite.ai
fas.cognite.ai
grafana.cognite.ai
victorchan.io
fas.cognite.ai
development.fas.cognite.ai
fas.cognite.ai
unleash.cognite.ai
fas.cognite.ai
pa.cognite.ai
production.zip.app
fas.cognite.ai
jenkins.cognite.ai
cognite.ai
fas.cognite.ai
grafana.cognite.ai
jenkins.cognite.ai
jenkins.cognite.ai
releases.cognite.ai
skywarp.az-power-no-northeurope.cognite.ai
jenkins.cognite.ai
fas.cognite.ai
opin-api.dev.cognite.ai
opin-api.dev.cognite.ai
www.kait.co
webhooks.dev.cognite.ai
development.fas.cognite.ai
cognite.ai
spinnaker.cognite.ai

Certificate

The complete raw certificate details for nakarin-varnish.cognite.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41lONlhLJk7bTJCUZaGt
VUkBCL6kMMEKCZjYORs32Ez7vguJHGQrN2J0OqqfhSAUog+PT6+VlAhA6BhAenXe
0KUPncya/pn+ijH9kf88ZIZBTFvoJDQsjcZwSL2r740Mxcoc8GDERPQ6E4tgJtRg
VZqv1armhCekELb9f/8dQ5tIGuAVAJp4SvG692xExhhdxmi5NtKUxLCKbAgkNyZb
+34EWmO/xETZ8hAemJSJAjCpzhfto9yi3G3P8/d0z1lszKfxk5Aw96Ed2u9F78I4
EB76b8pBA7SF1RDv8WQPeV36JbyI8ZjslVCRbayIj3+U5nrvgLk/sVhUoJTve9bJ
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315587833470517052678533277582869226871950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 11:24:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 11:24:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nakarin-varnish.cognite.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28700133418924356691246583275757486407514959262247679421607842865849961731824475087999566031643354703494410673121985265352201462330004342416813120178914907761137309228546552643046725650913888128548779244111449780943383195589069926008697482789353405653988862596927564426168528565030516941619492963981284867659183346774597122325756075032450700578051683306403943156042903894901076548086420516322282777749387862365443161939730074327598056047669927017700189474718224843390462213038305454626705502679827245201013490043949805493499875326938223162673809258920421558826648133794043087382228377166901654012720136876093395618297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2362b2f04dc3383e812a9cca7b901634d11113dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakarin-varnish-exporter.cognite.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakarin-varnish.cognite.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b467f43f4000004030047304502210087c1e1883bc04407820638b5f1d57e51f881a475c5a051d49a4de23fdf367c5f022064090b01f6da8b4415443176baac95734a0769a7b3ac7691992f6963d6b5b46600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b467f45d40000040300483046022100f8f1dee6ec7f140e87c7bf441a4edace9aa780a7990e16c47c330f094d5026730221008d482f4adc3c66a855b114cc9b1f26027397ec3722099d393e334044e2c5bd05
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020d7926ae0182b5660b8b8f300f01b25ff96d674fabb446d5f9f5322543a3c659645310900e2fdc5b2865ae91c9ac732bfa4be47853bbae5210355aafc6a644976b2f397e70eb29d9bd6059642e09b6f6ec62b8ea1058b7583f6026a25ebd113aff7c00a0ecd3800bec7942908e0c384053e1c51576d5971707aae16b24534790d5ebaeddabec1246f9d0b48c4ccd6adf9b0d48539088dedb1414f189176cb8f8ea73070d8d7d61f17f544076284e2fe1edb528f79f98ff8601acab311e3bc7d398b917a3f25d56854c5a7d01796200d20def9713b51a42a9d6d89e2ef36e61bf852e29eaf6b8c6348ae4a415a7403e554c59c086884900c31f63cae1890b0e5