cavium.com

Issued by R3

About this certificate

This digital certificate with serial number 03:93:52:ca:37:00:17:cf:44:42:43:8e:9e:ba:8a:68:01:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cavium.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:52:ca:37:00:17:cf:44:42:43:8e:9e:ba:8a:68:01:d0
Serial Number (int): 311468412387818378131802539567960021270992
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:cf:a9:11:a5:dd:da:64:2e:fc:23:99:ae:60:5f:1e:15:ca:0f:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:a1:c5:10:9f:d7:dd:9a:26:0c:13:dc:eb:f0:7a:7d:19:e3:b8:68
Fingerprint (sha256): 98:84:b9:9c:7e:2a:81:b7:1c:92:be:60:6b:56:07:a6:13:63:b1:a0:8f:33:a9:32:26:16:64:00:9b:07:1d:f9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cavium.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cavium.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cavium.com

Other certificates including the domain name cavium.com

(limited to 100 certificates)
fsus-7.freshservice.com
fsus-7.freshservice.com
fsus-7.freshservice.com
*.cavium.com
supportcrm.cavium.com
webapps.cavium.com
cavium.com
*.cavium.com
xmlgtestsd.cavium.com
b2b.cavium.com
cavium.com
cavium.com
helpdesk.cavium.com
wexdev.cavium.com
biprod.cavium.com
*.cavium.com
support.cavium.com
cavium.com
fsus-7.freshservice.com
xmlgwprod.cavium.com
leapfrog-ssl-9.gcs-web.com
fsus-7.freshservice.com
repo.cavium.com
helpdesk.cavium.com
fsus-7.freshservice.com
support.cavium.com
cav.cavium.com
cavium.com
helpdesk.cavium.com
helpdesk.cavium.com
cavium.com
fsus-7.freshservice.com
repo.cavium.com
xmlgwtestsd.cavium.com
repo.cavium.com
leapfrog-ssl-9.gcs-web.com
oracleappstest.cavium.com
cavium.com
helpdesk.cavium.com
fsus-7.freshservice.com
www.cavium.com
leapfrog-ssl-9.gcs-web.com
fsus-7.freshservice.com
fsus-7.freshservice.com
leapfrog-ssl-9.gcs-web.com
helpdesk.cavium.com
leapfrog-ssl-9.gcs-web.com
leapfrog-ssl-9.gcs-web.com
localca.liquidsecurity.cavium.com
fsus-7.freshservice.com
helpdesk.cavium.com
fsus-7.freshservice.com
repo.cavium.com
leapfrog-ssl-9.gcs-web.com
bi.cavium.com
helpdesk.cavium.com
helpdesk.cavium.com
supportcrm.cavium.com
bidev.cavium.com
helpdesk.cavium.com
connection.cavium.com
wexdevsit.cavium.com
fsus-7.freshservice.com
fsus-7.freshservice.com
leapfrog-ssl-9.gcs-web.com
repo.cavium.com
fsus-7.freshservice.com
lca.liquidsecurity.appliance.cavium.com
cavium.com
fsus-7.freshservice.com
cavium.com
fsus-7.freshservice.com
helpdesk.cavium.com
wex.cavium.com
fsus-7.freshservice.com
support.cavium.com
fsus-7.freshservice.com
leapfrog-ssl-9.gcs-web.com
*.cavium.com
fsus-7.freshservice.com
repo.cavium.com
cav.cavium.com
helpdesk.cavium.com
repo.cavium.com
leapfrog-ssl-9.gcs-web.com
oracleapps.cavium.com
bisit.cavium.com
wexdev.cavium.com
cavium.com
supportcrm.cavium.com
fsus-7.freshservice.com
cavium.com
cavium.com
helpdesk.cavium.com
leapfrog-ssl-9.gcs-web.com
cavium.com
cavium.com
fsus-7.freshservice.com
cavium.com
*.cavium.com

Certificate

The complete raw certificate details for cavium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgISA5NSyjcAF89EQkOOnrqKaAHQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDQyMzUwMTlaFw0yNDA0MDMyMzUwMThaMBUxEzARBgNVBAMT
CmNhdml1bS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsrwNo
47KrCulQoj5Hgd5u8XDWkvM7IKuWY++BWadnz+oe4f3pDcgwlIALqH/U5qMZiH3m
ihldCy3D3+9QMbVHxL/M8koJBaZrYrsff9QaZW/RBhp6KNCnkh6nDukYhV4cxhLp
SNJQ3+A5TOUPZMEY95tqkJNvPWpL2hRyq2XwjPNjYogV1qYk4rwhezFfTuV/kUP0
PwQFPwx2/SbHvURQHHJtqS1gGMiFWOxIG3VHtACBAFI6BDF4OrJBoewTcAko4Bdc
OSBY8Pj2h2RBykjdHN1ObW/BCFSOF5LezWUi5fATo+H1RsYj6NcHOLstx5xAwTZk
pPNfMz4wede272hXAgMBAAGjggIMMIICCDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FLfPqRGl3dpkLvwjma5gXx4Vyg97MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMBUG
A1UdEQQOMAyCCmNhdml1bS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgor
BgEEAdZ5AgQCBIH1BIHyAPAAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv
4frUFwAAAYzXGXjYAAAEAwBIMEYCIQDRgMjVsg+v/Hw6R/Dt3zp2knP8M6xmCtCi
0JLYUJ0IDgIhANWTq9WS7hMqf8jRuJvdhF/lIbCWmdkQmwsGAGeFup/CAHUASLDj
a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGM1xl6xAAABAMARjBEAiBm
YrH687cBX+ECfvIFKjc2Lxt1V9kLJVe0vWlCCQ9V8wIgPb416fmzI0+t9BCPTEZP
JulrFuASvASnglW3I93hwtMwDQYJKoZIhvcNAQELBQADggEBAFb8C0iKjuHP5KZW
MG71dEFPHmrLxNMb1qHrDm36wkpWUKuDij03f+IBm4JqZneIrv6KslsqxAeqOnO8
336KgaCHdi9ZMdw5wYCLnMLtJrfNltMgIHeIO4Yr5DIKaGbKNWuu9wGwmu9KUvvn
wUZMLtAAzxbVysuQcr6AxA2NCaF+dN1lZpU6X65NvrGEvsvIh8UvupV6ohmO5DQH
APxD8yioMqQm8hwu6tu2P4PMw9yjRkhb8T0ryzHqk6BjvaPGpb0pZmvnrB4eVzcu
cKgExgS/lVJf2uSUjHDtzQtgOq9SAbxezhPSHmmL9rf98YLCIV+WEy8zIIttBYJp
dGpl+sk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7K8DaOOyqwrpUKI+R4He
bvFw1pLzOyCrlmPvgVmnZ8/qHuH96Q3IMJSAC6h/1OajGYh95ooZXQstw9/vUDG1
R8S/zPJKCQWma2K7H3/UGmVv0QYaeijQp5Iepw7pGIVeHMYS6UjSUN/gOUzlD2TB
GPebapCTbz1qS9oUcqtl8IzzY2KIFdamJOK8IXsxX07lf5FD9D8EBT8Mdv0mx71E
UBxybaktYBjIhVjsSBt1R7QAgQBSOgQxeDqyQaHsE3AJKOAXXDkgWPD49odkQcpI
3RzdTm1vwQhUjheS3s1lIuXwE6Ph9UbGI+jXBzi7LcecQME2ZKTzXzM+MHnXtu9o
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311468412387818378131802539567960021270992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:50:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:50:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cavium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29878542256235248032111823879418458234266313303895936066386840761765373359779813110708084256433397027722183545795540482231282552118948731149147070604232945205064615460223654976832342769482908996655019159761967096436606046005984016573713044872446307937776151795580336812277409580921832677656016054256056516124213670269373638116544635122358343712156606941933485663646714099591600913108322398511286966294544153348641505331465247005269433979663050434813416699025337256573042459691906377805821703117567361904174156763618715682275509438364166115153318389858363750577926402166911852594421988116946967157948985088187921557591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7cfa911a5ddda642efc2399ae605f1e15ca0f7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavium.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd71978d80000040300483046022100d180c8d5b20faffc7c3a47f0eddf3a769273fc33ac660ad0a2d092d8509d080e022100d593abd592ee132a7fc8d1b89bdd845fe521b09699d9109b0b06006785ba9fc200750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cd7197ac4000004030046304402206662b1faf3b7015fe1027ef2052a37362f1b7557d90b2557b4bd6942090f55f302203dbe35e9f9b3234fadf4108f4c464f26e96b16e012bc04a78255b723dde1c2d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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