tiktok.service.gorgias.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:de:c3:47:e0:25:08:b8:be:dd:c0:45:8b:60:c5:b1:0f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tiktok.service.gorgias.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:de:c3:47:e0:25:08:b8:be:dd:c0:45:8b:60:c5:b1:0f
Serial Number (int): 379710941687607704128504947376335261905167
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 86:f8:4b:c9:bb:8d:0b:6e:b3:10:9c:41:9f:0e:77:eb:61:0d:1f:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:f2:3a:74:95:aa:98:7a:29:65:66:8a:cf:32:4e:75:ae:7a:78:dd
Fingerprint (sha256): 16:c3:35:c9:ac:f2:35:aa:b8:ba:c2:f9:55:06:b3:ed:0b:51:d5:82:21:88:10:b9:0e:0f:38:62:71:47:e1:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tiktok.service.gorgias.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tiktok.service.gorgias.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tiktok.service.gorgias.com
tiktok.service.gorgias.com

Other certificates including the domain name gorgias.com

(limited to 100 certificates)
agencies.gorgias.com
bdr.gorgias.com
community.gorgias.com
gorgias.com
marketplace.partnerpage.io
updates.gorgias.com
conversations.gorgias.com
gorgias.com
*.marketplacebydesign.site
sni157250.cloudflaressl.com
docs.gorgias.com
wwww.gorgias.com
updates.gorgias.com
woocommerce.service.gorgias.com
docs.gorgias.com
migration.gorgias.com
design.gorgias.com
updates.gorgias.com
design.gorgias.com
woocommerce.service.gorgias.com
pingdom-check.acmeapi.co
bdr.gorgias.com
marketplace.partnerpage.io
conversations.gorgias.com
bdr.gorgias.com
updates.gorgias.com
gorgias.com
gorgias.com
academy.gorgias.com
*.marketplacebydesign.site
design.gorgias.com
marketplace.partnerpage.io
gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
design.gorgias.com
gorgias.com
marketplace.partnerpage.io
sni157250.cloudflaressl.com
events-ingestion.services.gorgias.com
gorgias.com
wwww.gorgias.com
*.openchannel.site
gorgias.com
wwww.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
gorgias.com
www.gorgias.com
gorgias.com
gorgias.com
billing.gorgias.com
*.marketplacebydesign.site
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
sni157250.cloudflaressl.com
gorgias.com
gorgias.com
gorgias.com
sni157250.cloudflaressl.com
gorgias.com
shopper.gorgias.com
sni157250.cloudflaressl.com
conversations.gorgias.com
wwww.gorgias.com
sni157250.cloudflaressl.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
gorgias.com
gorgias.com
agency-directory.teikametrics.com
*.marketplacebydesign.site
events-ingestion.services.gorgias.com
sni157250.cloudflaressl.com
*.openchannel.site
wwww.gorgias.com
api.gorgias.com
banknorthstatus.mambu.com
academy.gorgias.com
wwww.gorgias.com
pingdom-check.acmeapi.co
wwww.gorgias.com
sni157250.cloudflaressl.com
tiktok.service.gorgias.com
sni157250.cloudflaressl.com
link.gorgias.com
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
pingdom-check.acmeapi.co
storybook.gorgias.com
sni157250.cloudflaressl.com
pingdom-check.acmeapi.co
partner.gorgias.com
sni157250.cloudflaressl.com
www.gorgias.com

Certificate

The complete raw certificate details for tiktok.service.gorgias.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUX06vv2NzoykhZAYKCf
iztjIw5jtOivN4mzwe4z6iEIbn3kNOlmG+wUn033wXNsgoWzFKPQJb3/9j819Tpj
JM6HVChp3MeqRxy1Y/MIwMLlmTlmZPHlTbh5qoJbVOeOyC9iTAPbKIt/GmX80Kn5
rVSKbnT+MjQbG/Om21wJ0dg+lN7wdpPPV+pqyaJRLnJUa0X+7bPhHJ2rg2Yme1q7
Vs+oEq0q1s/BAWBXheYAQ93vn07knloXcgX+kj/kA4RXTWOv1W53c4gnpz1ngQHS
EWi4mwrK+TtHBSOneBBNl9RAxmrkCzcoQIX2t52nrDLZ4ewi3nuPgGjZNRYVLJDd
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379710941687607704128504947376335261905167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 12:46:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 12:46:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tiktok.service.gorgias.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22378676918695327104453651857328924992531793203655348745193109226189704079786253883911246370800604652452950927438800642936507010060736198786289676093913101844311881828862984135406442559906434300955345355579169344046991689410734422902843175881927415757227381037631800246849554799651598793906942853304279722657158721969940384529680784145735760862683355290608769158997635106863620105036119835762897941076625772654029928646429190551612627417825510716411610379627477850514424103697530768498925880354518885890451874201651156937664546775364776451059200194232144482537333956750576386654817041623217778754215144783563140947381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86f84bc9bb8d0b6eb3109c419f0e77eb610d1fe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiktok.service.gorgias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.service.gorgias.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b85fc50700000040300473045022100f5e6311a29278d5991c6b6e90620624cf972edad557222b829e3c71b1f81b91f022058f1e72e98daba39f55ca589a41665652771fe52cc13fd0d1242afe60f67da5d007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b85fc5078000004030046304402205ced471e91a5ad8972af1383291ae2d966c1b7ae50a3155a6189ef2ce50e9d560220172261934382042060afc8b3eb8e951927be1089e7b43b5d19fd52414331eb9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00119eb45a830d1c67d51ac718097c9e5940552542ba62b3fc168381ce19bee0a4c85f047faf37d62c3db77d8178fbeb6a73580cf7d2cdb1e630a2da9ada6e243f676e0d6a065da69a8f10f650b78ed33ecdd2223b05b61d7198809d493847726cbf2725df057d642fecde98fa7b94a5f6486cc02b8f05587c36de941a6bf24c2108381f364ab3206ee24779249e9af98d8bf31ed50876f6a35891ee6f9f3e5ed1c04e074f68826db4821682dff4b7377a7ff9504b045d46134d05558060490a729800ba3ff924e06322cca9890c0f8513b52ae3f442ba1ac4917c75ad6d8f3a3396c2c616047a631746b6291a391dbe5075643c317edbdd2949be4f41b3717233