development.cloudseed.knightpoint.com

Issued by Let's Encrypt Authority X1

About this certificate

This digital certificate with serial number 02:e8:9c:fa:53:bf:f4:f7:be:43:0d:e3:ff:c8:93:56:8c:bf was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=development.cloudseed.knightpoint.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e8:9c:fa:53:bf:f4:f7:be:43:0d:e3:ff:c8:93:56:8c:bf
Serial Number (int): 253378740329383687388704385655835605765311
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:a9:6c:0b:1d:a9:72:43:8d:f6:c9:55:46:d0:29:6d:52:7e:8d:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:ce:95:99:1c:34:ae:70:43:f4:81:a8:8d:b6:ac:f8:1e:73:99:75
Fingerprint (sha256): e5:b5:94:b2:6f:12:a9:d6:0e:4e:b1:eb:6a:e8:a1:2c:a4:c4:1f:a0:e6:98:56:5c:ea:dd:ba:a2:d0:30:85:f4

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for certificate development.cloudseed.knightpoint.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for development.cloudseed.knightpoint.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

development.cloudseed.knightpoint.com

Other certificates including the domain name knightpoint.com

(limited to 100 certificates)
sharepoint.knightpoint.com
blog.knightpoint.com
disazeus.knightpoint.com
blog.knightpoint.com
SSO.FEDPORTAL.KNIGHTPOINT.COM
www.comportal.knightpoint.com
disazeus.knightpoint.com
time.knightpoint.com
sharepoint.knightpoint.com
blog.knightpoint.com
flint.knightpoint.com
flint.knightpoint.com
time.knightpoint.com
disazeus.knightpoint.com
flint.knightpoint.com
time.knightpoint.com
disazeus.knightpoint.com
www.fedportal.knightpoint.com
*.knightpoint.com
www.fedportal.knightpoint.com
flint.knightpoint.com
www.comportal.knightpoint.com
zeusdemo.knightpoint.com
sharepoint.knightpoint.com
blog.knightpoint.com
flint.knightpoint.com
flint.knightpoint.com
development.cloudseed.knightpoint.com
sharepoint.knightpoint.com
www.fedportal.knightpoint.com
sharepoint.knightpoint.com
zeusdemo.knightpoint.com
zeusdemo.knightpoint.com
SSO.FEDPORTAL.KNIGHTPOINT.COM
zeusdemo.knightpoint.com
blog.knightpoint.com
blog.knightpoint.com
sharepoint.knightpoint.com
SSO.FEDPORTAL.KNIGHTPOINT.COM
SSO.FEDPORTAL.KNIGHTPOINT.COM
development.cloudseed.knightpoint.com
SSO.FEDPORTAL.KNIGHTPOINT.COM
flint.knightpoint.com
www.comportal.knightpoint.com

Certificate

The complete raw certificate details for development.cloudseed.knightpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLjCCBRagAwIBAgISAuic+lO/9Pe+Qw3j/8iTVoy/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAzMDYyMjAwMDBaFw0x
NjA2MDQyMjAwMDBaMDAxLjAsBgNVBAMTJWRldmVsb3BtZW50LmNsb3Vkc2VlZC5r
bmlnaHRwb2ludC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+
BNrYQQ0QXqnXBX09dv2zsur//4zZCtp/Vr3HE36xHwAxyx5MTDW8Ux1+j+/IHIAP
Mmm5VL1/3z43+q6Tc/W/2dFih5vkF1Fl1D34rlH9ohcAx33SRCi0bxZ5D0I4TUuP
4so/H+IszYbF8JEu+oftgKDKVPmi/UsHv/8h/RgI/kdbHkgFdkpWKKm8ALwhWIbG
jRQMX7vlftesT/xw4lLucht5mX7skpoJxIGaBUBRrfeLeZb+0Baft5BEvb/Dh9hU
iTEuvo5VX89IaGGDXRBapiALzGU0qn9fiMsfyDElxsHvsJvvYg0PCvlcJS8lkzkk
rrBE0kVsPXAxaAiIpRJQD+CZpf1fAPXUn6L3POBGSe/jlbl3hIkCOmZmaNeevNCK
0rhzkNQgkiDBI4la6rs6WUsjkR7ljn1cVjEmagNMjZdt6E+szv/MtgGTyIZqRPyV
r6a4c+wbzKautfW4ORiIB6kpCAel2+UKvbO5VS5sxb8EeA7RxNp8+n9LwRL2Tdg0
P5kSTEqdTgPOvHUXmijoNoYe1u84haD3ZUQyFcAOhdPF6FFAKwZ8OQW4i2bUa9Te
4ExM/s9nALjIRBl1Yyxwqys3r9EXZhEJkHS16bd2m6R5pAcAvZDh4BOe5B8anwdH
zLFqIMefSm5ZYRNR6fj8z+tDytBBz3CX4H7xVlrR0wIDAQABo4ICJjCCAiIwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSwqWwLHalyQ432yVVG0CltUn6NkTAfBgNVHSME
GDAWgBSoSmpjBH3duubRObemRWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYB
BQUHMAGGI2h0dHA6Ly9vY3NwLmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsG
AQUFBzAChiNodHRwOi8vY2VydC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzAwBgNV
HREEKTAngiVkZXZlbG9wbWVudC5jbG91ZHNlZWQua25pZ2h0cG9pbnQuY29tMIH+
BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe
DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS
ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD
ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v
cmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAAKiiZsQQSkws9kRttGe
fOqF8sUrsjPl9fhkV8lr+TZ6hyhRmVy6OzdvL4VrwsCuaBoYcvyWkZbpZeGfeMwE
FhiBo3AqkZjsVjhtSIr2ckCnzmnHGNN42GTc0yGrMTb1YMkEHDhpM+AS9R7JSitL
rbaem9qLutP9S25+7pb1HAwhOrx4HnybPPWXuI4+WFn2ALk4KnIlE53x0zyFJ3ef
IlNImnpr3jPLxnOn/MPrBNRLvOnwwzx32qQai8XW+tfafxu/eTyRmUJkmYoY6GZ2
SWgehRtsUAH6J2g1RZUQ7+ci07Qcsfa77yuOpfH4MBMIFaSiMCMxPLda90PEK/uz
eSo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253378740329383687388704385655835605765311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-06 22:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-04 22:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'development.cloudseed.knightpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775209740541341489521751576890293881697646272484882190905988970886839887612735820341960175468057913221505717472032063420226978728234355467455486304868276955292659243803867573237846859987966819573141901126527169375201347760902499848661735434774243339079014210183658633822932083910103155016104890111226758571621184490551167399133758678634204822157949172345034469741283256465428937602957483296123553847564731339313738649730467972518114776875721950793362206016510869164209045651799908314927556492909703083480378801101139383724986969743425195768635754484288712703960381310541872585478974043887902929606836239384929806360947746413781158686882745215612294625103090749943222051501901367604464502453075160612971573293192274675501376329453584626676173138917692591983841628706662189000116925026615497874807919365422667974649452260356418695352965574168405064115920750387882700242237566308378888300721005462941647835185432957169978791293990281527929276521947535351605211248211677957945551332995055930278640602934211340356445435567156643514062880664564843016815456512389507219223312625432236012086803042493724670272439981500130977399679190461915185164542144257541705803071310015613274945358173188914463585822816854979581950769058408392286487106003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0a96c0b1da972438df6c95546d0296d527e8d91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.cloudseed.knightpoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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