gorgias.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9b:2c:58:df:1c:36:9d:b1:19:a8:90:b0:d9:cc:a1:4b:f5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gorgias.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9b:2c:58:df:1c:36:9d:b1:19:a8:90:b0:d9:cc:a1:4b:f5
Serial Number (int): 401251858078937168779495860952146309630965
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:6b:2e:96:62:f9:f9:b5:5a:00:02:83:5b:38:b9:5c:3c:88:d6:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:7a:f4:ca:19:f4:2d:9c:12:ca:0a:f2:f5:1a:9b:fb:30:ab:5e:be
Fingerprint (sha256): 10:ad:0c:df:98:c1:d4:f3:ab:70:1d:05:94:6d:ac:d6:56:10:2d:f9:77:36:33:fb:6c:1a:e0:8e:07:fe:00:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gorgias.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gorgias.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gorgias.com
gorgias.com

Other certificates including the domain name gorgias.com

(limited to 100 certificates)
agencies.gorgias.com
bdr.gorgias.com
community.gorgias.com
gorgias.com
marketplace.partnerpage.io
updates.gorgias.com
conversations.gorgias.com
gorgias.com
*.marketplacebydesign.site
sni157250.cloudflaressl.com
docs.gorgias.com
wwww.gorgias.com
updates.gorgias.com
woocommerce.service.gorgias.com
docs.gorgias.com
migration.gorgias.com
design.gorgias.com
updates.gorgias.com
design.gorgias.com
woocommerce.service.gorgias.com
pingdom-check.acmeapi.co
bdr.gorgias.com
marketplace.partnerpage.io
conversations.gorgias.com
bdr.gorgias.com
updates.gorgias.com
gorgias.com
gorgias.com
academy.gorgias.com
*.marketplacebydesign.site
design.gorgias.com
marketplace.partnerpage.io
gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
design.gorgias.com
gorgias.com
marketplace.partnerpage.io
sni157250.cloudflaressl.com
events-ingestion.services.gorgias.com
gorgias.com
wwww.gorgias.com
*.openchannel.site
gorgias.com
wwww.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
www.gorgias.com
gorgias.com
gorgias.com
billing.gorgias.com
*.marketplacebydesign.site
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
shopper.gorgias.com
sni157250.cloudflaressl.com
conversations.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
gorgias.com
gorgias.com
agency-directory.teikametrics.com
*.marketplacebydesign.site
events-ingestion.services.gorgias.com
sni157250.cloudflaressl.com
*.openchannel.site
wwww.gorgias.com
api.gorgias.com
banknorthstatus.mambu.com
academy.gorgias.com
wwww.gorgias.com
pingdom-check.acmeapi.co
wwww.gorgias.com
sni157250.cloudflaressl.com
tiktok.service.gorgias.com
sni157250.cloudflaressl.com
link.gorgias.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
storybook.gorgias.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
partner.gorgias.com
sni157250.cloudflaressl.com
www.gorgias.com

Certificate

The complete raw certificate details for gorgias.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aU1IJAQojGhtPdKzesT
IM0obw8XNn8uWYthwEhhxqH0opZ5xTM1fsWCZunQp/l8DpiqYVN8G+ODBWg+wLye
RKXg5lGhy6qcJUiXyH1hd0ng4ZhUoNx+//57jiYuCi3P0JEL1RcwBliGbCCX8Xr1
hY6PryZjj4wz/9K6YgB7FDcV+1BsuWdk/rREbaElF+/G7C7SrrxBE2x3igYa8yAp
PkEYu8D9srLEyTJcbIltaEGXFNPHThFuEvrlM3h2fSjrdDQHaDbbb5kfnS5zJlY9
m6vS3/jn8kxAqjHHbbrPubYefcYG5lKrKwOyo1pAvQ4yesrXXODY3ZIcNrdj/j0i
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401251858078937168779495860952146309630965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 11:00:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 11:00:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gorgias.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27475179046061568621118202626480661423902254767185704919670678152307180215673982515334020993804764524081765730029310317886349650736885827437601713564802302563776063909948071386426732783666470749046244383739391378854323712382739054448476075819605027595220571608742212125608998204107352770785732500951398355213439759745728846533308961072103281088964660160944229514282723173374738035975594658788789460007363231199499380407852849175971131650326795575073733340600701376035579532316201384256197617995786735789961503620028407971911095234013762250317156776237122058179076495181045899760826635695706493114343529932276218274321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b6b2e9662f9f9b55a0002835b38b95c3c88d62b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorgias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorgias.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b8fe7d9370000040300473045022100febb5bf8ac509146065c16932332c94b0a06390cc70081b341971a5d72718f360220147a42164032888eba64454709a0dc1a82f87359f6c827e7545c75fe4521045f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b8fe7dae00000040300473045022002e4f2ea907269d5e59e5ba34e0a173c77aed4b4400796618556ffbfe34d8bd4022100bdf43583d9dd2a4951bd5e7c955d431b0516723c1a3e8646b1a0499149a64fc3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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