stateofagile.versionone.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e3:d4:19:6c:62:de:ba:ff:37:8a:ca:11:40:52:52:11:9f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stateofagile.versionone.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e3:d4:19:6c:62:de:ba:ff:37:8a:ca:11:40:52:52:11:9f
Serial Number (int): 425975169358955412186817076933787579978143
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: aa:1e:dd:f4:db:94:4b:5a:89:72:df:37:5a:a1:bb:70:3e:68:06:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:cb:e6:6e:65:18:4f:85:57:46:6b:0c:ab:bc:f0:19:2c:99:a0:75
Fingerprint (sha256): f3:c7:55:2f:7a:e9:4c:f8:3d:98:57:1e:ad:f2:44:fa:50:f0:66:d4:e0:fd:12:48:a2:b5:e9:64:cd:f0:a6:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stateofagile.versionone.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stateofagile.versionone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stateofagile-versionone.stateofagile.com
stateofagile.versionone.com
www.stateofagile-versionone.stateofagile.com
www.stateofagile.versionone.com

Other certificates including the domain name versionone.com

(limited to 100 certificates)
stateofagile.com
support.versionone.com
ssl2.cdntwrk.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
versionone.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
*.versionone.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
blogs.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
*.leankit.versionone.com
ssl2.cdntwrk.com
smetrics.versionone.com
ssl2.cdntwrk.com
support.versionone.com
ssl2.cdntwrk.com
*.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
stateofagile.com
ssl2.cdntwrk.com
ssl4.cdntwrk.com
stateofagile.com
ssl2.cdntwrk.com
san2420.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ideaspace.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
san2420.cdntwrk.com
ssl2.cdntwrk.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
support.versionone.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
san2210.cdntwrk.com
info.versionone.com
*.leankit.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
support.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
stateofagile.versionone.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
*.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
support.versionone.com
versionone.com
support.versionone.com
ssl2.cdntwrk.com
stateofagile.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
www.community.versionone.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
dev17331wed2prod.relevantize.com
versionone.com
ssl2.cdntwrk.com
ssl.cdntwrk.com

Certificate

The complete raw certificate details for stateofagile.versionone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXRSE4beZfj6u2ZsmqnM
Vj4cBas5WfgbAcbFLrp+bZ57FSI1o5T57kyDHuIv3qMSxKwBiaQ0Egqqqvo4k+X8
62ym+NZHOKHFnyP5ZcXJwNv9AWBogGhzT0vMbLeexC59Rn7TYbGT3+XAxtEdRCRB
3lnCq0PNPU4TMAgqOa4JEjF2H80V5HGiv61CFVBickwjf+Z0ukaeaYquM3P3lfcw
nKkGfFgJcCCCcLh+p1tvU3H1Vat3gooISt1bQayf4kOhxfzPVc2mvem8uRnmlNf4
0bdd3fk1pO7WV7DT1JhhjOzgNHJopwdr8MHdiv6omh4fBgvaiS/0/nGD7z5b38A2
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425975169358955412186817076933787579978143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 13:30:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 13:30:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stateofagile.versionone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20886680150245597866027482611246671781960108522127592375831601975440019573137305012334162375969307787180202690399835236271695927016082284454434629261309069275801069322770075951135509975155994530448056827122166810965464066556243073445329760744326719933830334727842156179395523675539507602030956307531012988900975354379069168990812659922130546885709183726759192654523680667310681188355723284883351970099042399051860928719558217913684281337893518166920242630273072008177954161950098202052289201865304721276537250299223675127055335072341307509548833177041497443294134059030533295096478858121161784886662872926269982389769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa1eddf4db944b5a8972df375aa1bb703e680622
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateofagile-versionone.stateofagile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateofagile.versionone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stateofagile-versionone.stateofagile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stateofagile.versionone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f9503a0ae0000040300473045022100fc4502d58fa51e45cd88b857c6d936b457e6eaf58bc74f700ae66b3646d325a3022050226c9e4cf755cbcf77e95e9376d3edd43975dbfdc7c1376278a11ffc3dcb63007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f9503a09e0000040300483046022100983e6ecf6e1b2d053b0047b82089c7e4967b25e6aa006e825b22b68bd6207039022100e37bfecb27a2e85ed0eff5a30fddb40e1b8c59d2a26450a56d0735a7676a640a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007fdffceaea19dd909ac30bbb311de68d289e99fa553183e2ca14a312bab5bb318b102eba31b97b12f51e0c8523b6f2bb8a4b22f626fe9ebf9b28216c32e62c92f86e9d71948fe783a580e01c1ac2620d7789e33debb35a7f61eed747d3d384a25f4a007b9bf83acc07e4cce5f0b2c9eefe332e2669ba7533204c6fac9f603c10f3383abe814beb54e8a043ac70bb482325808c2c83016b80ca7845fc943f739d25873a9c66839b7a3492d45ec1b0c7f63670118a5b46c42352ec6e1544f5f8293adc3ede5df87ac78d6bcdc8d18716786ee1e62977f76ac399272386d551527b00c39f5ba615a6f266b2b9ce270737ea6938a75a837a38f69b01809320bd7ebb