analytics.heysara.sg

Issued by R3

About this certificate

This digital certificate with serial number 03:3a:75:4f:18:9a:db:dd:04:31:56:70:42:a3:b8:ad:4b:f7 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=analytics.heysara.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:75:4f:18:9a:db:dd:04:31:56:70:42:a3:b8:ad:4b:f7
Serial Number (int): 281229165442700842153653217583787435445239
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:27:1a:06:01:a5:af:0a:81:83:a9:b2:ba:5d:12:17:24:41:f9:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:56:d7:4f:92:4e:c8:3e:c2:62:41:0f:37:89:ac:15:a8:db:65:6f
Fingerprint (sha256): b6:48:aa:79:71:8e:12:3f:f0:85:d6:16:51:29:06:0d:cb:cc:84:56:ea:d8:d8:26:d1:9f:c4:37:d8:60:3b:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate analytics.heysara.sg

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for analytics.heysara.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

analytics.checklistfacil.com.br
analytics.commit.works
analytics.ehsdatamonster.com
analytics.eocenterprise.com
analytics.heysara.sg
analytics.toyon-absolute.com
bi.alshareef.com.qa
bi.aviv-pos.co.il
bi.indis.io
dashboards.atims.net
insights.changestate.io
metrics.tourwriter.com
reports.mvfl.ca
reports.servicereports.ciena.com
snowanalytics.manageengine.com

Other certificates including the domain name heysara.sg

(limited to 100 certificates)
analytics.vascular-insight.com
stg.heysara.sg
heysara.com.sg.timcole.com.sg
heysara.sg
heysara.com.sg.timcole.com.sg
analytics.commit.works
analytics.heysara.sg
analytics.commit.works
analytics.mcidirecthire.com
heysara.sg
heysara.sg
analytics.heysara.sg
reportai.datamatics.com
analytics.commit.works
www.heysara.sg.timcole.com.sg
app.heysara.sg

Certificate

The complete raw certificate details for analytics.heysara.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOcLEqA6ZuX+U4UGITXx
n5zcu5JFEF6BJxyQU7+t2XLZ1bo19acY0HYEfFVVCknZC7jlYZADHvMEX3d8B50i
9G1RiGSqZueUBk/cfa6Xogxv4mlBbjZmsNY2Z2LyTku/UM76SjPGRtQoqz5S4sSV
sDS7ZsoNJUbMaw1KkEt7MNoY9KgXk9VQ/7dA4q79goUMhHKr/FBrBhA/lEUm+wxS
uG05Vok9buExgZC41AgBfNFXbPat4GIY92k9YQlkYVEVFIi5UTIKbJutNf4vA9cf
HRBf/C6jjyzH4VxMPKpcUFu5ejzqdMj2HkhgCQU2WI5c5qIjTD3YUMy3IrVboxRY
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281229165442700842153653217583787435445239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-10 08:16:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 08:16:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'analytics.heysara.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20312060468894890930390633703959239781358028586510758545871880093038753135381427505858698916449556525088354676587185569284820001743829443778996344573731258512917140746894503008468149318662335547981288342073277164761341550937382926789050527019194963399366805102111017905704410266351787420723762505758176525295815643991455457100655236204043568931683314559257454386972972774293316234647392878622684624539732064874025836532626092463849265225624860631796423377755106763898986589381491931068515187840885288499726516894265588223706789491711934642446723296426920212461548853289243020164613940009932358183934177001738733901833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e271a0601a5af0a8183a9b2ba5d12172441f954
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (379 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.checklistfacil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.commit.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.ehsdatamonster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.eocenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.heysara.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.toyon-absolute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.alshareef.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.aviv-pos.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.indis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboards.atims.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.changestate.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.tourwriter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.mvfl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.servicereports.ciena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowanalytics.manageengine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017da3a1a0b60000040300483046022100ed95a89a0ab7cba65b94f09b5f5a60b972dd9c072d89f5079fc7b1aee35f6c8d022100efa1cb445f7af6b75ce1bacfdf172d59852bc91c89002d131eedca65ba6477e20076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017da3a1a29d00000403004730450220471279909804d1df807b031021bd839dbc3548cdde4c47b3d043546d1aadae0c022100c347231fe73da9b838e0d49d80c6c8747558e6e5ff58fa80c9630448efa6b142
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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