trends.staance.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5d:b9:60:a4:f6:93:ed:a9:38:5a:80:a8:88:45:87:e4:18 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trends.staance.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:b9:60:a4:f6:93:ed:a9:38:5a:80:a8:88:45:87:e4:18
Serial Number (int): 380341812836257977056894417373323975975960
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:30:91:76:e8:c1:78:0b:93:16:f1:e6:8d:0f:68:a5:0f:92:42:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 87:7e:d4:d3:fc:2e:f0:25:3c:f8:b7:6a:fb:9c:ec:b5:87:3f:36:b7
Fingerprint (sha256): 9a:20:a1:dc:0c:cc:16:ed:4a:da:b9:23:10:35:ef:37:fb:37:8d:79:40:f3:b9:96:48:59:10:09:42:c0:35:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trends.staance.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trends.staance.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trends.staance.com

Other certificates including the domain name staance.com

(limited to 100 certificates)
staance.com
listen.staance.com
staance.com
api.staance.com
listen.staance.com
tls.automattic.com
compass.staance.com
trends.staance.com
hypothesis.staance.com
www.staance.com
www.staance.com
api.staance.com
staance.com
tls.automattic.com
campus.staance.com
alpha.staance.com
campus.staance.com
api2.staance.com
partner.staance.com
improve.staance.com
api2.staance.com
stuckyi.studio
www.yral.app
www.staance.com
alpha.staance.com
alpha.staance.com
api.staance.com
listen.staance.com
partner.staance.com
www.staance.com
partner.staance.com
pulse.staance.com
hypothesis.staance.com
pulse.staance.com
campus.staance.com
api.staance.com
www.staance.com
www.staance.com
staance.com
listen.staance.com
www.staance.com
staance.com
staance.com
improve.staance.com
continuum.staance.com
staance.com
trends.staance.com
continuum.staance.com
pulse.staance.com
tls.automattic.com
sni.cloudflaressl.com
i.staance.com
hypothesis.staance.com
trends.staance.com
continuum.staance.com
tls.automattic.com
hypothesis.staance.com
improve.staance.com
improve.staance.com
trends.staance.com
continuum.staance.com
listen.staance.com
api.staance.com
tls.automattic.com
tls.automattic.com
compass.staance.com
pulse.staance.com
tls.automattic.com
improve.staance.com
tls.automattic.com
tls.automattic.com
st-execution.com
continuum.staance.com
api.staance.com
compass.staance.com
alpha.staance.com
tls.automattic.com
continuum.staance.com
www.staance.com
staance.com
www.staance.com
improve.staance.com
staance.com
compass.staance.com
api.staance.com
tls.automattic.com
improve.staance.com
listen.staance.com
pulse.staance.com
campus.staance.com
www.staance.com
compass.staance.com
hypothesis.staance.com
partner.staance.com
api.staance.com
alpha.staance.com
compass.staance.com
listen.staance.com
campus.staance.com
trends.staance.com

Certificate

The complete raw certificate details for trends.staance.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyEbPJXE7fPnRkQ70NG0p
g6b+r90ntewfWLbGg27VuiAXE/o+ikInFHyayCW6q90deZazzYnQwBO6w6Mek6pN
aJCCeOavWxdbtrLdfnxbremRg398jucNNJ17yGNYhhXi/y7OPqXy1N463qWi9rxC
SiuGrlKC7y3r9FG4dkqJv8RERrVuOBPiKig0DXVNrHbVyhQMI1HsMB7e2/T5PKuk
fnndAJa9GdBjBzlml3sHcuy7A4OJazuUSS8EXDsq8gk4Bcfd3lyJkTN9W2XZzAOC
j0iSumOZbME7dgpY2U7Uc6TTkkXZI4BoJMfNAraBQQa9+0YDSwgdISVmlRCJ/4HU
D1Lbq4r4BJXjp43090fufIA9gCjvs/dWUxICohqlfXw/n7NJT0d5LjFni9Uin++k
AifY57tsL6UFxY0Uesd8mIv8kkIsTEJD7OxJ+N0/hYP3V4qRbEBwvRgn/O7juDKR
1ckDH0r5B+Tpu6kQgcZOdA5DpaN7WuJVVNblIhFuFxKRGBfWXvhLkpZ4mXddVV2b
jptnxZdTX9wTP6XVYGnuYC6LJdU4dIj4hg8onOCDwYewTe5tmIZXUFiU3e6elzLO
fCXrWIT09Rvl9HblzhVGOS0T45ZxI55ewkzuKnAUv+pUB/UdeXulcY8rwKXqQE5j
FeR9p7Mnpj9opgiJLE/v+zMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380341812836257977056894417373323975975960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 03:56:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 03:56:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trends.staance.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817057236222217251208863105258826336920534427787766695554216175250005231378217320491574717478110196707451861055176486895880231650871447162480452972756742453762600470869000754676792926140562889034220574423102872259519763915299403548676260312542137911442792502051406704218778488298797132673044850060539342726404356092330693548397834845018829424025143727549606511611022835830575408326824498734836246344245835607760784825327401513882662414896743157327989038201227073307175020538887321853388296144751999801849984716892856191957181686154824059076332717893657697330729636435811829623227537111871801039574830556846388938791305080147907126978676101652664366232229882368307042880244484000629185359541598763773085823486194675480288215348330970608975865524614880446056023177940203763186293453142832238044159926131404267812827791332279318785138502592791427026366773977927752031441968918193044240016819562787292683166800747630473975791428372617001454478149919814272523135307930067046297368586172939418533726882713322321274737496825142548296869340247625025964973630373478652807232940576447935239992463340305367286144278386687167413257483646773505334398987672425958257435195118855511050696783415257321143857667284277307137116599407525989111649270579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b309176e8c1780b9316f1e68d0f68a50f9242e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trends.staance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b304c04880000040300483046022100a4cf82e7e90d53f984da14c32a6c2d7216fb0a1567e6a87bbb4bbfea65206a14022100c591c8133e200d6fb901c727e7631728b94fe10467e263c9f48b8831326d39e000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b304c06520000040300473045022100be1a6cf5bdf36e8436918228a5417ce20f6ae8bf7fc0d69018e7e7266ab63a7002205a6cc057490d37d6b18a83434ee48a5c8bf9b18558316e709b981f1a41a6034d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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