fiat4.tp.latoken.com

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 68:41:c6:39:f3:e5:aa:38:93:6b:76:35:8a:4a:45:09 was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fiat4.tp.latoken.com

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): 68:41:c6:39:f3:e5:aa:38:93:6b:76:35:8a:4a:45:09
Serial Number (int): 138581231366025306166882672785274586377
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6d:66:57:0f:39:50:ff:47:1b:f8:b2:ec:b3:72:e8:ca:ed:f2:0b:23
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 61:81:1e:d0:4b:b7:5c:8d:c9:4a:4b:fc:38:d4:21:4a:90:a4:7e:3f
Fingerprint (sha256): 03:64:9e:a3:b0:8e:74:ef:db:5b:6e:d4:65:a1:d4:d2:5e:18:14:c7:95:0b:8d:cd:96:b2:8f:80:fa:95:1a:e5

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate fiat4.tp.latoken.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fiat4.tp.latoken.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fiat4.tp.latoken.com

Other certificates including the domain name latoken.com

(limited to 100 certificates)
landing9.tp.latoken.com
exchange7.tp.latoken.com
fiat4.tp.latoken.com
fiat1.tp.latoken.com
moments.latoken.com
exchange5.tp.latoken.com
fiat5.tp.latoken.com
sentry.tp.latoken.com
exchange5.tp.latoken.com
exchange6.tp.latoken.com
ssl809651.cloudflaressl.com
tdgw.latoken.com
exchange1.tp.latoken.com
fiat10.tp.latoken.com
fiat1.tp.latoken.com
exchange1.tp.latoken.com
fiat10.tp.latoken.com
exchange5.tp.latoken.com
landing7.tp.latoken.com
exchange2.tp.latoken.com
tdgw.latoken.com
fiat4.tp.latoken.com
fiat2.tp.latoken.com
exchange6.tp.latoken.com
exchange2.tp.latoken.com
fiat5.tp.latoken.com
exchange6.tp.latoken.com
exchange1.tp.latoken.com
fiat4.tp.latoken.com
ssl809650.cloudflaressl.com
fiat5.tp.latoken.com
fiat5.tp.latoken.com
fiat10.tp.latoken.com
landing4.tp.latoken.com
exchange5.tp.latoken.com
exchange10.tp.latoken.com
landing3.tp.latoken.com
exchange4.tp.latoken.com
exchange8.tp.latoken.com
exchange5.tp.latoken.com
exchange4.tp.latoken.com
exchange5.tp.latoken.com
landing3.tp.latoken.com
fiat2.tp.latoken.com
ssl377115.cloudflaressl.com
invite.latoken.com
exchange6.tp.latoken.com
exchange2.tp.latoken.com
fiat1.tp.latoken.com
ssl809650.cloudflaressl.com
exchange5.tp.latoken.com
ssl377115.cloudflaressl.com
exchange3.tp.latoken.com
landing3.tp.latoken.com
exchange5.tp.latoken.com
fiat6.tp.latoken.com
fiat2.tp.latoken.com
exchange5.tp.latoken.com
exchange1.tp.latoken.com
ssl377116.cloudflaressl.com
new-blog.latoken.com
fiat4.tp.latoken.com
exchange7.tp.latoken.com
fiat2.tp.latoken.com
exchange6.tp.latoken.com
fiat5.tp.latoken.com
exchange2.tp.latoken.com
exchange6.tp.latoken.com
tracking.latoken.com
fiat2.tp.latoken.com
exchange7.tp.latoken.com
exchange4.tp.latoken.com
exchange1.tp.latoken.com
sentry.tp.latoken.com
exchange5.tp.latoken.com
exchange8.tp.latoken.com
tdgw.latoken.com
exchange5.tp.latoken.com
fiat4.tp.latoken.com
fiat2.tp.latoken.com
exchange5.tp.latoken.com
exchange5.tp.latoken.com
exchange5.tp.latoken.com
vctv.tp.latoken.com
exchange9.tp.latoken.com
exchange1.tp.latoken.com
exchange5.tp.latoken.com
exchange5.tp.latoken.com
exchange6.tp.latoken.com
fiat1.tp.latoken.com
exchange2.tp.latoken.com
exchange1.tp.latoken.com
exchange6.tp.latoken.com
exchange7.tp.latoken.com
landing2.tp.latoken.com
exchange10.tp.latoken.com
exchange1.tp.latoken.com
fiat10.tp.latoken.com
fiat5.tp.latoken.com
exchange2.tp.latoken.com

Certificate

The complete raw certificate details for fiat4.tp.latoken.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx44llJUOzpLBvmr3Tlj
tfDaLu6DPQI7lVLT3hxU5V8LY/HvEtAhPpAH3/2bVajB/yrFv0tvDAcWSi/DAf/D
chgbsFExxPYjfDhtBKnap+CFsXwHl0WIMMUgoFZtU78oRzcPXovs2IEzJpE0AD29
gx60zyVkeYF8fviRWvMZnpHgqA4syFlq2qAbWcaImBT5ao4iyLKOsVJyl0V3GJXY
KhT4bqVqf3r/BrL/OohTK3Rapx0/zZG4Z4EaMOTnMEx6S5cw3jv1Ov0GniBwAZ2v
CA7WtsSpLJqCxy1aezxsZ3Kkhe2+TCVxKqnnByouBulRmb+2PMdcA70fGPTXT3Db
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138581231366025306166882672785274586377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fiat4.tp.latoken.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25641278460196692553543158043873334161177476789073564181056751870718426134933133511804316365665634360184912211811484337973119289233740297812050971787785821756841458934244828035685973860427874043101791469665050382248390877961289796485454931113913561871478053780760795266223368274362053257578381607410943844714043983975628283003028553580273187581443784594294609868673280199009605811179582703674936709577617442409857677918919186997987449483459875184991400912327453186387982383027330672205954360946354525946565388941673549104162045075796190645223122341800054227561572834887944366270240477953633239282300246401907407510477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d66570f3950ff471bf8b2ecb372e8caedf20b23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiat4.tp.latoken.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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