trends.staance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1a:26:44:36:50:48:22:32:84:48:73:60:11:a3:98:2f:65 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trends.staance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1a:26:44:36:50:48:22:32:84:48:73:60:11:a3:98:2f:65
Serial Number (int): 357347350108622289669067291171606721212261
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:09:6d:4b:04:31:c3:fd:44:d5:bd:77:e2:c4:ff:9e:ff:e7:43:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:98:be:c9:4c:1f:a9:db:89:7b:43:54:24:f3:e3:d3:30:c6:14:d6
Fingerprint (sha256): 65:83:83:90:a9:f5:82:de:21:2b:58:d9:75:a7:c3:69:b4:26:8c:ec:29:72:0c:ae:03:d7:6d:06:8e:f2:0e:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trends.staance.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trends.staance.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trends.staance.com

Other certificates including the domain name staance.com

(limited to 100 certificates)
staance.com
listen.staance.com
staance.com
api.staance.com
listen.staance.com
tls.automattic.com
compass.staance.com
trends.staance.com
hypothesis.staance.com
www.staance.com
www.staance.com
api.staance.com
staance.com
tls.automattic.com
campus.staance.com
alpha.staance.com
campus.staance.com
api2.staance.com
partner.staance.com
improve.staance.com
api2.staance.com
stuckyi.studio
www.yral.app
www.staance.com
alpha.staance.com
alpha.staance.com
api.staance.com
listen.staance.com
partner.staance.com
www.staance.com
partner.staance.com
pulse.staance.com
hypothesis.staance.com
pulse.staance.com
campus.staance.com
api.staance.com
www.staance.com
www.staance.com
staance.com
listen.staance.com
www.staance.com
staance.com
staance.com
improve.staance.com
continuum.staance.com
staance.com
trends.staance.com
continuum.staance.com
pulse.staance.com
tls.automattic.com
sni.cloudflaressl.com
i.staance.com
hypothesis.staance.com
trends.staance.com
continuum.staance.com
tls.automattic.com
hypothesis.staance.com
improve.staance.com
improve.staance.com
trends.staance.com
continuum.staance.com
listen.staance.com
api.staance.com
tls.automattic.com
tls.automattic.com
compass.staance.com
pulse.staance.com
tls.automattic.com
improve.staance.com
tls.automattic.com
tls.automattic.com
st-execution.com
continuum.staance.com
api.staance.com
compass.staance.com
alpha.staance.com
tls.automattic.com
continuum.staance.com
www.staance.com
staance.com
www.staance.com
improve.staance.com
staance.com
compass.staance.com
api.staance.com
tls.automattic.com
improve.staance.com
listen.staance.com
pulse.staance.com
campus.staance.com
www.staance.com
compass.staance.com
hypothesis.staance.com
partner.staance.com
api.staance.com
alpha.staance.com
compass.staance.com
listen.staance.com
campus.staance.com
trends.staance.com

Certificate

The complete raw certificate details for trends.staance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357347350108622289669067291171606721212261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 02:33:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 02:33:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trends.staance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887659165496356573459743603053651509389339376994616083322201735272889585592357205094218005524327645326360769985854326579067559720063573553995526514130881038773099487713127774619118935340555126809969883011402653652848675306749559797495172740311298903924732278465916584525398044050453973945593981069294839478984848068514468203183202992518223060666025895473561658882282238811843817757746262441224542485866447792981018451164678822990667252649083028233215552106934199825719439500047821035546924359984603939161373240956128544070653004058368374313724319729811259072836457064806948500280130231407538965174570777884873398167149029719024617703801721067107161041009929478044020769785658961995256864258687392348901614062693785680070320547613082570006185000546482258199258781509341179797740689711461482113658263407950963998903025977840330242085038831456835749568854833255076276562431120656087633028774308635042647170953720120843899805258602482499831880068664140260135558628216651732647056324221912710201157900898582998294053004499730409410502138447979191288545491933210150215724699523492837242872952698617631120649785204790851972392764232244219137412865342219846945637999573855922981135251546789825984904639819075790307163694986293836222094750093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9096d4b0431c3fd44d5bd77e2c4ff9effe74330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trends.staance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c9da301230000040300473045022041b147c374b361735378c623f98c240242f4b4912b488cf95c348c2f70269567022100ba8763654dab2e61d73b8a9e14249d231c360c1b51b3788f47ca79a9d6b81c7d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c9da30116000004030046304402206649e7d19e53e7b488fd027c2268d4fc8e51a41bbe6f0ab84bee7ea5370c2c1302206b74afc61be5bfe46be4587449c543b19d1721c7a70bc42bfe936f11f8ce23d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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