go.asana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:7e:3c:fd:cf:21:6f:d1:3b:99:c5:9e:84:7a:b4:1e:99 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.asana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:7e:3c:fd:cf:21:6f:d1:3b:99:c5:9e:84:7a:b4:1e:99
Serial Number (int): 302678823605854913057073067534696259526297
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:1a:ad:c9:9f:ef:ea:4e:7c:f1:62:28:19:ed:87:1f:b1:67:51:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:f7:68:a6:73:47:ab:1c:7b:4f:ef:0a:47:9a:57:b9:3a:01:ba:25
Fingerprint (sha256): 01:05:77:b7:0f:11:e2:87:e8:9e:a1:c0:a0:df:98:6d:4d:08:3b:82:af:84:eb:4a:01:82:d8:7a:57:93:94:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate go.asana.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.asana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aboutdeloitteconnect.com
ceoportal.deloitte.com
deloittegreenhouse.deloitte.com
develop.deloitte.com
engage.deloitte.com
go.asana.com
hrtech.deloitte.com
inside.att.jobs
inside.covance.com
jordankersten.com
learning.appian.com
solutions.inteliquent.com
stories.supercell.com
usrecruiting.deloitte.com
www.eventbriteguides.com
www.leverhq.com
z4th.com

Other certificates including the domain name asana.com

(limited to 100 certificates)
hello.asana.com
dns-vetting1b.map.fastly.net
partnerlearning.asana.com
dns-vetting1b.map.fastly.net
govcloud-status.elastic.co
dns-vetting1m.map.fastly.net
*.beta-us1-asana-exp-cell100-238a3931.app.asana.com
t.ssl.fastly.net
leapfrog-ssl-56.gcs-web.com
academy.asana.com
leapfrog-ssl-56.gcs-web.com
bistatus.mplatform.ch
kubeville000.asana.com
go.asana.com
share.asana.com
leapfrog-ssl-56.gcs-web.com
labpages.braze.com
webhooks.revenue.asana.com
dns-vetting1b.map.fastly.net
t-antenna.asana.com
wavelength.asana.com
*.prod-internal-internal.app.asana.com
t.ssl.fastly.net
hello.asana.com
godaddy-status.elastic.co
advisors.asana.com
govcloud-status.elastic.co
sales.asana.com
shop.asana.com
shop.asana.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
forum.asana.com
prod-au1.app.asana.com
t-antenna.asana.com
dns-vetting1j.map.fastly.net
wavelength.asana.com
statuspage.io
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
gtm-analytics.asana.com
customer-test.ssl.fastly.net
sepsbe.status.symantec.com
sepsbe.status.symantec.com
customer-test.ssl.fastly.net
aproposalfrom.freeman.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
gdrive.asana.com
wavelength.asana.com
customer-test.ssl.fastly.net
go.asana.com
prod-eu1.app.asana.com
*.prod-prod-prod-us1-prod.app.asana.com
customer-test.ssl.fastly.net
dns-vetting1j.map.fastly.net
partnerlearning.asana.com
partnerportal.kornferry.com
partnerlearning.asana.com
aproposalfrom.freeman.com
customer-test.ssl.fastly.net
dns-vetting1j.map.fastly.net
*.beta-us1-asana-cell01-0b7a99d5.app.asana.com
customer-test.ssl.fastly.net
labplaybooks.braze.com
forum.asana.com
t.ssl.fastly.net
t-antenna.asana.com
hello.asana.com
dns-vetting1b.map.fastly.net
govcloud-status.elastic.co
eng.asana.com
dns-vetting1b.map.fastly.net
t.ssl.fastly.net
value.kpmg.ch
t-antenna.asana.com
blog.asana.com
t.ssl.fastly.net
certifiedpros.asana.com
dns-vetting1b.map.fastly.net
community.asana.com
b2-alt.shared.global.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
*.asana.biz
advisors.asana.com
dns-vetting1m.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1j.map.fastly.net
customer-test.ssl.fastly.net
b2-alt.shared.global.fastly.net
customer-test.ssl.fastly.net
space.adlittle.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
wavelength.asana.com
portal.kearney.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
t.ssl.fastly.net

Certificate

The complete raw certificate details for go.asana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MgS2XQ0GoKtwD7UYITu
TWJnCF3thkfs4St5gflE4g88mTFZRowbrILkdxm9sBwAWNNmzf82urDmAkgSo+lE
SSt5vb0SnhKJNRW13PvAz/qwqpRg2VKptBjEbL1cbius5Zy2ywpWt4Dr+mexvfOE
Qq3UPKpyTZtpCw62ASHhZhD4e0OsY4JDGMNxYxjAhfI0vQaLTLdoc/XN8qGpUuiL
l2luJpgiwGHbWKyVeo/48AR+zsRWE8jh8bvo1UazE9MALnJpmxX0/MSzd/0JbxIF
LWJR5S+kXA3Ct7CC7u0JUIuFkRzlKIElNJKAzOH+KSJsZLDkoM4Z11CC2EhFBPjd
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302678823605854913057073067534696259526297
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-07 00:13:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-05 00:13:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.asana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27871087076881592230275635062920101121435996508147403794900503906114485323604913994671016187646247966186569938689899258428433018043044854217949373599909407444805293046195996185780282204398654469158378619183564696222933949213316580464405914161818000144280652718684732113810615675382300885508002252159973477210493701291961135225831112254854048293316688102742008476607471147714001478786649968461233391767979372822637687616585717975766403806084747978169505165510920494896923487312047629784839240087908220317685480404998696595396936810316642168280720864207139106483036960092654017886328845265405756108649313534807352335771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							411aadc99fefea4e7cf1622819ed871fb167514f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutdeloitteconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceoportal.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deloittegreenhouse.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'develop.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.asana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrtech.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.att.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.covance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordankersten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.appian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.inteliquent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories.supercell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usrecruiting.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eventbriteguides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leverhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z4th.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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