www.staance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:e2:87:de:4f:17:dd:cc:b8:e6:63:8b:2e:05:e8:10:f1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.staance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:e2:87:de:4f:17:dd:cc:b8:e6:63:8b:2e:05:e8:10:f1
Serial Number (int): 261978251158286314736244492364116977520881
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:1a:86:ed:63:48:30:f2:96:76:05:49:65:df:cd:66:47:46:b6:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:54:dd:92:dc:69:bd:26:75:c0:ca:b9:3c:4d:e4:38:62:24:f2:2e
Fingerprint (sha256): 85:d2:be:04:85:f9:13:81:07:f3:64:c1:c5:06:de:2f:f9:7d:63:e6:28:b4:9f:b5:0d:91:60:f1:b1:5f:47:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.staance.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.staance.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staance.com
www.staance.com

Other certificates including the domain name staance.com

(limited to 100 certificates)
staance.com
listen.staance.com
staance.com
api.staance.com
listen.staance.com
tls.automattic.com
compass.staance.com
trends.staance.com
hypothesis.staance.com
www.staance.com
www.staance.com
api.staance.com
staance.com
tls.automattic.com
campus.staance.com
alpha.staance.com
campus.staance.com
api2.staance.com
partner.staance.com
improve.staance.com
api2.staance.com
stuckyi.studio
www.yral.app
www.staance.com
alpha.staance.com
alpha.staance.com
api.staance.com
listen.staance.com
partner.staance.com
www.staance.com
partner.staance.com
pulse.staance.com
hypothesis.staance.com
pulse.staance.com
campus.staance.com
api.staance.com
www.staance.com
www.staance.com
staance.com
listen.staance.com
www.staance.com
staance.com
staance.com
improve.staance.com
continuum.staance.com
staance.com
trends.staance.com
continuum.staance.com
pulse.staance.com
tls.automattic.com
sni.cloudflaressl.com
i.staance.com
hypothesis.staance.com
trends.staance.com
continuum.staance.com
tls.automattic.com
hypothesis.staance.com
improve.staance.com
improve.staance.com
trends.staance.com
continuum.staance.com
listen.staance.com
api.staance.com
tls.automattic.com
tls.automattic.com
compass.staance.com
pulse.staance.com
tls.automattic.com
improve.staance.com
tls.automattic.com
tls.automattic.com
st-execution.com
continuum.staance.com
api.staance.com
compass.staance.com
alpha.staance.com
tls.automattic.com
continuum.staance.com
www.staance.com
staance.com
www.staance.com
improve.staance.com
staance.com
compass.staance.com
api.staance.com
tls.automattic.com
improve.staance.com
listen.staance.com
pulse.staance.com
campus.staance.com
www.staance.com
compass.staance.com
hypothesis.staance.com
partner.staance.com
api.staance.com
alpha.staance.com
compass.staance.com
listen.staance.com
campus.staance.com
trends.staance.com

Certificate

The complete raw certificate details for www.staance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24f1GXzjuxItCcHiMTcr
VVye5PiuKbvi+49qikPTgVrruodAmFVa0997R7OtxgRYde2UsIwtT7GmO9GLd7rW
0AaG+oDQ5kq6TrTXcsi0telhWtTq4YCmiqjzaxnnFFDV31PraicF3FpVVwrME9Fy
tDXZAQAkMkaDu2ET2zQgN+dUIoqNj+/3n6M2skr7k7fHgzbi+bwIPkGN7LZ+kL8U
A3j8+rHR/cZKkjSIRM/c0BUkjG51fvry7HYaL9aItgMxCCfQxs4SnVswG2zpO120
L3kopYsZnwUgK5oUHdFPyKf33l9fhlKMxAKCN3kK2S8F3HqHdnnEeT6Qim8/lViY
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261978251158286314736244492364116977520881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 21:31:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 21:31:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.staance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27713231890180224647678521829408612089482939574511811959129211604565903968464272296654849713631244749270119529679979661645659468294086328284034090978830109225208256663776620345560669970920496304594674487097462980138145225712938099004789435917042733787774652988966996738419684749440785430809622214113974585803534735983707400593901183543116862722853656275049236687692153773696023369669312777542045623428280557437728277718349185293746272834750966584515688030711698900644923372344774012993146892229719877185049716031834219510225876915280480853510443772298852294717867767763411778975003033797013375445340205616643326908507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d1a86ed634830f29676054965dfcd664746b686
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165a6b6bb6200000403004730450221009058c40e29e90a3c1ee53b40a0d01d2aed14a53f91cb7ff6026819aa2c0b028b02201aaaccc61c5539184442227f60f7593402a3567860b268e68f8354ad413fa52e0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165a6b6bc95000004030047304502201b1827193cea4d28cb674472622085f15c93f3464a0b432349a869ce71aabb14022100a6c244dc8e2932835342ba2025dc3147cd92fb8d51055b6a0500ac8c9adf6ac2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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