cogitstudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e8:e9:92:a2:c9:e2:d2:30:cf:e5:06:95:05:c7:6e:16:c1 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cogitstudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e8:e9:92:a2:c9:e2:d2:30:cf:e5:06:95:05:c7:6e:16:c1
Serial Number (int): 427705124352803355767306913267963237635777
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:50:7d:be:12:9d:de:6a:f2:a0:c6:17:90:87:0e:ce:3b:76:1e:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:57:b7:ab:2f:2b:98:75:0a:1c:8f:f3:a3:fe:03:c3:df:d2:fe:57
Fingerprint (sha256): b8:dd:79:0a:97:27:26:0e:18:0b:9d:b3:bc:4e:4b:65:1d:a4:c1:f4:67:a2:4f:58:0a:b2:65:c1:5a:63:9e:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cogitstudio.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cogitstudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cogit.studio
cogitstudio.be
cogitstudio.biz
cogitstudio.com
cogitstudio.eu
cogitstudio.fr
cogitstudio.info
cogitstudio.net
cogitstudio.org
www.cogit.studio
www.cogitstudio.be
www.cogitstudio.biz
www.cogitstudio.com
www.cogitstudio.eu
www.cogitstudio.fr
www.cogitstudio.info
www.cogitstudio.net
www.cogitstudio.org

Other certificates including the domain name cogitstudio.com

(limited to 100 certificates)
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogit.studio
cogitstudio.com

Certificate

The complete raw certificate details for cogitstudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427705124352803355767306913267963237635777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 21:35:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-05 21:35:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cogitstudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758099330440370109610998349942967129315471059104459300013628285823844963968632159874580652066196002121021630118031278839259468653081332735847713317428397766447461238317568586365255492455623072619036732259081570769073928265448282018700912835779354954969003869058255395572667690662162701155870269551321300307115272228663379925958353904432925364602110263298035225758977067582583934738101279501269067855783986395233722402119528917408728061485377594556516013722722474512012814244050972105397692664752479288152930069279310817567166250141106363690524057857391827691303460050127801121842796898535396702477631639603021787214111874050532886135573702398617778951497414943034452567058633539667114450118606610539488895604174584868454165402202262157449557754276403417349303195842033674491513913092880331938603798477600881852113883246059635348043763875293905573585932031022267501902365810757985147832800144866874636179734906700784192221272256076831653009578343305545589239387756990136706191750121993306322317446129840130080136534464316029536906158177709632902831596990295275666325509425598625970788593739941317605946368499775013144538435192404124177006272156211007822384753815352039475177965359722168803629176853394312194240659200784669602156416673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b507dbe129dde6af2a0c61790870ece3b761e25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017151a20440000004030047304502201196e9b209241632272d97ad01442a2e8b2d6acf1cd99b3274881b5563d1e1a5022100c04349218dcabdccf64176add21591d85fb4d2c131a6d3c61d33db4763392530007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017151a204310000040300473045022100c1ff348add51104c18468b0e2e365e225c4f6ec11af00a8f5542dccd4843b1f8022043e522e185f71fe3ec641f6cdcd76ec015d6848459b2153978640848c6e3c148
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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