cogitstudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e9:de:2c:74:24:d5:c9:45:bf:7d:fe:fb:47:2a:de:ce:93 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cogitstudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e9:de:2c:74:24:d5:c9:45:bf:7d:fe:fb:47:2a:de:ce:93
Serial Number (int): 340917968719663320287702951326037877640851
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:1a:d2:cc:52:d4:65:a5:06:40:99:a8:06:45:90:ff:be:bc:02:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:9e:6e:d5:a1:a2:5d:f8:b8:81:8e:44:d5:4b:29:97:c3:ad:21:38
Fingerprint (sha256): a9:dc:30:c8:36:7b:73:59:5b:6e:03:7a:4d:aa:ab:d9:ab:6c:c7:4a:32:94:fc:68:a8:ff:9f:8c:98:fe:88:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cogitstudio.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cogitstudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cogit.studio
cogitstudio.be
cogitstudio.biz
cogitstudio.com
cogitstudio.eu
cogitstudio.fr
cogitstudio.info
cogitstudio.net
cogitstudio.org
www.cogit.studio
www.cogitstudio.be
www.cogitstudio.biz
www.cogitstudio.com
www.cogitstudio.eu
www.cogitstudio.fr
www.cogitstudio.info
www.cogitstudio.net
www.cogitstudio.org

Other certificates including the domain name cogitstudio.com

(limited to 100 certificates)
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogit.studio
cogitstudio.com

Certificate

The complete raw certificate details for cogitstudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340917968719663320287702951326037877640851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 23:15:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 23:15:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cogitstudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884150099563447804425312242075816277929689468434905149290739386274561744047294969454887750804762154632249979440318179557535607410019350321883418637145898004207717394148246657487559221919772661151228413012316620032636080976588893154493737883584791324223251402177451395858973545519189308457447863105610797219563440571312030704229227641419848365288379676371555621815552898014694899506475322784426142753489169889884368953684360826558008394145874763192567016571576906450761524080798114952948636102340153630121351898102511500186712710642415181101537257078685779255537717636433262114886719975159319492012416916275738102659241156846357549910039819629041201590630065484849824025524319473640828774290887074740154254067466626680080646580514771013442513195958626240751003633902337186417954458330708839114386576034624448571073123768404637825273669524239196802845776778820870799323851377343645417096521464629400186406935819036247137490817854536362883665966486797070257398204048552053314847300302030686949234728043504454247828804383123931034192564876230701106028854323131383077328511528712775878896837403031456142547231803349881737532420723621094745946640318283019673291780005521145489562237877657879695596235105656790694061579148535187579887093987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d81ad2cc52d465a5064099a8064590ffbebc027d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ee80346cc0000040300483046022100d6f76367757d2111c9cc86ac500f83d77aa99452689b626da549c3aae5b6e67d022100eaa8cd7aa774cfd810dacae3f102af7af3ce3e77b5c9821ea5c45bf238fdd37400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee80346fb000004030047304502206a8244b551604751b603dfbc0f2cee1d4aa920d984d7cc1113256a307c97c1130221008ee16dcec54eef712d5638d53b92b264162d6623cb554a41687411c0afb06b52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00701c3dfdf06515cc12fb768d99f2f1d6cbf7c32699f2f259ff198575c0e38e6af6e1af4316c90cb1a71a1b4add455e73833dfc71f84f4fdd3cdfcf66ff708982636a06f7c6cf47ee52cc4b123dde6bb1b5a9e3eb5344ac89b885017dab942a996160461772f3cd0bae49eec1f4cf6bb1b1f5a8db6bd6bc4b1c6292abc851fbf278b8a9d26f8fdb7ab047a897f68f54c9305db2d8b4bc9fb81c8b7fa027fa05c2e00059440e85b66eab8585e3e7172eae8d1b74cac3589c8f3e69e3c5c036e65bdaa045ca4e603f29cd81168d6e5867ad80c6324ac033aae2f028858a663f3c5266e3c2436b1b974a010917eb1a333479ccbce1b9aa77d6ce6f7cc348d9535e67