imports.versata.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:bd:0d:93:be:cd:12:d9:6d:93:dc:ac:32:fe:d5:d5:e4 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imports.versata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:bd:0d:93:be:cd:12:d9:6d:93:dc:ac:32:fe:d5:d5:e4
Serial Number (int): 293914977240463433850589058376795073926628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:0d:75:be:9a:73:4b:fc:67:b2:83:34:8a:05:1d:0a:c7:79:1e:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:88:b1:f8:25:e5:64:41:f8:9d:81:28:7e:41:14:5d:43:8e:71:6f
Fingerprint (sha256): f5:2c:e8:3f:fe:8c:fd:c8:b1:58:54:3a:d3:60:6f:3f:b1:08:29:39:a2:f9:f3:3a:fb:bb:3e:a0:0d:cd:47:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate imports.versata.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imports.versata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imports.versata.com
support.bonzai-intranet.com
support.fogbugz.com
support.getchute.com
support.myalerts.com
support.olivesoftware.com

Other certificates including the domain name versata.com

(limited to 100 certificates)
support.engineyard.com
*.versata.com
support.versata.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
imports.versata.com
*.versata.com
support.crossover.com
imports.versata.com
*.versata.com
support.engineyard.com
supportsurvey.cardinal-mark.com
classichelp.kayako.com
classichelp.kayako.com
supportsurvey.versata.com
support.engineyard.com
*.versata.com
support.versata.com
supportsurvey.zephyrtel.com
support.versata.com
classichelp.kayako.com
cvc.versata.com
jira.versata.com
imports.versata.com
support.cardinal-mark.com
support.engineyard.com
support.engineyard.com
imports.versata.com
dnnsupport.dnnsoftware.com
*.versata.com
classichelp.kayako.com
northplains.com
support.cardinal-mark.com
support.cardinal-mark.com
classichelp.kayako.com
*.versata.com
support.cardinal-mark.com
imports.versata.com
*.versata.com
support.crossover.com
classichelp.kayako.com
northplains.com
*.versata.com
support.cardinal-mark.com
support.cardinal-mark.com
support.versata.com
support.zephyrtel.com
imports.versata.com
psa.versata.com
supportsurvey.versata.com
classichelp.kayako.com
support.engineyard.com
imports.versata.com
*.versata.com
classichelp.kayako.com
imports.versata.com
northplains.com
*.versata.com
supportsurvey.cardinal-mark.com
*.versata.com
training.versata.com
imports.versata.com
classichelp.kayako.com
support.engineyard.com
support.engineyard.com
support.versata.com
classichelp.kayako.com
northplains.com
imports.versata.com
psa.versata.com
support.cardinal-mark.com
imports.versata.com
support.versata.com

Certificate

The complete raw certificate details for imports.versata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293914977240463433850589058376795073926628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-11 22:45:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 22:45:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imports.versata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681897074286329570652632516334292588258676203742434283618420927556880866974510921658957979169892758883648147271776252866710857175450584973133569745307770839898204368731645983935659741119441049440875617082330817135506908867597273189778435570967766335052069822791167226914600730708901732983329084186736451749437480370469336885671901051949917647804867473306740789719660299337842110632618174341823226427127491233892334626889145360014467937556428504711917217734916722434658424380628282071582034085518548342787093095327336362017461713585190068001704095941894695820763561675475729807706064887698642878838454005307434071739390407447644624084626155929583314506433608937344275752083019080882511920484959962504404377162048741718696439431552223762286034016539468784438029916299685350559192019978727313505141028401296955052617841665439372680932156777310758225415622820199725405564968114804996005241799426234073525040913936680573053104725103275640102578058192319204087182193011706606781798613908049130692421035526840773702100228237520215022700447971785990494082761438197663654383845675939105792456175420833659774011887774598471012344748020060998803502473392021106794074335118036192717554159474757497408459615287621774006433370897812180140467667203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							400d75be9a734bfc67b283348a051d0ac7791e95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imports.versata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bonzai-intranet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fogbugz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.getchute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.myalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.olivesoftware.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165cb06dafd0000040300473045022100bb7ab9e6152f76b332ea35ed016a064b67d684f070144e669bd217b5f481169d02200f6fc35ace2ba7cba002289529142fda51ca13d7258b60ac8cde4a8fd9340192007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165cb06dd380000040300483046022100b166eed71f469a23689268b5c5598925b21f43dc0ff97c0a960921aea369e08f022100e6e374bd9c861d8cd01026495b62fbb5cf98a090be8d05fbeb2d0d75972f9c03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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