code.cogitstudio.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f9:e7:e7:8b:3c:2a:31:43:55:27:e9:5e:17:b0:30:e7:45 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=code.cogitstudio.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:e7:e7:8b:3c:2a:31:43:55:27:e9:5e:17:b0:30:e7:45
Serial Number (int): 433487707001976983684883955562038737037125
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:a7:91:15:9e:60:97:a5:10:44:da:f8:f9:6b:1b:6f:e4:92:1f:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:61:ae:4a:86:92:77:38:f2:8a:f6:d0:68:1e:8b:d4:b5:fa:c7:1d
Fingerprint (sha256): 4e:55:f5:8a:c9:a2:1c:11:cb:78:24:c1:95:0c:73:0b:5a:cb:1a:36:8d:93:dc:e4:f0:4e:d0:80:98:27:a6:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate code.cogitstudio.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for code.cogitstudio.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

code.cogitstudio.net
redmine.cogitstudio.net

Other certificates including the domain name cogitstudio.net

(limited to 100 certificates)
beangels-user-platform.dev.cogitstudio.net
prx3.it.cogitstudio.net
admin.cogitstudio.net
prx2.it.cogitstudio.net
static.cogitstudio.net
code.cogitstudio.net
code.cogitstudio.net
cogitstudio.com
code.cogitstudio.net
beangels-user-platform.dev.cogitstudio.net
pr0b1.cogitstudio.net
code.cogitstudio.net
static.cogitstudio.net
cogitstudio.com
prx4.it.cogitstudio.net
static.cogitstudio.net
chatbot.dev.cogitstudio.net
beangels-user-platform.dev.cogitstudio.net
code.cogitstudio.net
code.cogitstudio.net
cogitstudio.com
code.cogitstudio.net
*.cogitstudio.net
cogitstudio.com
cogitstudio.com
code.cogitstudio.net
cogitstudio.com
code.cogitstudio.net
code.cogitstudio.net
static.cogitstudio.net
cogitstudio.com
static.cogitstudio.net
*.cogitstudio.net
static.cogitstudio.net
beangels-user-platform.dev.cogitstudio.net
pr0b2.cogitstudio.net
code.cogitstudio.net
code.cogitstudio.net
cogitstudio.com
cogitstudio.com
code.cogitstudio.net
beangels-user-platform.dev.cogitstudio.net
cogitstudio.com
cogitstudio.com
cogitstudio.com
static.cogitstudio.net
cogitstudio.com
static.cogitstudio.net
static.cogitstudio.net
cogitstudio.com
cogitstudio.com
cloud.cogitstudio.net
cogitstudio.com
cogitstudio.com
code.cogitstudio.net
chatbot.dev.cogitstudio.net
code.cogitstudio.net
cogitstudio.com
code.cogitstudio.net
cogitstudio.com
code.cogitstudio.net
chatbot.dev.cogitstudio.net
code.cogitstudio.net
cloud.cogitstudio.net
cogitstudio.com

Certificate

The complete raw certificate details for code.cogitstudio.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnlZ/1DaE/UxEfi6qcV8
JI3L74E+DAGJvWRQ6NSBhP92p27pC3fA9RwNC3wGU9guWBRdFjlPJpoD7wniBNxD
ePV1Obn/dlJz7cTy1jqdqQCIHDwKeiKf0RhDeQbl6NI4i9kRLUcfi43XliSj8ZiL
54wQWe3zALE9iuHFW3pQ5/SXM3FUdbnKQzsHc0+fyBtAwWDFKNHzzQ4e7rNnwOfE
NbCKDgnieMin3GccSdqZhh28sCbodNfqhqjnKFJicPaG/483Br8nbRc6zB4KWNA/
NcOLyUvvqQDrvBW+pqWm9I3jRYqRDGma0lmeifxBJq5ctKyBOXLvgtQn392pH7fN
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433487707001976983684883955562038737037125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 21:08:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 21:08:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'code.cogitstudio.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24045118624164810033172576053778139774928372210636758649030453452998753372712537067699996853599124620593664380301604252733411745668477845071773558921993805468129206523540085770077616521301019855224631321609515106346926216861309859057449070355631115010516842699533567190491389292869841008776529222844625226927164652690541382684982116050824992337194980735907082272055935167607848635373774569273282347028847409074672258264310102029542124033244933422419346225508644592565422771638272810646473204917454430430051045145505482682868712345194676223011984600761849767331304585294922013058408190007843077051110330962546395696621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1a791159e6097a51044daf8f96b1b6fe4921fda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code.cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.cogitstudio.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163513f514b0000040300483046022100f21c40c7e59f2502c0acda6de949d529918f792797998f58547cb73a9295aeea022100f2c16a2c63a84d69f4fb5bfe029e5c153780b4c8d03ff2fc855b5c994220f9ee007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163513f51760000040300483046022100f96c76e475d596ea0baea7c016ad9130e0d2770ce14d3698a47d323ea0b9f555022100ec51b7aedf105f42ad2a892e517e31be346fbb6d5e1ede9ccdaf21ea87240edb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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