news.yext.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:13:7d:72:72:36:9b:96:7c:df:1e:f4:ea:b1:45:3e:48:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.yext.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:13:7d:72:72:36:9b:96:7c:df:1e:f4:ea:b1:45:3e:48:9c
Serial Number (int): 355081256436374972543907595620553169193116
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:3b:a9:1c:7f:db:34:3b:6d:ab:c1:e9:d1:67:2b:b7:eb:07:98:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:6e:87:4b:39:3e:62:b6:e8:7b:d0:0b:c0:34:84:46:7e:25:02:9c
Fingerprint (sha256): 08:4f:c0:75:05:80:bf:4c:09:25:a8:c7:da:2d:57:42:cd:2b:35:93:ea:8a:fd:6b:0f:8e:f7:82:da:f1:26:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate news.yext.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.yext.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.yext.com

Other certificates including the domain name yext.com

(limited to 100 certificates)
agent-qa.travelers.com
dev2.streamflow.finance
sni.cloudflaressl.com
covid19.yext.com
faqs.yext.com
sni.cloudflaressl.com
grow.yext.com
*.tx1.yext.com
*.yext.com
covid19-gov.yext.com
*.yext.com
techops.yext.com
blog.catalog.fi
sni.cloudflaressl.com
app-qa.eu.yext.com
answers-texaneyecare.pagescdn.com
sni.cloudflaressl.com
news.yext.com
*.yext.com
onward.yext.com
start.yext.com
*.yext.com
events.biggestfantour.com
wiki.yext.com
sni.cloudflaressl.com
offers.yext.com
*.yext.com
covid19.yext.com
covid19-healthcare.yext.com
*.yext.com
for.yext.com
san1.yext-cdn.com
embed-answers.cority.com.pagescdn.com
yext.com
store.yext.com
start.yext.com
locations.yext.com
*.hitchhikers.dev
*.thefrabric.com
design-system.yext.com
cac-documentation.hitchhikers.yext.com
docker.jfrog-poc.office.yext.com
news.yext.com
answers-autozone.pagescdn.com
news.yext.com
sni.cloudflaressl.com
livepreviewwebsockets-qa.yext.com
events.biggestfantour.com
ssl910335.cloudflaressl.com
answers.romeospizza.com
grow.yext.com
help.yext.com
sni.cloudflaressl.com
*.interview.yext.com
*.interview.yext.com
help.yext.com
sustainability.yext.com
api.eu.yext.com
bvas.yext.com
publishers.yext.com
start.yext.com
mulesoft.farmers.yext.com
sni.cloudflaressl.com
design-system.yext.com
sni.cloudflaressl.com
*.youst.in
hitchhiker-answers.yext.com
cube.yext.com
sni.cloudflaressl.com
*.office.yext.com
physicians.florida-allergy.com
*.yext.com
plfeeds.eu.yext.com
app.eu.yext.com
*.yext.com
sni.cloudflaressl.com
help.yext.com
*.hitchhikers.dev
blog-hitchhikers.yext.com
answers-embed.reseau-stan.com.pagescdn.com
sni.cloudflaressl.com
san1.yext-cdn.com
design-system.yext.com
www.yext.com
*.hitchhikers.dev
search.yext.com
wiki.yext.com
sni.cloudflaressl.com
sni.cloudflaressl.com
amp.locations.yext.com
yext.com
ssl468786.cloudflaressl.com
*.office.yext.com
*.office.yext.com
*.yext.com
www.start.yext.com
wiki.yext.com
sni.cloudflaressl.com
app.eu.yext.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for news.yext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355081256436374972543907595620553169193116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-28 23:42:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 23:42:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.yext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796032716232775677398213679498126696351525499502093012154005499306979665386431032555893518272596087668838620343236339399333709690288908800490471537349819879574177212167758247947601967008258965446360996372703422203349334275943382155147946529708827625319024530342259389235099514023087143983329370228574268799657071882048009763317059477854972004617211626939999626756552123664521890483883679610592260333151643769919663230169815211170207143140682157180364461112932217672049134919130575717387771836208918912770010937540293520237357075110190267652750247708047707241893135732373059364923258250818213770142743339361352662159689357409013416989455644110798040741130237129457536651441487529888672528497241167719143671172862597530063475101333687128170106793162588371015225882898326328478089117490296897048522164757115409143356355006294480664328920802365904032053113123270109103437506473517105513493735683971866247712387989525113996074678332714807884386917869726092248884012986154173350991565314192682862639774033462511838002553472141414110932684340125548926296489454397913511253363516693096113209697158791108590659818192448041593554128869679266934762069125378673465559458078160525992074136523994840786972311936741522344428378205633902668228175709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc3ba91c7fdb343b6dabc1e9d1672bb7eb07989e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.yext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166bd45648000000403004730450221009971d876f106501aa6b54050b85223888ceaee9b489e462273b679c48d83c96102207e693b90f2839f20b2775ddd90e3173a8a75af223e5bacda98fb3ad4d9fa904e007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166bd4566850000040300483046022100bffcbc38e29bd6533aea68bed73a410af89d3a3d7cb7e84732961592278ff170022100c0bd84c21fed2e54c46e36336e334a020321aa964bde2c18f6685e3a87c18f09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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