development.fas.cognite.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:d4:82:35:b3:99:b2:26:4b:dd:fd:8e:be:d6:64:45:01 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=development.fas.cognite.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:d4:82:35:b3:99:b2:26:4b:dd:fd:8e:be:d6:64:45:01
Serial Number (int): 337502298041545145644591386377117719872769
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:34:4a:03:f8:8f:d7:e1:dc:8c:9e:d3:35:99:cc:2d:ba:92:c8:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:28:86:2e:63:e3:25:8f:21:26:d9:1a:7c:63:1d:14:0b:32:01:a8
Fingerprint (sha256): 33:18:d3:62:59:42:b7:99:d4:5c:57:91:9a:18:e9:e3:ef:f5:be:1e:58:04:e0:98:a7:11:a5:66:46:5a:d7:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate development.fas.cognite.ai

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for development.fas.cognite.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

development.fas.cognite.ai
fas.opint-dev.cogniteapp.com
insight.greenfield.cogniteapp.com
react-demo.cognite.ai
staging.air.cogniteapp.com
staging.cdf.cogniteapp.com
staging.insight.cogniteapp.com
staging.mp.cogniteapp.com
staging.operations.cogniteapp.com
staging.prettypoly.cogniteapp.com
staging.rules.cogniteapp.com
staging.subsurface.cogniteapp.com
ticket-decoder.cognite.ai

Other certificates including the domain name cognite.ai

(limited to 100 certificates)
webhooks.dev.cognite.ai
www.foodchat.me
development.fas.cognite.ai
www.juliehsieh.com
opin-api.dev.cognite.ai
cognite.ai
service.monitor.backend.sre.cognite.ai
yopass.cognite.ai
fas.cognite.ai
jenkins.cognite.ai
naikebata.site
shd.sre.cognite.ai
cards.cognite.ai
shd.sre.cognite.ai
cog.cognite.ai
staging.wayfind.health
nakarin-varnish.cognite.ai
www.fastapp.com.ec
renshu.app
opin-api.dev.cognite.ai
development.fas.cognite.ai
cog.cognite.ai
development.fas.cognite.ai
cog.cognite.ai
releases.cognite.ai
dashboard.u360.app
jenkins.cognite.ai
alertmanager.cognite.ai
grafana.cognite.ai
development.fas.cognite.ai
development.fas.cognite.ai
fas.cognite.ai
between2subs.com
www.foodchat.me
fas.cognite.ai
cognite.ai
dashboard.cognite.ai
fas.cognite.ai
www.brightmedia.cl
fas.cognite.ai
development.fas.cognite.ai
odata.cognitedata-production.cognite.ai
www.findmy.contractors
merthin.com
*.production.cognite.ai
jenkins.cognite.ai
fas.cognite.ai
cognite.ai
development.fas.cognite.ai
development.fas.cognite.ai
development.fas.cognite.ai
www.stevenminken.nl
www.mipasion.co
www.amanshankarsingh.com
static.getmeasured.app
development.fas.cognite.ai
spinnaker.cognite.ai
fas.cognite.ai
click-clock.com
incidents-test.cognite.ai
kartfinity.com
development.fas.cognite.ai
powerdemo-graphql.test.cognite.ai
iap.cognite.ai
grafana.cognite.ai
cog.cognite.ai
development.fas.cognite.ai
fas.cognite.ai
www.cargo-planner.com
jenkins.cognite.ai
jenkins.cognite.ai
odp-api-dev.cognite.ai
fas.cognite.ai
grafana.cognite.ai
victorchan.io
fas.cognite.ai
development.fas.cognite.ai
fas.cognite.ai
unleash.cognite.ai
fas.cognite.ai
pa.cognite.ai
production.zip.app
fas.cognite.ai
jenkins.cognite.ai
cognite.ai
fas.cognite.ai
grafana.cognite.ai
jenkins.cognite.ai
jenkins.cognite.ai
releases.cognite.ai
skywarp.az-power-no-northeurope.cognite.ai
jenkins.cognite.ai
fas.cognite.ai
opin-api.dev.cognite.ai
opin-api.dev.cognite.ai
www.kait.co
webhooks.dev.cognite.ai
development.fas.cognite.ai
cognite.ai
spinnaker.cognite.ai

Certificate

The complete raw certificate details for development.fas.cognite.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVktf/m9wBktZ3juc6VK
x56EVdBWdnfLZd/YI1MuOUzPTw6+OwDQY4RnTQz3HhJ2yj/CnlKZLCInGLOjiqcU
Pkn2yA6hrYtS7SFixSOkMtzuAX4wyBHRFoLSE48pOC/smkqKDRT4xr9+X9zhK7Tk
K2nzSqcV3m5pIBW/25C+O5UpoIFBku3pda2a3OyYflDwgzgsS/RWB0fCeaRhRjze
RIbE2oo8ctl8FC9GkZwityeMw5rbKPvBaA+rml5igmt7WPoTctq3eDxvNR22xHoS
eMRLQ8t0PJbtIyIHFwDnyKEdaGmQQO1Ax3hQG9kX4BIqiEhkamrPBOnO7S7TCmlD
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337502298041545145644591386377117719872769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 05:45:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 05:45:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'development.fas.cognite.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20368342279149187657451965159068102051871440085486770679616467168246548172914919099816128554519738156234125189125169006714233790407729405540809801900295083120942073218099246349183323582452389588473791040238905853703063734358609417642495701127299177623337134741376575346604990377874824840263472978844952403783618085600723633000976947356549299701665479575692068396818020637678635434501728929573302255919136136507617734422464180400243654015119954802851865082327670690921355910344588996547146982708085512471916331079169936297911098611773782531971593763921998926383981099700421868695488883802935566832557854518088242381641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f344a03f88fd7e1dc8c9ed33599cc2dba92c864
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (397 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.fas.cognite.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fas.opint-dev.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.greenfield.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'react-demo.cognite.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.air.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cdf.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.insight.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mp.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.operations.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.prettypoly.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.rules.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.subsurface.cogniteapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket-decoder.cognite.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017110709fdb0000040300483046022100e2ab0141d5ff548d20db68ee2eb15a781e9a6ce382aabd54e77e3d83987b3344022100a1112c1b160ef713359dc94c80f9131bdc0c417af8b5081b8a70559a160406ce0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001711070a04c0000040300463044022051de2d00b94a43d6da441ca5258de6117491db71f07137499ec7e2a039d263e102204330908c28245d071ef7c3566847cb3eda997e0e406a450a077dbe166ec23c58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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