cockpit.saitis.net

Issued by R3

About this certificate

This digital certificate with serial number 03:aa:e7:df:2d:ec:4e:90:d6:19:35:55:9e:ae:2e:01:81:d8 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cockpit.saitis.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:aa:e7:df:2d:ec:4e:90:d6:19:35:55:9e:ae:2e:01:81:d8
Serial Number (int): 319493070652496641006674404762543907242456
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:87:8d:24:2b:67:53:8f:af:7d:d8:3c:d6:6c:a9:d4:f8:61:5a:8f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:f8:8f:d9:e7:45:fd:19:9a:b1:b6:5e:30:b6:82:06:6c:6f:1e:81
Fingerprint (sha256): 8a:ea:da:cf:07:54:85:94:83:15:1f:1b:4e:c0:e4:eb:84:a8:67:7e:3a:be:57:0e:3d:bb:1e:6e:63:8c:c3:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cockpit.saitis.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cockpit.saitis.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cockpit.saitis.net
ftth.nimag.net
saitis.net
www.saitis.net

Other certificates including the domain name saitis.net

(limited to 100 certificates)
www.saitis.net
www.saitis.net
www.saitis.net
ftth.nimag.net
cockpit.saitis.net
www.saitis.net
www.saitis.net
www.saitis.net
www.saitis.net
www.saitis.net
mailcleanerpro.saitis.net
www.saitis.net
lists.saitis.net
lists.saitis.net
www.saitis.net
mailcleanerpro.saitis.net
www.saitis.net
cockpit.saitis.net
www.saitis.net
www.saitis.net
lists.saitis.net
www.saitis.net
lists.saitis.net
lists.saitis.net
lists.saitis.net
cockpit.saitis.net
lists.saitis.net
lists.saitis.net
mailcleanerpro.saitis.net
cockpit.saitis.net
cockpit.saitis.net
mailcleanerpro.saitis.net
mailcleanerpro.saitis.net
www.saitis.net
www.saitis.net
cockpit.saitis.net
mon.saitis.net
www.saitis.net
ipam.saitis.net
lists.saitis.net

Certificate

The complete raw certificate details for cockpit.saitis.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISA6rn3y3sTpDWGTVVnq4uAYHYMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjYwODQwMTVaFw0yNDA2MjQwODQwMTRaMB0xGzAZBgNVBAMT
EmNvY2twaXQuc2FpdGlzLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL5X6XXeMla+veRCz2BsVML6ql91XbKNYTO5k9AYDzHAuA5RSh1adFwFkKyj
3MA3bw0v6pfnnlTQyTJaKnRU/ftnglG83pqKFRq+ot4Z4jei64xjZa9q5sCl4tCJ
6JLpbuGiX40kfd5htbcM167jkt7PkiU5XyJNHTgvfPDN95a1u9z2cpiI1xNTxxwC
TDp0uUtVbfMvkjxiqDSGGn2mb2H0KxjwFGrx1XiT95bQ7vFlUCcvU32Z6BxBY9bk
lljnT18EUXQ3xnU+WkFwFeVZMLjeyEvYvd0uJVEK2GvEl2sDG0OY4KikYz6qJJBf
epOX3liNPItHDGJE8qqj2yVJ5dkCAwEAAaOCAkAwggI8MA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUP4eNJCtnU4+vfdg81myp1PhhWo8wHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wSQYDVR0RBEIwQIISY29ja3BpdC5zYWl0aXMubmV0gg5mdHRoLm5pbWFn
Lm5ldIIKc2FpdGlzLm5ldIIOd3d3LnNhaXRpcy5uZXQwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAY56Ib2IAAAEAwBGMEQCIFhFF55qXXuaPDpf5nHT
RrZNC1yXwXvGJDbs9GQg975GAiAMySAnso6lnc44W2zf65xyVLlFZnzLMjfdL0pw
/Z+jcAB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjnohvZQA
AAQDAEgwRgIhAMgPZRoxj9+PbKh2OI8HH0IF+tqRa4AUbaRcBcmrkTT6AiEAhfct
+hwDb4Ux/2Us0PcpS7fv42IJ26+quWmMt0idaGgwDQYJKoZIhvcNAQELBQADggEB
AKPgz0c5GPeT9+tATP7QjtO/djKF6DSUzVHUOu+o9KUc43mBujkGj98vWP/SYTqS
Gr+WVlcooWBP4f4PG5/DKP2dzocLOZ6x9F2K1gPZKiQz8T3l6BBiUnAPDOBNOAe8
E9xoJt5LJtROXiDt437vZHkNOGN4PmMzQMBJdiBoiR3KgEEDaJdzE0fglFzgglSF
y8rarwcdZ1MTKETxoWvTDGSt7i1Ps9Z8B1qtoWFAZ16WpPkZjerzCJkVFPLNNRfE
7j47cR64XK3Bz8fm96eEBns/z/TwAdwuXbpZJrRhk8rt3x38ub9Yl6+XhuTt0k4f
FrjHAVNJthI7TQtYkc3rLSY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlfpdd4yVr695ELPYGxU
wvqqX3Vdso1hM7mT0BgPMcC4DlFKHVp0XAWQrKPcwDdvDS/ql+eeVNDJMloqdFT9
+2eCUbzemooVGr6i3hniN6LrjGNlr2rmwKXi0Inokulu4aJfjSR93mG1twzXruOS
3s+SJTlfIk0dOC988M33lrW73PZymIjXE1PHHAJMOnS5S1Vt8y+SPGKoNIYafaZv
YfQrGPAUavHVeJP3ltDu8WVQJy9TfZnoHEFj1uSWWOdPXwRRdDfGdT5aQXAV5Vkw
uN7IS9i93S4lUQrYa8SXawMbQ5jgqKRjPqokkF96k5feWI08i0cMYkTyqqPbJUnl
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319493070652496641006674404762543907242456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 08:40:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 08:40:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cockpit.saitis.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24028628944163264833116219801987933539099029318843789954112317230687433755150844028662104842263240538017562175081298974549951838098748573243115224186187685677137663985648401336436019019032359993119403607290458619797199117891679555593958129111228914562979198069686519142066384214917573938950814731630299483679202304530769758546592159877470980892338383931995777317517743393393820401518538376906627026387476026073682582605917225657756288378351961682379707202540268165145261768335810969201167581586443068468979283215171175341010620405735834268469650853636698948181826218507486132015700126773269140209085028082861575103961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f878d242b67538faf7dd83cd66ca9d4f8615a8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockpit.saitis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftth.nimag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saitis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saitis.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e7a21bd88000004030046304402205845179e6a5d7b9a3c3a5fe671d346b64d0b5c97c17bc62436ecf46420f7be4602200cc92027b28ea59dce385b6cdfeb9c7254b945667ccb3237dd2f4a70fd9fa370007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e7a21bd940000040300483046022100c80f651a318fdf8f6ca876388f071f4205fada916b80146da45c05c9ab9134fa02210085f72dfa1c036f8531ff652cd0f7294bb7efe36209dbafaab9698cb7489d6868
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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