cognate-ai.com

Issued by R3

About this certificate

This digital certificate with serial number 03:00:bd:58:26:0d:a4:cc:b1:ac:b1:99:18:fc:67:e4:3a:f1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cognate-ai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:bd:58:26:0d:a4:cc:b1:ac:b1:99:18:fc:67:e4:3a:f1
Serial Number (int): 261588539580420174157653147935895816780529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:7f:1e:86:b0:f5:99:b5:24:e7:88:7c:6d:b5:35:7c:ec:49:f1:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:a4:dc:ee:13:d6:99:86:ae:d4:f1:16:b5:b5:74:d3:19:d2:8a:2b
Fingerprint (sha256): f8:5a:6e:5c:ff:21:c6:9d:10:6c:83:8c:2f:fa:b9:61:e9:90:1c:9c:04:6d:63:a4:9e:7b:06:42:c8:60:ad:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cognate-ai.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cognate-ai.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cognate-ai.com
www.cognate-ai.com

Other certificates including the domain name cognate-ai.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cognate-ai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261588539580420174157653147935895816780529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 03:04:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 03:04:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cognate-ai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744275275316329390689665909811324927402592512516646851488092647446470566443431418104057286309529656565404691791875524483374830450025363242025408156539364750127277042295688042985366631540608891529913572776311413421646500721731737810086084795758712454922207039908015998832047493921895191594351719054885745373897425669158989406136917763087687453187135621969852745269667364680192282200013744476862236386951572302151159042902513207924584083035545145531988875012619777444295825343966537281934410550075431340482667275053731703778075084396503280190251740928825563933962037412636646269224256652271664546203201127949769103194251590418889369969478318861551152046374961741532161335465212333225140221147556147285594479134469110176106758428583001629870000742019947294227204090486235745387684899135815532467360562689454963069339660233775615413282415228426249135817324235528374228227479528197626788647517482446436393578326668600130451387291056154983764744893713822802780619110165557489330730622123603790009677682612955908962489636720265986301090648655136595534749794362860685060961807449859118523450775090092065412688995026278998119696560309088138848622419056423158687353732123498709489182360889336124157022864878498470158814939751115869216653010953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e67f1e86b0f599b524e7887c6db5357cec49f191
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognate-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cognate-ai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf18b79c90000040300483046022100c18726ee8972f1dafad943349f24e3e570358a517f4c7b6d93022d1120476668022100974951ecf12ded51988f24a347d1af6b8ba2df39a30e0358c1b5ba26c82a2def00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cf18b79fe000004030046304402202d53d416340bf32faa6a46629318aeed01f08d83c5d794a9365bcf7884c8e77a022015c9beb9142b03f6b529f1dcd5c002e056725c6414ef071bb0f6de6d54ac4be6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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