cogitstudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fd:98:d6:78:d9:79:ef:c3:00:65:95:e5:cc:17:52:6e:26 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cogitstudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fd:98:d6:78:d9:79:ef:c3:00:65:95:e5:cc:17:52:6e:26
Serial Number (int): 347631452884284606106023225337384958848550
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:04:99:7a:cc:c1:f2:f5:1a:13:b7:fe:3a:f7:1a:7c:a3:37:de:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:b2:c2:e6:fa:fc:4e:7c:ff:a0:e0:dd:87:8d:da:ff:52:46:45:1f
Fingerprint (sha256): eb:f8:6b:ba:7f:66:8b:bd:97:96:52:95:6a:2c:f0:bb:ed:2a:53:88:60:e0:84:b5:55:29:32:e6:7a:b0:73:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cogitstudio.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cogitstudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cogit.studio
cogitstudio.be
cogitstudio.biz
cogitstudio.com
cogitstudio.eu
cogitstudio.fr
cogitstudio.info
cogitstudio.net
cogitstudio.org
www.cogit.studio
www.cogitstudio.be
www.cogitstudio.biz
www.cogitstudio.com
www.cogitstudio.eu
www.cogitstudio.fr
www.cogitstudio.info
www.cogitstudio.net
www.cogitstudio.org

Other certificates including the domain name cogitstudio.com

(limited to 100 certificates)
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
cogitstudio.com
www.cogit.studio
cogitstudio.com

Certificate

The complete raw certificate details for cogitstudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347631452884284606106023225337384958848550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 01:18:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 01:18:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cogitstudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785029054495222797769423432937105334329578934212761715110582087156577385341386399329947615544959515856258731682735902016938842794338203792938108322900245025553018053491350465312949624501557036007227449057261080282344743660288728818497960084192091141404378600832999243738315118383211990879536048118969315022150355162891784064346529506247220974282268035322727381538947941266664911940510990913514613518484619522251792918970984720276469303712969856199529959216078128357005698975432049938022269990581497763448697336008873191867500088759799101394949274487804848876308442814232344135305553712521970893238865740352813173851679942397624422382903080963481372725797353319611307558645205387422983579430028923344060458181021284502536993723799091940707230022905987865946929246555073165545581778423828599345267043454631194624938041029626855330378470627195868278074353504180357317920445278512008740445932775106591512056744963937568430070084958879718791494148355887121877998512013405128508558688906509179519883429176227629133987471620490350765106327193770298491440205174809411053755086568221114801542901398474311764951413116741210615162313229971984974118237689756543532304540806934104134701184894711465534996916822122416593955675701530177338052155497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9104997accc1f2f51a13b7fe3af71a7ca337deaf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogitstudio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogit.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cogitstudio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a712fa291000004030048304602210098319f268ed8d355f3ae98502e1da9b2436dc740cbe1a39edfdada96e9f2ffdc022100b13f5e068adcc57b20397a904a38364c5261e4e2d9b9498c8cfa8e3381e194b1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a712fa2bc00000403004730450220090c680c7eb23988318770d368535b08ba55832133380bbf1a5143179f9112580221009fd388a3f14d0b9de4463dd342433ea488f978c6e72c36fdcaecb6c2ec21ac22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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