saltmaster.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8e:d6:cb:c6:1c:ed:1e:97:7d:bb:c4:b7:6c:43:d8:50:e9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=saltmaster.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:d6:cb:c6:1c:ed:1e:97:7d:bb:c4:b7:6c:43:d8:50:e9
Serial Number (int): 397054752675383377969033903344820831146217
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:28:a6:c3:0a:a3:2d:cf:4c:20:a2:2c:fa:f3:e9:99:fe:9e:28:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:c6:b3:46:e8:b1:e0:57:42:ce:41:73:83:59:6e:c6:b3:dd:2b:24
Fingerprint (sha256): c2:c3:d5:ff:c1:1a:b0:93:e0:af:11:3e:05:59:61:de:70:59:ed:c3:dc:55:a8:0f:98:90:57:79:9e:a1:47:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate saltmaster.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for saltmaster.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

saltmaster.com

Other certificates including the domain name saltmaster.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for saltmaster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397054752675383377969033903344820831146217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 06:13:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 06:13:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'saltmaster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779807878596300251399924905864037693623667189209286114799595880448548180293223450924152131172713487833183204056507613101428806078663027427422109079394515963525826916028196281406269643448226098586077959379958138520735600645127759308763146955458739260498860614241261408208675815178791053675538353118757188596397350792475582869887512204071315705814405594424601566205883355325140608588279603392564178193889909979132913267330023105318994557275096875472972797326276330638269139330217487986551627260525105165704235924109041783413523765101418022332075171246347546615145569376902497892314904677916521036360040253133597467245265066813609209948269092973996319215595854357301641914151879842390139333818364501367141286643346813509968688857835637030760322721963011821185034791744611955657624324399845214072542007471886427030104189162101254837753385630971634142646203185093598917225454416861236064518790712303192982959638545433652727858686884489962064971025122761540977346210330321415113874479754922145190506502098388229519740535103614811078643297773775042440365229892735486540122761095934241092048807907015369716429372239400109980854375430503510027651389128973298249955113377460091967860868245886812251772951217937857741134479246544562343141691491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c28a6c30aa32dcf4c20a22cfaf3e999fe9e28e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltmaster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f17da77f50000040300483046022100ab2055029c0d90aa07090a8b606986913bbe0437f1f465cd72b5f89e86d31be4022100f4e8424b4f444c01f1f3f858548d315d7b107b049a180f3880015c5a0f953d0b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f17da7823000004030046304402205d80da3bf08872693298b49d643ef430339f572c8ed2491c2470289110268c6b02202a940bcbae34195c45ed13d3602f952af417a16c7ea64475863e6c39042015e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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