lp.dnnsoftware.com

- HubSpot, Inc. -

Issued by CloudFlare Inc RSA CA-1

About this certificate

This digital certificate with serial number 03:63:ee:0b:11:d9:aa:7c:03:24:11:da:36:fe:5c:bb was issued on by CloudFlare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HubSpot, Inc.

Organization: HubSpot, Inc.
State / Province: MA
Locality: Cambridge
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:ee:0b:11:d9:aa:7c:03:24:11:da:36:fe:5c:bb
Serial Number (int): 4506549466869539468148472481325145275
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3e:97:da:9c:dd:17:42:e8:63:80:92:62:ab:2a:79:50:2b:f6:c0:94
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0

Fingerprint (sha1): 50:0c:e1:09:62:00:89:77:60:04:cb:cf:ca:b2:c3:4f:b7:15:9c:d3
Fingerprint (sha256): 2d:b9:cc:ef:27:74:13:4f:28:ed:63:f5:fb:fd:eb:9b:40:96:91:d2:4a:c6:fe:7c:0e:27:e8:e9:d1:13:47:96

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl

Check the revocation status for certificate lp.dnnsoftware.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lp.dnnsoftware.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lp.dnnsoftware.com

Other certificates including the domain name dnnsoftware.com

(limited to 100 certificates)
ssl2740.cloudflare.com
support.engineyard.com
ssl375316.cloudflaressl.com
sni240237.cloudflaressl.com
lp.dnnsoftware.com
status.biznessapps.com
sni240237.cloudflaressl.com
support.versata.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
status.accept360.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
ssl375314.cloudflaressl.com
ssl375316.cloudflaressl.com
support.engineyard.com
sni.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
*.dnnsoftware.com
ssl278060.cloudflaressl.com
ssl375316.cloudflaressl.com
ssl375316.cloudflaressl.com
aliases.ignitetech.com
sni240237.cloudflaressl.com
ssl278062.cloudflaressl.com
sni240237.cloudflaressl.com
support.crossover.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
ssl278061.cloudflaressl.com
status.biznessapps.com
sni240237.cloudflaressl.com
em.dnnsoftware.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
ssl278060.cloudflaressl.com
ssl278062.cloudflaressl.com
blog.dnnsoftware.com
supportsurvey.cardinal-mark.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
support.infinio.com
sni240237.cloudflaressl.com
sni.cloudflaressl.com
ssl375315.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
aliases.ignitetech.com
ssl375316.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
lp.dnnsoftware.com
aliases.ignitetech.com
ssl278060.cloudflaressl.com
ssl278062.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
*.dnnsoftware.com
ssl375316.cloudflaressl.com
sni240237.cloudflaressl.com
*.dnnsoftware.com
ssl375316.cloudflaressl.com
ssl278062.cloudflaressl.com
ssl375316.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
em.dnnsoftware.com
support.engineyard.com
supportsurvey.cardinal-mark.com
supportsurvey.cardinal-mark.com
classichelp.kayako.com
ssl375316.cloudflaressl.com
sni240237.cloudflaressl.com
ssl278060.cloudflaressl.com
*.dnnsoftware.com
classichelp.kayako.com
supportsurvey.versata.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
ssl278062.cloudflaressl.com
support.engineyard.com
sni240237.cloudflaressl.com
lp.dnnsoftware.com
sni240237.cloudflaressl.com
ssl375314.cloudflaressl.com
lp.dnnsoftware.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com
supportsurvey.zephyrtel.com
ssl375314.cloudflaressl.com
sni240237.cloudflaressl.com
ssl375316.cloudflaressl.com
sni240237.cloudflaressl.com
ssl375316.cloudflaressl.com
sni240237.cloudflaressl.com
sni240237.cloudflaressl.com

Certificate

The complete raw certificate details for lp.dnnsoftware.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHs+fVcDgMpxRNJiacN5
vJtiObzhw89NCw5h+tkwb+o4RgK5LyYdBJ98SbdpnpRL0efnwNm+N8Yan8uEZtn8
bbn2mHJxf/afAjTWFe0to4HDCRrHASA7CPObkLLE4RCD+q3HvXgAafntrTvJci4J
LxyV4J6YW3s9PasOjxi2Ocz+rcfJrDgCScDE9oDcHCwldh/RTgP4PtfGwDUTM4iQ
GNVogQYamJiVX3PP7ZcCr0g9ZXem7ZpJNS8QtKIfsxCHd6SW/Xqy1VZ6TxssjamE
W6nBwpE2tg5OExZ2C0XzHKriUpB2qDlapB9NhnQgZiNxSS2KuNfEV9p8xwmuLQPj
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4506549466869539468148472481325145275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HubSpot, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lp.dnnsoftware.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21268809165100553220704110846271119762273262815829172658186800141381128657509145032221327019296663163306227527796421516308601635001237661900006867846331670247988242287068977266912262397137116260843024636800010405011782762706895734619293038000311507828217569817184359468832053822585831119153411100042990396788791389299125701400329275860043564091868514959173870393928540193140459591911662252074886136079910766050738863772976566946403030028376585617607250439468333445754533206938600399015255023288691973367025673673901170053314944861928112811251563580826369365905578795669018440401602606986071395776615020574860237857709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e97da9cdd1742e863809262ab2a79502bf6c094
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.dnnsoftware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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