*.championslots-staging.ft-crm.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0d:d4:48:ef:17:82:9b:e7:64:dc:4c:31:49:c7:9d:1b:0d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.championslots-staging.ft-crm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0d:d4:48:ef:17:82:9b:e7:64:dc:4c:31:49:c7:9d:1b:0d
Serial Number (int): 353154989526851967822247661480998166403853
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c8:5e:d4:9d:5a:b1:ef:90:c7:92:e0:50:6a:48:9e:3e:74:b6:8e:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:56:0b:cc:7f:2a:b1:e0:f4:5f:e2:b7:cc:54:71:7c:1a:64:5b:42
Fingerprint (sha256): 01:5d:6d:e1:af:b5:29:ab:7b:92:ef:99:b5:e1:17:00:1a:25:2f:31:e2:81:c6:92:85:ad:f3:60:1d:ad:5b:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.championslots-staging.ft-crm.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.championslots-staging.ft-crm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.championslots-staging.ft-crm.com
championslots-staging.ft-crm.com

Other certificates including the domain name ft-crm.com

(limited to 100 certificates)
api.mozebra-staging.ft-crm.com
*.championslots-staging.ft-crm.com
broadway-staging.ft-crm.com
ft-crm.com
*.palasino-staging.ft-crm.com
purplebay.ft-crm.com
api.rhino-staging.ft-crm.com
lottogo-staging.ft-crm.com
api.bitz.ft-crm.com
api.betlive.ft-crm.com
singularity-resources.ft-crm.com
casumo-staging.ft-crm.com
altaprime.ft-crm.com
patrik-staging-external.ft-crm.com
dunder.ft-crm.com
egebet.ft-crm.com
rocketpot.ft-crm.com
sni.cloudflaressl.com
wintrillions-staging.ft-crm.com
api.flappy-casino.ft-crm.com
www.kitimaagri.co.za
kikabet-staging.ft-crm.com
api.pridebet.ft-crm.com
yarrow.ft-crm.com
tortuga-staging.ft-crm.com
wgtbet-casino.ft-crm.com
spinbet-staging.ft-crm.com
api.gaming-factory-staging.ft-crm.com
merkurxtip-staging.ft-crm.com
pokerklas.ft-crm.com
app.bookfocal.com
casumo-staging-external.ft-crm.com
api.lottogo-staging.ft-crm.com
api.eeg-staging.ft-crm.com
roobet-staging.ft-crm.com
api.pokerklas-staging.ft-crm.com
hizlicasino.ft-crm.com
api.rocketpot-staging.ft-crm.com
api.yarrow.ft-crm.com
patrik-staging-site.ft-crm.com
frank-casino.ft-crm.com
luckywilds-staging.ft-crm.com
soccerbet-staging.ft-crm.com
api.theislandgame-staging.ft-crm.com
maxbet-alea.ft-crm.com
foliatti-staging.ft-crm.com
api.turboslot.ft-crm.com
alienbet-staging.ft-crm.com
www.ft-crm.com
api.testing.ft-crm.com
www.moop.link
lottokings-staging.ft-crm.com
api.shuffle-staging.ft-crm.com
dream88-staging.ft-crm.com
reactivaction.ft-crm.com
casumo-external.ft-crm.com
public.goodapp.in
*.campeon-omega.ft-crm.com
training-site.ft-crm.com
api.roqqet.ft-crm.com
polarlotto-staging.ft-crm.com
api.reelcrypto.ft-crm.com
parimatch-staging.ft-crm.com
api.sisutech-staging.ft-crm.com
campeon-staging.ft-crm.com
500casino.ft-crm.com
inbet.ft-crm.com
lottokings.ft-crm.com
dunder-staging.ft-crm.com
campeon-omega-staging.ft-crm.com
*.baji-staging.ft-crm.com
valvepro.app
recruiters.prosus.ai
coinbar.ft-crm.com
api.leetbit.ft-crm.com
multilotto-staging.ft-crm.com
api.merlin-staging.ft-crm.com
*.lunabet.ft-crm.com
yarrow-staging.ft-crm.com
api.pressenter.ft-crm.com
*.bitz.ft-crm.com
casumo.ft-crm.com
bigwins-staging.ft-crm.com
www.t-express.us
totalbet-staging.ft-crm.com
api.bluechip.ft-crm.com
kazoom-staging.ft-crm.com
*.luckycasino-staging.ft-crm.com
stanleybet-staging.ft-crm.com
sni.cloudflaressl.com
sni.cloudflaressl.com
singularity-auth.ft-crm.com
api.betfast.ft-crm.com
ricobr.ft-crm.com
lapalingo-staging.ft-crm.com
api.stakes-staging.ft-crm.com
api.sisutech.ft-crm.com
fatboss-staging.ft-crm.com
*.doggocasino-staging.ft-crm.com
api.we88th.ft-crm.com

Certificate

The complete raw certificate details for *.championslots-staging.ft-crm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2729gmY426z6uHpprrqR
7Dt2+X7zNqLtainIok54emne6MOmv9N/SW3I+0EoQh3AkPvjyz7c7Yk2MMUAiv79
yH0BL4eXAeUDk+PNsecSvtgyYN431dZt3F+/ys/mhXBQYBTnVcVrTxg5xp/nAxpA
3KRzYfazpYPn2mdyrNqFlrLN5FwbfqqCA+bvtc+KKHvEcfYjDmcXDR2BGZlWkCUB
8fv4mfGUfLrvd9mSTFfiO+RbyHWIqv1n9PFqFQpDq6TtcPb7w08CXDNyWYzGXN6e
cF7YxPIidcbvfgBH8jsttyxFQJ2IsFA3f6vrd99dkrL7fF+KkjFh7ietgjSn41t9
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353154989526851967822247661480998166403853
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 08:55:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 08:55:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.championslots-staging.ft-crm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27739753202383279356817590157713527907750281644420105917724655444325679539925585417450928317514068938064121865938671934317163071641144335454315288797158658491911840545411878956322169136008431972393384115255784367701215975107773584612669980562593438008661275873160567477682983667658326615692696955714646903006819924962450524628419193102049002426904934346754849489704621321101022653134532425802718573145159831384722632930429874338251000908293334493848719042536108753979483743544628195243448638489331546606657082157579095609551599802053419365826726825846787275591337161092692237712396880228384530589530714516951869914397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c85ed49d5ab1ef90c792e0506a489e3e74b68ee6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.championslots-staging.ft-crm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championslots-staging.ft-crm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef0a25b8c000004030047304502206c6f88512692d6ff8c5f1201dab5caea95cedadd875935d7e9dce718729e71590221009e0a874ad9a0ad9d21384f6004fe8ced33dc967fa93597ebd7606cc162ea07bf007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ef0a25c390000040300463044022070cec79a3ada7d4ae25f348672d518ec2435e1271106aef7a1c2311b1c4676eb02200381eb2cb611bef1cd5056b56d869bf359482a978dd5a950a872c1eab30fa6cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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