techops.yext.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5f:be:68:83:ff:a1:0b:7c:fb:12:78:2e:39:43:f7:fc:58 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=techops.yext.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:be:68:83:ff:a1:0b:7c:fb:12:78:2e:39:43:f7:fc:58
Serial Number (int): 293916778648090996101293768169967188442200
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:cc:a2:63:39:27:65:5b:9b:7e:30:e9:95:24:05:a1:6b:b8:99:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:c8:4e:9c:4b:52:34:17:7f:e8:76:f7:c5:91:b5:83:00:7a:25:2b
Fingerprint (sha256): 02:03:3f:0a:13:ff:28:9a:fa:4a:87:0d:c6:64:c0:52:cb:f4:e6:0d:a7:ea:2b:d3:6f:77:2f:aa:81:36:86:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate techops.yext.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for techops.yext.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

techops.yext.com

Other certificates including the domain name yext.com

(limited to 100 certificates)
agent-qa.travelers.com
dev2.streamflow.finance
sni.cloudflaressl.com
covid19.yext.com
faqs.yext.com
sni.cloudflaressl.com
grow.yext.com
*.tx1.yext.com
*.yext.com
covid19-gov.yext.com
*.yext.com
techops.yext.com
blog.catalog.fi
sni.cloudflaressl.com
app-qa.eu.yext.com
answers-texaneyecare.pagescdn.com
sni.cloudflaressl.com
news.yext.com
*.yext.com
onward.yext.com
start.yext.com
*.yext.com
events.biggestfantour.com
wiki.yext.com
sni.cloudflaressl.com
offers.yext.com
*.yext.com
covid19.yext.com
covid19-healthcare.yext.com
*.yext.com
for.yext.com
san1.yext-cdn.com
embed-answers.cority.com.pagescdn.com
yext.com
store.yext.com
start.yext.com
locations.yext.com
*.hitchhikers.dev
*.thefrabric.com
design-system.yext.com
cac-documentation.hitchhikers.yext.com
docker.jfrog-poc.office.yext.com
news.yext.com
answers-autozone.pagescdn.com
news.yext.com
sni.cloudflaressl.com
livepreviewwebsockets-qa.yext.com
events.biggestfantour.com
ssl910335.cloudflaressl.com
answers.romeospizza.com
grow.yext.com
help.yext.com
sni.cloudflaressl.com
*.interview.yext.com
*.interview.yext.com
help.yext.com
sustainability.yext.com
api.eu.yext.com
bvas.yext.com
publishers.yext.com
start.yext.com
mulesoft.farmers.yext.com
sni.cloudflaressl.com
design-system.yext.com
sni.cloudflaressl.com
*.youst.in
hitchhiker-answers.yext.com
cube.yext.com
sni.cloudflaressl.com
*.office.yext.com
physicians.florida-allergy.com
*.yext.com
plfeeds.eu.yext.com
app.eu.yext.com
*.yext.com
sni.cloudflaressl.com
help.yext.com
*.hitchhikers.dev
blog-hitchhikers.yext.com
answers-embed.reseau-stan.com.pagescdn.com
sni.cloudflaressl.com
san1.yext-cdn.com
design-system.yext.com
www.yext.com
*.hitchhikers.dev
search.yext.com
wiki.yext.com
sni.cloudflaressl.com
sni.cloudflaressl.com
amp.locations.yext.com
yext.com
ssl468786.cloudflaressl.com
*.office.yext.com
*.office.yext.com
*.yext.com
www.start.yext.com
wiki.yext.com
sni.cloudflaressl.com
app.eu.yext.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for techops.yext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293916778648090996101293768169967188442200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 23:41:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 23:41:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'techops.yext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896017068903419719317920784003462712196672010992546189431530009989227063231639017738988379830883199940850162541055810427141167530886711929625129657231397734508349408277168544603045882534775183409042755932047207186371130346896767824050309697665840164225643069086273872357663769050522340592805607491328660847105896885604236414842436375707282360513283361741120473355869678845658162575328099653901347046792000574509693400932359211402098882991358101140150356978625601689103796426035515992107077364053792787325420744244901061249568129387593044497982524640017013041882059553826831684354849439170952203917414774279761175364206917886388793787951918508090933131067130150782073589527224336504031148625406167916046505682539958470051085028590784447759257080853587183985141571579433124369433228320484599198855087460766227060548055152102975173328178130784748789662464586453715955458395948214830157347943926424151914471474910654563920998432878621395640483474447668597352885632266082549085741616878113767630692892118692643578046956730578607034132760859016152893197076137641244991773413029420289726634445734439927767118013080809028962523245739764079625615745971064409959052994955903371480006839466376289490422828600994109571282354437257095434433947569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7cca2633927655b9b7e30e9952405a16bb8996b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techops.yext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd593df1a0000040300483046022100f29873d30bf0506303787caddf12e47f513a7dc91452fc25eec6f04fa5f88875022100a2cb0a0ba2a0d34d6cedcd2d4d4399b86919e1e3a1894ea9d2546e9b911dfcf800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bd593df6000000403004830460221009194c1e7b9d16c2368a7ce3da255977cb13d2c273ff97af6384ac7a13f6eb4a4022100e5339f257462363851bd9da9625292a0dde91687e4d20d7709830137f5835fa9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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