asiagreentech2023.live.ft.com

Issued by R3

About this certificate

This digital certificate with serial number 03:0e:48:08:17:1a:80:32:d7:82:46:46:4a:93:9d:47:86:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=asiagreentech2023.live.ft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0e:48:08:17:1a:80:32:d7:82:46:46:4a:93:9d:47:86:3f
Serial Number (int): 266196557354840289304448385155812836214335
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:80:83:f0:b7:23:3e:23:4e:34:01:77:2f:3e:e9:2e:9e:83:60:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:0c:35:8a:38:99:ea:75:29:f8:61:33:8e:9d:24:ca:2a:98:eb:26
Fingerprint (sha256): 03:1e:60:82:53:68:45:93:93:1a:3e:53:c4:cf:44:5b:62:23:d9:b9:a6:0a:3c:b5:79:35:d8:7f:e2:bb:ad:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate asiagreentech2023.live.ft.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asiagreentech2023.live.ft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asiagreentech2023.live.ft.com

Other certificates including the domain name ft.com

(limited to 100 certificates)
f4.shared.global.fastly.net
datasovereigntyandthecloud.live.ft.com
h2.shared.global.fastly.net
globalcarbonforum.live.ft.com
dns-vetting1c.map.fastly.net
e.ssl.fastly.net
ft-nbh-ise-01.osb.ft.com
cryptowinter.live.ft.com
o2.shared.global.fastly.net
dns-vetting2.map.fastly.net
akamaisecure3.qualtrics.com
dns-vetting1-mims-pawel.map.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
netzero-newyork.live.ft.com
futurecitiessingapore.live.ft.com
int-ic.glb.ft.com
o2.shared.global.fastly.net
r.ssl.fastly.net
www.lantern.ft.com
dns-vetting1f.map.fastly.net
h2.shared.global.fastly.net
luxuryglobal.live.ft.com
energydecadeofdelivery.live.ft.com
dns-vetting1-mims-pawel.map.fastly.net
h2.shared.global.fastly.net
dns-vetting1g.map.fastly.net
dns-vetting1d.map.fastly.net
forums.ft.com
discoverb2b.ft.com
dns-vetting1d.map.fastly.net
marketingservices.ft.com
santander.ft.com
etnotalks.live.ft.com
education.ft.com
www.ftbroadcast2.live.ft.com
luxuryglobal2021.live.ft.com
dns-vetting1-mims-pawel.map.fastly.net
intelligentbusiness2020.live.ft.com
f3.shared.global.fastly.net
banking.live.ft.com
dns-vetting1f.map.fastly.net
commoditiesglobal.live.ft.com
e1p-internal-sandbox.mrooms.net
intelligentdocumentprocessing.live.ft.com
futurecitieslondon.live.ft.com
dns-vetting1.map.fastly.net
indiainvestment.live.ft.com
pharma2022.live.ft.com
o2.shared.global.fastly.net
intelligentdocumentprocessing.live.ft.com
dns-vetting1h.map.fastly.net
heroku-ft-app-remove-long-pres-aiiucp.apps.in.ft.com
pharmaanalytics.live.ft.com
f4.shared.global.fastly.net
dns-vetting1g.map.fastly.net
o2.shared.global.fastly.net
leveragingdigitisation.live.ft.com
womeneurope2024.live.ft.com
dns-vetting1.map.fastly.net
futurecitiesjohannesburg.live.ft.com
industrialinnovation-europe.live.ft.com
climatecapitalfinance.live.ft.com
about.ft.com
r.ssl.fastly.net
eff22.live.ft.com
asiagreentech2023.live.ft.com
www.ft.com
ft.map.fastly.net
*.memb.ft.com
e1p-internal-sandbox.mrooms.net
scienceatstake.com
ft.com
dns-vetting1g.map.fastly.net
r.ssl.fastly.net
o2.shared.global.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting2.map.fastly.net
api.workfit.com
sendgrid.trytuesday.com
zenith.ft.com
dns-vetting1e.map.fastly.net
heroku-ft-app-at-4199-remove-c-f4qu5g.apps.in.ft.com
h2.shared.global.fastly.net
dns-vetting1g.map.fastly.net
retirementstrategies.live.ft.com
acceleratingequality.live.ft.com
santander.ft.com
i.subs.ft.com
inboundjapan.live.ft.com
o2.shared.global.fastly.net
r.ssl.fastly.net
app-review-1772.apps.in.ft.com
dns-vetting1-mims-pawel.map.fastly.net
corporateculture.live.ft.com
streamliningbusiness.live.ft.com
dns-vetting1e.map.fastly.net
managingregulationandrisk.live.ft.com
futureinvestmentprofessional.live.ft.com
hcltechatdavosceo.live.ft.com

Certificate

The complete raw certificate details for asiagreentech2023.live.ft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgISAw5ICBcagDLXgkZGSpOdR4Y/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MDgxNTE2MTZaFw0yMzEyMDcxNTE2MTVaMCgxJjAkBgNVBAMT
HWFzaWFncmVlbnRlY2gyMDIzLmxpdmUuZnQuY29tMIICIjANBgkqhkiG9w0BAQEF
AAOCAg8AMIICCgKCAgEAu5bxTsGKvkz4mnIj/mG7YbMZ6tM6IwaUkrWe0E7QYVIg
pCXggTp6xkRadLQ7Rw+VV+mHj+hZkNRPIOiyTaKV4Hl+in9SiqWnht5uyFGI0/L1
Jh6Di+Ll/Z82LZ7eSqGX41WwPHMrnmoIJY6cf1yvj3C/DQhw5P3M5Au9P0HTUHEE
VAfDaQteMxaAKLrAkwRvorCTAXeg68uzt+c8m4eRv8pQ7KMRGPE/0yjIMV2IUPHm
9TzZbPNyGCEcvprpH105loB/3tU1ArO9S9c07JAGxB6L/TKeRC0FG7S2RIakYAqU
qUgJe6rCb3u/dDbmICQo/w50oALOU80IzqU9DE0Shu1gicWFvEMQqMdJQnYHpcPe
kAwoZoIjCXxTAPMtqT0d4kU+7S1c2xJ7wEUXibafNzJMCW32zpF4c9TJWHLSFWQm
0hb3M7EVBovaxbSux15K9tjW8CMgAdqzcAAv49D+504/Anhf6xGYmHWGjK2Bsd3W
fICne116frLWGIGxMKzAKSElElsGixhLEBlpGR2M5e+FuK+yJDR/Qlh93S1QtvRh
HMx3FflyxNjmt32FD4TKbD72GL7rPfUned20utPn3o+rJ/9Hc3YzW8E3tGuogccO
FPIFEH9kqpc8QY1Y/SKyultZ1lvpkI6VuVMFL3ANwmrcFQThkid46NJWLXmJJd0C
AwEAAaOCAh4wggIaMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm4CD8LcjPiNONAF3
Lz7pLp6DYEgwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYB
BQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYI
KwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wKAYDVR0RBCEwH4IdYXNp
YWdyZWVudGVjaDIwMjMubGl2ZS5mdC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qf
NcSeHQmBJe20mQAAAYp1lG6iAAAEAwBHMEUCIQCpPl9vp8FqYwXDPbDfVmV1YYr+
M4SiGVeMDK75uZvv0wIgXQoyWF/CPcLV/cbDEMmu5LqUfCZLL3gyJngW1memexUA
dQCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYp1lG7/AAAEAwBG
MEQCIBszDut3lmjqfXfHV175ChTdoHjGM4X4Ak1KePKivJlMAiBPcrDXD54fZ7nr
lb/ExUFCLKgcSJkqA4Cb9qgdE4SThTANBgkqhkiG9w0BAQsFAAOCAQEApb7ESTD1
gpBb2AC2AeUckoozbITYp5mEXI/BA1UsRbj3AyZhr3zPmVfaTlAetI57eI38qAli
67enda35yr26cL0yhVVOLM9hOemajGLi8ZYlRoRAOg6oqNsGd3MEIzZKED8o4aUn
qn8qjJNQEf89grvDIIWM4u2gXKJhFHu//BXWCK1JqRVRrKfkzHactnuUwGrtZFSZ
qivJtCUHJAUl0TNb2kRZy0UIqQWNdM6l1oop9B/n8tZy8MbVYpNq5oqje8uc0Btk
aRqDYSIa2712SQVrD9ZaWJJA2QLZDwbyNhebjPPPZeQTQF9NoHPmr0imt5paUjCj
2Y1k3850aql39w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266196557354840289304448385155812836214335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 15:16:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 15:16:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asiagreentech2023.live.ft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765298878669852062870916372794378808592562411268708857145376347994363280154794768628691797973546335242906808572963805128822382406220682160706816843442207682842404307083742983542806820052762138896344812822455485607433790772779816281441189783284495652043384897494199109565415566463397879451703357159430338642578812261287995936495599552153702023141831124906532224692929913098203565402871191726109168925906856182066817371378797249274356510306853214663556932250058168586251629755432480664103616631093366892327138620715538178967959941136747885112086362556732239373248339780427940009414652859875309683598945800458636652632530405193879338500508311451861382848615840318781253931294862855768766435864410921907921062295328065591760495182846740440799106768606626030122634666882901013801201783963683601615782605028032814113836268148333455393505049928125863492769837536537807985049954329417690105578818934110034535257253396358638883688769135445694133276402914642392755463962200696922542790242691112151059224048123584002159172034399328693700188760217437271855155651826607060706031501865196989137190348824312437906786857265182902842473401303765795886255389548803117952090368225759323582905984503690368271258110658075625354906257955150604706205214173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b8083f0b7233e234e3401772f3ee92e9e836048
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiagreentech2023.live.ft.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a75946ea20000040300473045022100a93e5f6fa7c16a6305c33db0df566575618afe3384a219578c0caef9b99befd302205d0a32585fc23dc2d5fdc6c310c9aee4ba947c264b2f7832267816d667a67b15007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a75946eff000004030046304402201b330eeb779668ea7d77c7575ef90a14dda078c63385f8024d4a78f2a2bc994c02204f72b0d70f9e1f67b9eb95bfc4c541422ca81c48992a03809bf6a81d13849385
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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