cognate-ai.com
Issued by R3
About this certificate
This digital certificate with serial number 03:00:bd:58:26:0d:a4:cc:b1:ac:b1:99:18:fc:67:e4:3a:f1 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cognate-ai.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:00:bd:58:26:0d:a4:cc:b1:ac:b1:99:18:fc:67:e4:3a:f1Serial Number (int): 261588539580420174157653147935895816780529
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e6:7f:1e:86:b0:f5:99:b5:24:e7:88:7c:6d:b5:35:7c:ec:49:f1:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): c8:a4:dc:ee:13:d6:99:86:ae:d4:f1:16:b5:b5:74:d3:19:d2:8a:2b
Fingerprint (sha256): f8:5a:6e:5c:ff:21:c6:9d:10:6c:83:8c:2f:fa:b9:61:e9:90:1c:9c:04:6d:63:a4:9e:7b:06:42:c8:60:ad:bd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cognate-ai.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cognate-ai.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cognate-ai.com
www.cognate-ai.com
www.cognate-ai.com
Other certificates including the domain name cognate-ai.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for cognate-ai.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAwC9WCYNpMyxrLGZGPxn5DrxMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMTAwMzA0NThaFw0yNDA0MDkwMzA0NTdaMBkxFzAVBgNVBAMT DmNvZ25hdGUtYWkuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA tm+zEDPVBbd4iYkBoYTBpDx2JE+7F4kXjS7t1orgyjRoXY5LOiA3ARMBG7G8ihpc eBzh59ZdAAJ7pZjQmhe2HmKdNdRcYOfhqOfSGl59/MyZ6KWc09w+8y/onJWrghK5 4YXSr5hXRMUC0LiUbsJaqKPiNy3rDfFtyilSXqXIg+UqUkSHSVan2tVr6aAPYPI3 F03i8rvRMzRF0fW1YZDai3qtsPRpzw9YElT6pvcbPQC6vmFPrcrH+3ICu4QXU2NW 69KjHXCE5qGx8FVT6neYaxKUFuzGheu7Z/qmpNDK1NYDrbTucAtf3cs6+OAPqSb9 ebctw4XMZcui1GayDoHRM2k1Y/wepio/DnTHB+/vRwQDOUM/mc6yB4Hm4gQ+hk5N C/VbpFAGgDjBdYbLrLSiktD0NeKCdNRLaLg8veC4e8iN10UUiHku9r2VqjICuzH9 sR+Zv+hd6g2DqMqdlHThTN7oHEZZsnSE3fQZizw3gDHWn4KmC/BClUfhqfDkloiv mENHtBgw+xC57+TDEdFULab3PIR46oqa8G373GrlBUHmkV1m5HHIYtl/5eyULITd auyxCHTeTfINKuSoSQWEj8eBVOY7c8jPHaLZjK7ZoKZTxSJ8Ff7ykVdA9I8juQUw r7NBomwCrJUGPcBx9FIycoJqvra1f1n/1DPb0ow9aAkCAwEAAaOCAiQwggIgMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAdBgNVHQ4EFgQU5n8ehrD1mbUk54h8bbU1fOxJ8ZEwHwYDVR0j BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6 Ly9yMy5pLmxlbmNyLm9yZy8wLQYDVR0RBCYwJIIOY29nbmF0ZS1haS5jb22CEnd3 dy5jb2duYXRlLWFpLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB 1nkCBAIEgfUEgfIA8AB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX AAABjPGLeckAAAQDAEgwRgIhAMGHJu6JcvHa+tlDNJ8k4+VwNYpRf0x7bZMCLREg R2ZoAiEAl0lR7PEt7VGYjySjR9Gva4ui3zmjDgNYwbW6JsgqLe8AdQB2/4g/Crb7 lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYzxi3n+AAAEAwBGMEQCIC1T1BY0 C/MvqmpGYpMYru0B8I2DxdeUqTZbz3iEyOd6AiAVyb65FCsD9rUp8dzVwALgVnJc ZBTvBxuw9t5tVKxL5jANBgkqhkiG9w0BAQsFAAOCAQEAlqmRM+jnKGhDJnFUAygH YzI6xJG1YJ8CidwtY4XCmF5DOIPYPPktNYF8iNc8aFBuyAXIB03zYbXHKzr68/3A sR1sguuCezZQcrFAp8o+/yDeCm8GneabUSy5fbBM0PFykS0Uf6oF/14wHpJ2LUmi vwak9feUH1eaO1LNkHAcmZp3nE9O3Oj/UCUIez9qIoD8kwGd4kom12ABoi7oRUol ds+sS69/Icz4AhHO3sJrNUaV0Te0TousLkA+Q/pWIKGIoTh1BqO4Mnica5A+KPSy c+5K9A4QJaKx+HPh9crMZCd4oUu7FnkpVg3hjfsQDz0urIqmhOfLPo7UrVOJfOjt vA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtm+zEDPVBbd4iYkBoYTB pDx2JE+7F4kXjS7t1orgyjRoXY5LOiA3ARMBG7G8ihpceBzh59ZdAAJ7pZjQmhe2 HmKdNdRcYOfhqOfSGl59/MyZ6KWc09w+8y/onJWrghK54YXSr5hXRMUC0LiUbsJa qKPiNy3rDfFtyilSXqXIg+UqUkSHSVan2tVr6aAPYPI3F03i8rvRMzRF0fW1YZDa i3qtsPRpzw9YElT6pvcbPQC6vmFPrcrH+3ICu4QXU2NW69KjHXCE5qGx8FVT6neY axKUFuzGheu7Z/qmpNDK1NYDrbTucAtf3cs6+OAPqSb9ebctw4XMZcui1GayDoHR M2k1Y/wepio/DnTHB+/vRwQDOUM/mc6yB4Hm4gQ+hk5NC/VbpFAGgDjBdYbLrLSi ktD0NeKCdNRLaLg8veC4e8iN10UUiHku9r2VqjICuzH9sR+Zv+hd6g2DqMqdlHTh TN7oHEZZsnSE3fQZizw3gDHWn4KmC/BClUfhqfDkloivmENHtBgw+xC57+TDEdFU Lab3PIR46oqa8G373GrlBUHmkV1m5HHIYtl/5eyULITdauyxCHTeTfINKuSoSQWE j8eBVOY7c8jPHaLZjK7ZoKZTxSJ8Ff7ykVdA9I8juQUwr7NBomwCrJUGPcBx9FIy coJqvra1f1n/1DPb0ow9aAkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 261588539580420174157653147935895816780529 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 03:04:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 03:04:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cognate-ai.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744275275316329390689665909811324927402592512516646851488092647446470566443431418104057286309529656565404691791875524483374830450025363242025408156539364750127277042295688042985366631540608891529913572776311413421646500721731737810086084795758712454922207039908015998832047493921895191594351719054885745373897425669158989406136917763087687453187135621969852745269667364680192282200013744476862236386951572302151159042902513207924584083035545145531988875012619777444295825343966537281934410550075431340482667275053731703778075084396503280190251740928825563933962037412636646269224256652271664546203201127949769103194251590418889369969478318861551152046374961741532161335465212333225140221147556147285594479134469110176106758428583001629870000742019947294227204090486235745387684899135815532467360562689454963069339660233775615413282415228426249135817324235528374228227479528197626788647517482446436393578326668600130451387291056154983764744893713822802780619110165557489330730622123603790009677682612955908962489636720265986301090648655136595534749794362860685060961807449859118523450775090092065412688995026278998119696560309088138848622419056423158687353732123498709489182360889336124157022864878498470158814939751115869216653010953 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e67f1e86b0f599b524e7887c6db5357cec49f191 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognate-ai.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cognate-ai.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf18b79c90000040300483046022100c18726ee8972f1dafad943349f24e3e570358a517f4c7b6d93022d1120476668022100974951ecf12ded51988f24a347d1af6b8ba2df39a30e0358c1b5ba26c82a2def00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cf18b79fe000004030046304402202d53d416340bf32faa6a46629318aeed01f08d83c5d794a9365bcf7884c8e77a022015c9beb9142b03f6b529f1dcd5c002e056725c6414ef071bb0f6de6d54ac4be6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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