cognita.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b3:ff:d2:a3:23:e0:15:42:f1:c1:53:cd:10:77:05:ae:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cognita.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b3:ff:d2:a3:23:e0:15:42:f1:c1:53:cd:10:77:05:ae:98
Serial Number (int): 409699734236029518836831622961504373288600
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0e:87:18:bb:89:5b:cf:75:a9:e8:f9:a0:f1:6e:42:09:67:b6:75:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:75:5b:85:2e:06:cd:7c:3c:4a:fb:9c:42:90:21:f2:26:ee:6c:7d
Fingerprint (sha256): 71:98:fc:7e:23:ab:40:d7:83:11:4b:d7:74:f0:66:7a:ad:70:91:fd:c8:e8:cc:75:a5:1e:3e:69:a0:dc:3a:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cognita.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cognita.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cognita.co.nz

Other certificates including the domain name cognita.co.nz

(limited to 100 certificates)
www.cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
cognita.co.nz
www.cognita.co.nz
cognita.co.nz
www.cognita.co.nz
cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
cognita.co.nz
cognita.co.nz
cognita.co.nz
cognita.co.nz
cognita.co.nz
cognita.co.nz
cognita.co.nz
www.cognita.co.nz
cognita.co.nz
cognita.co.nz
www.cognita.co.nz
cognita.co.nz
www.cognita.co.nz
cognita.co.nz
www.cognita.co.nz
www.cognita.co.nz
cognita.co.nz
cognita.co.nz
cognita.co.nz
cognita.co.nz
www.cognita.co.nz
cognita.co.nz

Certificate

The complete raw certificate details for cognita.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISBLP/0qMj4BVC8cFTzRB3Ba6YMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTYxOTIzNTdaFw0x
OTA0MTYxOTIzNTdaMBgxFjAUBgNVBAMTDWNvZ25pdGEuY28ubnowggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnG9pd9A0GMEtkZ4oD1PiVxxly8VcMGJV
uYEBbh5VzHRprrU5hoZfOb028/fxiYM9IcyZyHROUBh8kxXCtkyASWHQc3Sfxlvw
cA0x3me4sTpUvPOJX1jZUfbUsC9lcqeuV5X2qQashYCFj/naDufjNvT0Y/j2J+b6
fSL06+feWT0feVXEBwF1GSRBgRfU/gVjWrGcG+Jl1WX5kszTYwNG/ohsgAqaLFV1
epJ1nYcv8XDLKB1nYnWTZq/opbAe9ncmAnnOuwJdfRiHNYj8bvH9GhyGfa+on4GH
yTHaS7O//cck5n3QunRqv0zSEtlm4jvxN45iXp61lSgLql6F01SvAgMBAAGjggJi
MIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFA6HGLuJW891qej5oPFuQglntnV0
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wGAYDVR0RBBEwD4INY29nbml0YS5jby5uejBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AFWB1MIWkDYBSuoL
m1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABaFhVsoQAAAQDAEcwRQIhAM47PLEm8868
OhM6UlSQqk5vluQU71wAqrykWbuclAhSAiBAs5Cf0EklxsHrBZrn+QH2F5ag3p+8
XAgs5DWZOcUm1gB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAAB
aFhVszQAAAQDAEcwRQIhAPseQ4nc1cx7ece02Lxh2InlyPjUl7Xw7LE+kPbHrKEv
AiBVbvehJpVGbWXGJ2cosHJkvUqeYg1yR8iMPu5I5uUrDTANBgkqhkiG9w0BAQsF
AAOCAQEAC2O+Dt2F7Hox5PJmaUnl7r4bVIf9q1tYIGTp5zLtdp80SH3ws7jeoUx8
/rYqSJWJXmd7Tsaf4yBC3ZYccRVISlUMsY3nEpV8ZHwYox1wmeNAlg2XmxjmpkoX
7Wwm0AJvHhsZP3lRqrj+BRm5qYf1RkGvIL0Tpo1nO/sVIwGq8/niSUzjAiWSdncn
IsSpCIL9rq+nuF5p+pKuFfyNyqM7tNtkDKwMtXOfXNzTFQNfXjXHAdv5Dfn6b8kf
bGCjOixhT9rnBlsq10jKAcqvG/FbfkHTwio0398T4lbvtH1Gtjm0fn4pLUlfDJa2
LFEeW77Slke7sgUz9ct/8o3PzDLtxA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJxvaXfQNBjBLZGeKA9T
4lccZcvFXDBiVbmBAW4eVcx0aa61OYaGXzm9NvP38YmDPSHMmch0TlAYfJMVwrZM
gElh0HN0n8Zb8HANMd5nuLE6VLzziV9Y2VH21LAvZXKnrleV9qkGrIWAhY/52g7n
4zb09GP49ifm+n0i9Ovn3lk9H3lVxAcBdRkkQYEX1P4FY1qxnBviZdVl+ZLM02MD
Rv6IbIAKmixVdXqSdZ2HL/FwyygdZ2J1k2av6KWwHvZ3JgJ5zrsCXX0YhzWI/G7x
/Rochn2vqJ+Bh8kx2kuzv/3HJOZ90Lp0ar9M0hLZZuI78TeOYl6etZUoC6pehdNU
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409699734236029518836831622961504373288600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 19:23:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 19:23:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cognita.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19265363428559097863200279649777131822534469354233472084167678475144804633182449312536287388025659797103048664896208155744168317847960446152197707132875463349986804001255821280019613266375784892991398875886475303436711122039575310784497015370172181119796765044647147600205226105990815192115210265830277993155818255347540590432170098298666656658404708557719322968833923238214882063657181524475047053170003943157841045452018590031815418897109623922034195848536090417952257930767262034413840724828045189975475976250873014958604404380004343020098136033966900229173929995682066749731143431628034401540562658906929246721199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e8718bb895bcf75a9e8f9a0f16e420967b67574
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognita.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001685855b2840000040300473045022100ce3b3cb126f3cebc3a133a525490aa4e6f96e414ef5c00aabca459bb9c940852022040b3909fd04925c6c1eb059ae7f901f61796a0de9fbc5c082ce4359939c526d6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001685855b3340000040300473045022100fb1e4389dcd5cc7b79c7b4d8bc61d889e5c8f8d497b5f0ecb13e90f6c7aca12f0220556ef7a12695466d65c6276728b07264bd4a9e620d7247c88c3eee48e6e52b0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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