link.covaya.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:cf:8b:43:cb:2a:b8:8d:4c:67:cc:7a:27:fd:00:02:49 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=link.covaya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:cf:8b:43:cb:2a:b8:8d:4c:67:cc:7a:27:fd:00:02:49
Serial Number (int): 275904590505368951247148876462425112576585
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:9a:56:66:d8:c3:92:4b:74:fd:2f:11:cb:12:89:b6:dc:0c:05:7b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:98:ab:79:a0:de:28:fc:b3:0e:b2:a5:e4:e0:02:91:0f:ba:a5:9a
Fingerprint (sha256): 2a:85:a4:21:9d:15:dd:44:2d:ed:72:9b:b7:fa:d4:74:2b:01:1e:c7:36:60:9f:8e:a1:5a:ee:5b:58:d4:e5:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate link.covaya.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for link.covaya.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assist.cloudlogix.io
assist.cs.zohohost.com
assist.digirat.net
assist.franticllc.com
assist.iblanco.us
assist.nerdtality.com
assist.openmedpractice.com
link.covaya.com
pre.assistdomain.com
remote.data2save.com
remote.techtrone.com
remotesupport.compufutura.com
s.nyi.co
support.saanvika.in
support.singlesourceproperty.com

Other certificates including the domain name covaya.com

(limited to 100 certificates)
covaya.com
support.deepmap.ai
support.cweaindoor.org
support.sil.mobilewaretech.com
assist.kycoconsulting.com
link.covaya.com
support.covaya.com
assist.motionconnected.com
support.unidoses.com
assist.mgdesigns.co.za
assist.royalambulance.com
assist.customerconsulting.com.au
desk.peerrevue.net
remote.k.care
assist.intechtogether.com
siteguide.ghbsonline.com
join.nighthawkdata.com
support.unidoses.com
support.hystax.com
assist.kyteit.com
assist.team240.net
support.ugonnafish.com
assist.lynxtogether.com
help.amplifiedlifestyles.com
assist.ajf.cloud
assist.washco-md.net
support.ugonnafish.com
help.destination.one

Certificate

The complete raw certificate details for link.covaya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrpuEtjyNW3EwDMrztoX
6pmR2if9SVrDIFK+PzhQDyF5G0dADQ4wymJLhXm4aXWTPgl77jEWvVa1dkKzxANA
PZQ8fxlYeH9YsqkQLk6FMJ7aOIGugqCYkTtOpb48Y/2+KSWk7jK5I5oDLjjLO43i
bSDQIUsMtC++lEjgw1HvKURWJZeY52clNbrsD+GNRILwvcHMlUKM2Zq3rIV5uR8A
ds2nZmAnWbgKhZe1UE+eoHVFP0Sw2AQv3qPdOwZxI2ihd2uct4n1cgGAkTOJipXY
SDCDiAC19dXHYV1vlbW908RfRNAzSCp2if5TX5Kx9W3RIAQsllJZWXRgw+vRVbHj
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275904590505368951247148876462425112576585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-25 00:12:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-23 00:12:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'link.covaya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22562350331029236100841817004141662330026933416178111335666760011541964841456336755516686429163445335318224165801569847043357876383960397178126830234066574008138820925473557714612571636727136531867811453604379548977321126006752632122942962679805947977494915288675623470299957835138044897661951829258500776293619953109427637637770904314354346384327044129898950936575652571028747261607723412676757569835090995464233609391561096109735207567173281007752743030937347688091129560938047956556091298784401682343232368633066903928430076138437051376908298929588961887767697036470741559743586227510981981417244344858101180130117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							169a5666d8c3924b74fd2f11cb1289b6dc0c057b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.cloudlogix.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.cs.zohohost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.digirat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.franticllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.iblanco.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.nerdtality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.openmedpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.covaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre.assistdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.data2save.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.techtrone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesupport.compufutura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.nyi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.saanvika.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.singlesourceproperty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001656ea35db40000040300473045022100e5ff5eb860de2fd3fd995eecd72096b74f7f06921cc4c8a71113d20f9ec86763022013008d7b72a48110e2dbabecda152b51ee7f26b15bf5fdfab3394fb606fa5ea4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001656ea35f0b0000040300473045022100ff612de9c08c2f2798e86d60d315d11dd2ba247f292769dbdda316e396520cff02203bdf741cbe1a39606552ae21281cac8b7e3ebbdacbefd63351e08198f5150148
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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