go.swimlane.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:1d:7e:8d:bd:68:29:ac:c0:28:82:ae:83:4b:61:8e:7f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.swimlane.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:1d:7e:8d:bd:68:29:ac:c0:28:82:ae:83:4b:61:8e:7f
Serial Number (int): 280772157425882283958732699050298793102975
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:e9:3d:b6:c2:50:5d:5b:0b:08:72:af:54:ff:50:b2:c0:6c:e3:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:4a:45:40:da:cf:77:e1:e5:b7:de:ab:d5:8f:e6:a5:ca:0c:88:42
Fingerprint (sha256): 41:db:52:eb:7d:72:cf:a7:c6:9b:fa:54:b1:68:ed:f8:bc:c7:5c:98:21:f6:f8:00:bf:af:b3:9e:8c:88:34:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate go.swimlane.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.swimlane.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.swimlane.com

Other certificates including the domain name swimlane.com

(limited to 100 certificates)
support.swimlane.com
go.swimlane.com
www.swimlane.com
www.swimlane.com
fdus-22.freshdesk.com
fdus-22.freshdesk.com
sgtm.swimlane.com
support.swimlane.com
swimlane.com
fdus-22.freshdesk.com
swimlane.com
fdus-22.freshdesk.com
www.swimlane.com
fdus-22.freshdesk.com
brand.swimlane.com
fdus-22.freshdesk.com
swimlane.com
www.swimlane.com
go.swimlane.com
swimlane.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
swimlane.com
go.swimlane.com
fdus-22.freshdesk.com
apphub.swimlane.com
swimlane.com
go.swimlane.com
go.swimlane.com
www.swimlane.com
support.swimlane.com
swimlane.com
swimlane.com
swimlane.com
swimlane.com
swimlane.com
sni.cloudflaressl.com
swimlane.com
www.swimlane.com
swimlane.com
www.swimlane.com
swimlane.com
staging.swimlane.com
go.swimlane.com
staging.swimlane.com
support.swimlane.com
support.swimlane.com
apphub.swimlane.com
*.swimlane.com
swimlane.com
brand.swimlane.com
www.swimlane.com
fdus-22.freshdesk.com
swimlane.com
fdus-22.freshdesk.com
swimlane.com
go.swimlane.com
fdus-22.freshdesk.com
fdus-22.freshdesk.com
swimlane.com
www.swimlane.com
support.swimlane.com
swimlane.com
apphub.swimlane.com
fdus-22.freshdesk.com
swimlane.com
fdus-22.freshdesk.com
apphub.swimlane.com
*.swimlane.com
www.swimlane.com
staging.swimlane.com
go.swimlane.com
fdus-22.freshdesk.com
fdus-22.freshdesk.com
fdus-22.freshdesk.com
fdus-22.freshdesk.com
swimlane.com
swimlane.com
fdus-22.freshdesk.com
apphub.swimlane.com
apphub.swimlane.com
swimlane.com
swimlane.com
fdus-22.freshdesk.com
swimlane.com
swimlane.com
www.swimlane.com
go.swimlane.com
fdus-22.freshdesk.com
adminsupport.maxwellhealth.com
support.swimlane.com
fdus-22.freshdesk.com
swimlane.com
fdus-22.freshdesk.com
adminsupport.maxwellhealth.com
apphub.swimlane.com
swimlane.com
brand.swimlane.com
go.swimlane.com
fdus-22.freshdesk.com

Certificate

The complete raw certificate details for go.swimlane.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280772157425882283958732699050298793102975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 05:11:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 05:11:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.swimlane.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721499954295681336277125896283941353423604000693776941900307434032854895612150698731635871575808008674983874944677122122092977836847825131812727008087582447221137545800652008982800537050775055919724447403458569279490975363209611449887993879611848866790662025143245820309002189659186399597717693609039294504587957977780131446424340153172935349498395087981103264439859367363325459842446115416619106334519641886941802225532946685888297240357138856538857218227431978228308181988770279944182354524845424513396761326399827632049816313031445343329963273387863321814761581520928788237243705874252419693186642929814408640180988733461825901889912601214826729503202877250779402867393343656979399533328901644276628127900878945617114259742141384683786073749180805743224083432336726157896097693750464994031181104864915869623668633992378986478108221159453776591740017651741135730181755116043496314977026457599693186710263063238031038778946128182924080510744228339200433545159584436352904944764148420460164470485408839860444652008462313278497692747456279193795802224671748832364945600368243794523409307398806451736305724949118130965609012874660838168235391132369841915844402156740144546819696038216893973976113080408412277453145196900295450584835643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03e93db6c2505d5b0b0872af54ff50b2c06ce364
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.swimlane.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ddd7e4213000004030047304502204cb8957e58014fca855478b5de2b16532df4c6a6ad3e0d7db65592f89de89261022100818cc6f818a6e2469ee0093ae961557348a1390d44a139918dddb6c0b916fe970075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ddd7e45ff00000403004630440220626e098193472c1af97bffc008438967c61173f6b3384cf913101a6a6127e111022030971149218665cc5c5cd0ba433257d69bbfb336edf680317f8548f5aa5f7437
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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