exchange-api.sandbox.lgo.markets

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:50:17:03:b1:29:8f:a2:82:60:32:39:c9:76:7c:be:cf:01 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=exchange-api.sandbox.lgo.markets

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:17:03:b1:29:8f:a2:82:60:32:39:c9:76:7c:be:cf:01
Serial Number (int): 375702324494788999660625121902716566556417
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:0d:dd:3c:78:d0:5a:9f:16:28:9b:aa:45:ec:d9:53:c4:bb:c3:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cf:0e:00:10:ba:af:3c:25:e4:b8:c2:3c:13:19:29:d2:9b:2a:24:73
Fingerprint (sha256): 01:cd:75:a6:78:8e:c4:84:e5:88:d6:b3:40:b7:e5:ab:2c:23:97:27:60:9b:30:6a:ea:f1:b4:7a:83:41:1c:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate exchange-api.sandbox.lgo.markets

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange-api.sandbox.lgo.markets

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange-api.sandbox.lgo.markets

Other certificates including the domain name lgo.markets

(limited to 100 certificates)
ws.exchange.lgo.markets
exchange-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
staging.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
elite.turnosweb.app
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
blog.haythoo.net
sni214014.cloudflaressl.com
blog.lgo.markets
*.lgo.markets
val.1sur10.fr
support.lgo.markets
sni214014.cloudflaressl.com
wallet.dgmcapitalpartners.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
blog.lgo.markets
blogs.lgo.markets
account-api.sandbox.lgo.markets
admin-app.sandbox.lgo.markets
codeshake.dev
sni214014.cloudflaressl.com
lgo.markets
sni214014.cloudflaressl.com
app.staging.videolevels.com
sni214014.cloudflaressl.com
www.app-indo.com
sni214014.cloudflaressl.com
www.organizados.com.br
sni214014.cloudflaressl.com
go.chaletexpert.app
support.lgo.markets
blog.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
exchange-api.exchange.lgo.markets
exchange-api.sandbox.lgo.markets
www.adop.co.jp
blog.lgo.markets
www.donalrafferty.com
sni214014.cloudflaressl.com
www.seoofseas.com.br
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
exchange-api.exchange.lgo.markets
market-data.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
account-api.exchange.lgo.markets
account-api.sandbox.lgo.markets
www.school4one.com
docs.puzzlemazing.online
account-api.exchange.lgo.markets
sni214014.cloudflaressl.com
sni.cloudflaressl.com
support.lgo.markets
ciateacademico.com
www.strikeuptheatre.co.uk
www.kadauters.be
sni214014.cloudflaressl.com
deporteconprincipios.com
support.lgo.markets
lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni.cloudflaressl.com
app.exchange.lgo.markets
sni214014.cloudflaressl.com
exchange-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
www.escaperoomwaiver.com
sni214014.cloudflaressl.com
exchange-api.exchange.lgo.markets
exchange-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
exchange-api.sandbox.lgo.markets
market-data.lgo.markets
tagesklinik-rosenthal.de
blog.lgo.markets
sni214014.cloudflaressl.com
*.lgo.markets
blogs.lgo.markets
account-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com

Certificate

The complete raw certificate details for exchange-api.sandbox.lgo.markets in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375702324494788999660625121902716566556417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 14:53:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 14:53:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange-api.sandbox.lgo.markets'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712793723173371407809242186566685185222460154105814349039084805523389304873052258591770683303128645768615387116453162749487504633992732382006196593617072977107439125142551152488417376365976350140742931480807977426036688960761953167804759958076032439988927811256054176062753063877613698716434795752296663002196568178390808780334107983670585004213021771533086725584657360770270848586159455676886090325193397065229759318322824594386578692344545729264597342019756875344420772203905003469288946245998245271969029537063944300112621287708747156413426398292593133868796085347295045871427112378421824952704117622465311162288660195802036610594737298521639879238984398966686513170760917968145586530412122776712381106946298931798328879062148710165390599736749617069179639084936556585803512850485479000594321143644444197724247675116956536476188650250291346559482006003721701844665568365809498769297645197788401869591145908728466797180801080805807663756629738980662904193346932037057612937624150946764238283423619451068651168611170799017830566122682612699303685889300009791255991806433941508156413647382903449886922287944120422442826493373635440890799304421821174764842414979469413894408969616322018526106854156227288768854258627737715065787693743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							080ddd3c78d05a9f16289baa45ecd953c4bbc37c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange-api.sandbox.lgo.markets'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001712c2602060000040300483046022100fe14cedec1bc32f4ce5aa7656c372415c3ef7a9d37030f050c0a22e43d300c4f022100f678f3b15729ae8eded104709583a6681e668eaa7335580d25e81abcf83390ff00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712c2602070000040300483046022100eff8970a9c143e74ddb3c43d15fcc9bb2d3f080cf87e49bdbed545a9bc65b29b022100eee4d5f922ab2241172d5541227bd8f725c98406ca3fcb11727a7c13864e9a14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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