www.saltmaster.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:49:ce:33:e1:03:88:00:03:50:2f:f3:5a:06:a8:b4:1a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.saltmaster.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:49:ce:33:e1:03:88:00:03:50:2f:f3:5a:06:a8:b4:1a
Serial Number (int): 326088611819334524252073046658545422480410
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:6a:c7:f6:0e:97:6a:33:22:c5:68:8d:46:1f:58:d4:46:84:91:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:0f:0b:66:fa:e7:29:c0:a3:2a:de:36:ba:89:a6:f1:b2:09:d1:cb
Fingerprint (sha256): 29:18:e5:8c:47:3b:22:c8:94:cd:b6:07:90:f6:4c:0c:63:7d:01:da:ea:f0:9c:b4:d9:3b:68:88:88:7f:93:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.saltmaster.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.saltmaster.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.saltmaster.com

Other certificates including the domain name saltmaster.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.saltmaster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgISA75JzjPhA4gAA1Av81oGqLQaMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTAxMjM3MTFaFw0y
MDA1MTAxMjM3MTFaMB0xGzAZBgNVBAMTEnd3dy5zYWx0bWFzdGVyLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALAUy41AkIES9QWBjho2gg/Ckx0E
aKlIHxX8fbohEgW6BF7u/lPc7jolSQgtRx5ApbuJUcErY45bCyEACUktrtMYno8l
2ASDJUZztgLU+JIndDrUeCkHTTMl4U3kQ9MWsimTeBW5ONuJRbp4WBK3QYOmqaJK
CVhYauLFFkH5JR65PSWlcpUjoqzxGfRcXGzJ6jtoCQCSXHmI0oQ7Xgn5PBUvQlvu
Yyn7F7DGtzve5XYg983dQIocpAzNzYv6fzHxgYTr50wPrr7f8uSXUewrvpROb8ll
mIN68rNtm34GLtnWl5inIA4oYCbKOROhKfg38jTyvZl1Y6FbBGT8TOIn6XtE3yHz
sOewUhxrH/B0h/pc9a9x+C9yLVxZa1MzsFYTGa874AVGbcuga4zLA6r8DjuzoIWk
MbeVW4osC/79yWQpJdh0TLy1kTUzILmFOBSDxgg78O68weJ64h5bGctViDzywFul
FvnGkhQ8AuiPFELIU6dGDaFQ8lbHnPNYc8mGBQRYALAPXhEee2mGHYtXr2G0osem
M6egkLZufxr+7jAabO+jHRj4KZfmTl/j/xUcJcZOPX4u+2ENF8mPYMTLflAon7k9
N1NCO6sFh9qhuds6mAI6zBj6lXir5V81dtPje/++Djl2B2xKx8HVji8tMyU2BKxg
moEq+Ukmd4aZr/d3AgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FLhqx/YOl2ozIsVojUYfWNRGhJFuMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LnNhbHRtYXN0
ZXIuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW
eQIEAgSB9gSB8wDxAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA
AAFwL1FxrQAABAMARzBFAiEAr3AxX22W+Ve+mNB7kE7YO1FrshvmX9aFQAfk7j7m
PvYCIBAdS783pHltBB+iPckwxE9X8Rka6nd9gD5sGZn5MDbYAHcAB7dcG+V9aP/x
sMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwL1Fx/QAABAMASDBGAiEAo+ePr/J6
gGtmsVZESSiiN4hT85b0+r9K34gIAMoaykMCIQDnx1PHD+ex1sw9cklYqVlGMe9p
W8BsooZDM0Z3JD0HMDANBgkqhkiG9w0BAQsFAAOCAQEAIDNpzz41Y/zTn1YIOlSL
sUONIzajqA8MWa50frp7iLsvcWpnMwVLUXpeX7mrigqaJXjF5TPPegMksxRMFyrv
2RLG9eNNypNpmbcTd9wKHiW043TDi0OmhsBbGy9KyS5zDQw2nCLNyhH4iB1JaMzR
/xSIxRQWdOSO6ybKT3OxjnTQ8VgS95ea5RITPJb6yphlGDG9IUXPgH+uF/mAftZR
2XIAgMxBYUdEZ48uaToCxI/9LzodRuILKfuY8JGWxyA1HuloI+5xQ6GPwXMA5Sz0
9cJ6XXL3xnoqk3S1TfSKXOd6ZJHlBA98uSEiJBaj11kbVsbofvmNWSKiGFCDxU/D
bw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326088611819334524252073046658545422480410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 12:37:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 12:37:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saltmaster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718348749348994380123643616362008072768049141528229996360187511697602761119089693427340968602716687016536301827504779378066474525364581040006969458197435544730020598464729902374284009217560110452458111499428097858465673843619653918098836250672455722226879396520489789947920775610652188866282137932702624003622074124929876449851693297484119252192847379148371942975835513841982938570758138520067261298177265106060930862638245128263456789593385604496124196468826732176749791635848312910496243419156905769882238656057464206433173130252912148551291170417713615630688093459713707005907386410553791308917728754094274813050041630464579097228727690191152077670592962336681859038738817872240858304112758969300964248030729405242665461759812636762489368037026004377626702739458637819177094662282686833790763017449473097069299639738794572007171229129243931320855954292466853171270514851319766183596707454188447396645980219363850904404779574205996600873284393245757094184204351473461615518399767851270892924654170718122727041060414618551928296136281984559033450300584262733722484638453735359823531002967788238034941579983112326578900015983105687590911788321021071936843243950570599101655659410887803844448205302928448862593900849230065105818875767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b86ac7f60e976a3322c5688d461f58d44684916e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltmaster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001702f5171ad0000040300473045022100af70315f6d96f957be98d07b904ed83b516bb21be65fd6854007e4ee3ee63ef60220101d4bbf37a4796d041fa23dc930c44f57f1191aea777d803e6c1999f93036d800770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001702f5171fd0000040300483046022100a3e78faff27a806b66b156444928a2378853f396f4fabf4adf880800ca1aca43022100e7c753c70fe7b1d6cc3d724958a9594631ef695bc06ca28643334677243d0730
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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