cogitstudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:8c:75:9f:aa:95:42:32:19:b2:14:2d:6e:42:a1:db:49 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cogitstudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:8c:75:9f:aa:95:42:32:19:b2:14:2d:6e:42:a1:db:49
Serial Number (int): 317329868626875092645104539638713561504585
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:17:c0:27:19:17:6e:7b:78:f6:30:ca:1f:ad:e3:3e:51:da:f9:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:71:ad:9c:06:2c:b5:80:a5:db:67:6f:9e:91:d6:34:17:0d:ad:42
Fingerprint (sha256): 4f:b0:8f:fb:f8:8c:33:82:1e:26:48:4c:5f:f9:18:52:5a:56:85:41:cf:1f:b1:e5:4a:8a:e0:a6:28:de:63:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cogitstudio.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cogitstudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cogit.studio
cogitstudio.be
cogitstudio.biz
cogitstudio.com
cogitstudio.eu
cogitstudio.fr
cogitstudio.info
cogitstudio.net
cogitstudio.org
www.cogit.studio
www.cogitstudio.be
www.cogitstudio.biz
www.cogitstudio.com
www.cogitstudio.eu
www.cogitstudio.fr
www.cogitstudio.info
www.cogitstudio.net
www.cogitstudio.org

Other certificates including the domain name cogitstudio.com

(limited to 100 certificates)
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogit.studio
cogitstudio.com

Certificate

The complete raw certificate details for cogitstudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317329868626875092645104539638713561504585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 01:48:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 01:48:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cogitstudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710621763807423202067146776227439889528343717923427355235067510141577565473751134076953728073307679975728888052609771644801698340309328899210923991817466348447376918624407889975702536386561096265333125009486377169409499872216450839398256362298921008968252737192123732111916427573773000314796689802230295723398759085301233180969539721095320011036277572010698618659447986184086735191709668774140781151869973070858430742280662401110995881243520340237109704135400952190138224897877288254776475329957589474126756679842311057063326566474604992675599573307360831645047817449585391248654191367667370071752250566235860551657196768994079482573017263868892920176225031891896391630919668618515589225312669857549227554391144921779700932736801577796923779996144103536259597279033481443736820053141254167446424560474849959450784382871859067780261725053171430962343265248655073266820035650192572045610766780884351685025924149839587764016483830051876032096969214672903567467270428514062068753566898483416786509860498660063954808035343026998959339045356435262357006281135603384933589787377854192603805551518569265892285834680589400609909529778707571363899416847346572513416591088678905324770751980721018417254918662063782716898076597943883948008377331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b917c02719176e7b78f630ca1fade33e51daf9b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c7e93ca3a0000040300473045022100a82e7ae915304683b7b5fa14bcd20ca1e0f290263d056ac1cb9ee4ebb34ea97c02206555b00e1af116612662ea5782ac6e98395713acaffbf3247dd9d2d47fda748c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c7e93ca5900000403004630440220322fd0094adfad03a53b4d8b1fb6bee51b0f6a1a3d7be395a8dc41272e18071c0220359011843987d08c940ae2e0e422a02c824ad835385004758346c946fcb53a1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a7e339b211513d70e98e0bd846fc92bfe887c8e84db790bfca680218f0d5f048e1d799805fe01749004e460e3530711b625084b9271e3c6a74edebac35e895144dd9a53e148931a8ade8ce92a4820e378026213d12a20f124071bd1d702c9cff05ab5a6d64fad189a2b5b6c5d1634afdf7778a6218dfe51aecf420922b541515dc26bb8396fe5ff0aad03ee1b38109af85cf42a6ca1baccc6da5904ea6b9403f8c5539f03a4a8bf71f891387935d0ce40152e793d5a3cefd642bd5a36168ebc3974249deb4f13a46d2aef110be61eeb5ad1ea33f17f8fb18c02cc941556c0afb5b373590a70fc1761a1c326889d8638fd48e7e38e9fc41316717aefc897376e