*.plaid.com

Issued by R3

About this certificate

This digital certificate with serial number 04:84:69:1a:b0:78:f1:d8:33:89:2d:ef:9f:b0:c2:dd:ca:a8 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.plaid.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:69:1a:b0:78:f1:d8:33:89:2d:ef:9f:b0:c2:dd:ca:a8
Serial Number (int): 393506123679166918838955188377046744943272
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:54:9a:d7:f8:b0:e1:de:d0:7e:ec:ea:96:54:76:d0:c0:d5:62:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:91:a4:f0:89:1a:c4:27:4b:f0:ee:24:a6:04:4a:cb:53:78:1e:f9
Fingerprint (sha256): 18:9e:42:78:de:5b:cd:fb:ec:bd:b0:24:36:83:5b:b1:97:e8:36:83:6c:e4:d8:5a:90:d1:12:5d:1c:67:9a:20

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.plaid.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.plaid.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.k8s-1-cs.prod.ue1.plaid.io
*.k8s-cs.prod.ue1.plaid.io
*.plaid.com

Other certificates including the domain name plaid.com

(limited to 100 certificates)
*.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
em.plaid.com
*.plaid.com
support.plaid.com
*.plaid.com
api.dashboard.plaid.com
ac.awesomedrives.com
*.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
ac.awesomedrives.com
*.tartan.ue1.plaid.com
ja.riws.status.ricoh.com
*.plaid.com
*.prod.ue1.plaid.com
ac.awesomedrives.com
production-card.plaid.com
*.plaid.com
*.k8s-batch-2.prod.ue1.plaid.io
*.prod.ue1.plaid.com
amex-prod-api-20230127.plaid.com
consumer-portal.prod.ue1.plaid.com
*.plaid.com
api.my.plaid.com
*.plaid.com
api.dashboard.plaid.com
*.plaid.com
ac.awesomedrives.com
*.plaid.com
*.sandbox.ue1.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
api.my.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
cdn.plaid.com
support.plaid.com
tines.plaid.com
tines.zdrake.com
*.plaid.com
*.prod.ue1.plaid.com
my-testing.plaid.com
*.prod.ue1.plaid.com
euwest1a.tines.com
*.util.ue1.plaid.com
*.prod.ue1.plaid.com
api.dashboard.plaid.com
*.testing.ue1.plaid.com
ac.awesomedrives.com
api.my-sandbox.plaid.com
*.plaid.com
citi-prod.plaid.com
*.testing.ue1.plaid.com
envoy-cxp.tartan.ue1.plaid.com
production.plaid.com
ice.status.symantec.com
api.my-testing.plaid.com
api.dashboard.plaid.com
ice.status.symantec.com
*.plaid.com
production.plaid.com
ac.awesomedrives.com
envoy-cxp.sandbox.ue1.plaid.com
*.plaid.com
fin.plaid.com
fin.plaid.com
go.plaid.com
*.prod.ue1.plaid.com
development-card.plaid.com
*.plaid.com
*.plaid.com
citi-test.plaid.com
cdn.plaid.com
*.plaid.com
plogger6.plaid.com
*.testing.ue1.plaid.com
api.my-commits.plaid.com
*.plaid.com
support.plaid.com
api.my-development.plaid.com
api.dashboard.plaid.com
api.my-sandbox.plaid.com
*.prod.ue1.plaid.com
ja.riws.status.ricoh.com
*.tartan.ue1.plaid.com
k8s.plaid.com
support.plaid.com
ac.awesomedrives.com
metrics.plaid.com
ac.awesomedrives.com
*.testing.ue1.plaid.com
*.testing.ue1.plaid.com
ac.awesomedrives.com
ac.awesomedrives.com
px-integration-validator.testing.ue1.plaid.com
ja.riws.status.ricoh.com
api.plaid.com
pa-vpn2-ext.util.ue1.plaid.com

Certificate

The complete raw certificate details for *.plaid.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W6ZL3RrPbnNNbID+L6y
JETQV2YtUHk4VXcZrpipKvdOa2oRY9xliaSW+tQmsVMisp2eq3layq1liN+l7LE8
4uT80fLie2sjoJpfGBymEGaOshjCcUI6M21P6FlHHlHNwKl36T98AXPrqyy6EfiV
27DgoXNkwUea8EzR3cL+D3TVv1aynsFVkUeZGcZ2rBT8ELeu7FTyt9HQEN9p7ZLS
pWdrQAFifuXNlXRYqdGk9aus6k+lPWuAzYGi2tb1nNHF2bCQhNvqUEbPXe4HfHnM
mVs6SkCIHfEFoRYqV++gcZDYrLSvRcMZkocNyBlTspkVm4axP8TUBceRs2c+0zbv
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393506123679166918838955188377046744943272
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-14 22:11:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 22:11:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.plaid.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27953203491513222632945953158160852263390930368039377934543496371624506446929556691523069565086637340469199170767743151969118652107705402611657649992164969794582638510098344017979554409664808195841751075935443969967353089247713307966624267236186319419365862356813448452264367614436845218708064892769415565283197926125917001536238244340807027204337727801718607291602209853991676955251277492513606734072896151184931057576544748306534950099074207397819131724603851456889612210673052629681691320928713666182072454557501163269350346512881736366272718421647495513093583046026269148468759671889482034216191585839477614374871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab549ad7f8b0e1ded07eecea965476d0c0d562e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s-1-cs.prod.ue1.plaid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s-cs.prod.ue1.plaid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plaid.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181647c8b620000040300483046022100f2e5a0a1cfed3b95c38943c1e990da802e2b596280b5c5fd89fe92a1034f836d022100c130a9c4610a9174d3064ac49940be116369ab7012435968501eea0d172044c400750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181647c8b5a00000403004630440220662230806f2487a7cfcff97c453ab38b37e3023e3e8e4317efbe7066962dbd3b022054f9fe81438858f9ec6d5ae9a0eb084943eadbaa6dec82a6b03fb12cf77fe523
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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