news.yext.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e0:b0:c0:38:bb:cc:1d:00:1f:8a:a4:5e:1a:3b:66:5f:cc was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=news.yext.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:b0:c0:38:bb:cc:1d:00:1f:8a:a4:5e:1a:3b:66:5f:cc
Serial Number (int): 424907336116279960478922395341681160773580
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:ef:85:34:ef:87:31:0a:9b:c6:8a:78:a2:03:fe:2e:ad:67:5e:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dc:00:e8:6a:66:0a:a3:58:37:b1:ef:b2:3c:75:b4:85:43:16:e1:8b
Fingerprint (sha256): 08:b1:7d:9d:5a:c8:3d:cd:e3:b1:64:32:35:c3:69:46:db:46:30:13:1c:42:4b:a1:90:c9:7d:a7:1f:38:bd:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate news.yext.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for news.yext.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

news.yext.com

Other certificates including the domain name yext.com

(limited to 100 certificates)
agent-qa.travelers.com
dev2.streamflow.finance
sni.cloudflaressl.com
covid19.yext.com
faqs.yext.com
sni.cloudflaressl.com
grow.yext.com
*.tx1.yext.com
*.yext.com
covid19-gov.yext.com
*.yext.com
techops.yext.com
blog.catalog.fi
sni.cloudflaressl.com
app-qa.eu.yext.com
answers-texaneyecare.pagescdn.com
sni.cloudflaressl.com
news.yext.com
*.yext.com
onward.yext.com
start.yext.com
*.yext.com
events.biggestfantour.com
wiki.yext.com
sni.cloudflaressl.com
offers.yext.com
*.yext.com
covid19.yext.com
covid19-healthcare.yext.com
*.yext.com
for.yext.com
san1.yext-cdn.com
embed-answers.cority.com.pagescdn.com
yext.com
store.yext.com
start.yext.com
locations.yext.com
*.hitchhikers.dev
*.thefrabric.com
design-system.yext.com
cac-documentation.hitchhikers.yext.com
docker.jfrog-poc.office.yext.com
news.yext.com
answers-autozone.pagescdn.com
news.yext.com
sni.cloudflaressl.com
livepreviewwebsockets-qa.yext.com
events.biggestfantour.com
ssl910335.cloudflaressl.com
answers.romeospizza.com
grow.yext.com
help.yext.com
sni.cloudflaressl.com
*.interview.yext.com
*.interview.yext.com
help.yext.com
sustainability.yext.com
api.eu.yext.com
bvas.yext.com
publishers.yext.com
start.yext.com
mulesoft.farmers.yext.com
sni.cloudflaressl.com
design-system.yext.com
sni.cloudflaressl.com
*.youst.in
hitchhiker-answers.yext.com
cube.yext.com
sni.cloudflaressl.com
*.office.yext.com
physicians.florida-allergy.com
*.yext.com
plfeeds.eu.yext.com
app.eu.yext.com
*.yext.com
sni.cloudflaressl.com
help.yext.com
*.hitchhikers.dev
blog-hitchhikers.yext.com
answers-embed.reseau-stan.com.pagescdn.com
sni.cloudflaressl.com
san1.yext-cdn.com
design-system.yext.com
www.yext.com
*.hitchhikers.dev
search.yext.com
wiki.yext.com
sni.cloudflaressl.com
sni.cloudflaressl.com
amp.locations.yext.com
yext.com
ssl468786.cloudflaressl.com
*.office.yext.com
*.office.yext.com
*.yext.com
www.start.yext.com
wiki.yext.com
sni.cloudflaressl.com
app.eu.yext.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for news.yext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424907336116279960478922395341681160773580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 23:28:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 23:28:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'news.yext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710785135698496224689045076175896864863331783063281332770878475943615738631207880478242778224682078294118855813963582553420167085144768633429221943743078330853159803138827723718705429486798211876003199760426101823300281114498555051754290800149429050335546260809275308145934417488962019325122717556221724540100368456890156272859625059275904872518954876582074173484881787033574441508720179921419613552576042277954300293444901966649514869774912183079665182419904908609900493086446812447331405150110641262125608719412765386569946239701691190176455415040504386777043152475752310672907583817487135239246282590670548860439357406845912038845063832538996977232966651816736557317050834244208599796556567574449306829481850205530975511500558867487663255149776406195750533628144332304248522046212836514379475423300997897570060458428037349697888922575198563424053165336694879833689792037425380261012359491173069513448824490955484512369077121453032090818628070574601111589915590068841367174118950332416561347296775799325854909047135404400676604145838844469600937507681235318949889363520923644340890696242789524068660229638824405839434922869139481480680210720734134049748191230590072524835596738293706419653300110151767706583601526802259122700246069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23ef8534ef87310a9bc68a78a203fe2ead675e8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.yext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168ca8138490000040300463044022024b0a8b796610f6a10002230e78e36a01177fd27f0844b8f05eea4ac9543a8dd02203563ec68d1491fb73b0145e318f51e7911f14a36d1dfc69d0b36dc11b77cb345007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168ca8138410000040300473045022100c64b8386b3ba077fb0f331b2306b6a084a214cf000ccd879aa38b4b8a5cf38aa022009773346ea8653f040accd6112f2d9e2735e77df2a0b25273561939fc5bf062c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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