traefik-ms.int.edge-delivery.lumen.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:b0:14:14:a8:27:47:2d:b7:cb:ad:ca:53:2a:0b:fa:c6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=traefik-ms.int.edge-delivery.lumen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:b0:14:14:a8:27:47:2d:b7:cb:ad:ca:53:2a:0b:fa:c6
Serial Number (int): 391558770351245228213507403993923537599174
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:60:63:22:44:61:62:7e:9f:20:df:d7:62:a9:63:75:43:3e:67:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:91:d6:c6:7f:a0:b8:26:6b:7b:bf:d3:a8:2b:40:87:03:de:8e:83
Fingerprint (sha256): 09:2f:3a:89:7a:d5:14:f3:1b:91:01:99:ad:dd:2d:e9:69:a9:3f:4a:81:76:e2:2d:29:1c:05:56:22:fb:2c:b0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate traefik-ms.int.edge-delivery.lumen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for traefik-ms.int.edge-delivery.lumen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

traefik-ms.int.edge-delivery.lumen.com

Other certificates including the domain name lumen.com

(limited to 100 certificates)
uq-polygon.lumen.com
b4086c0abfc26a8cef90.control.sase.lumen.com
dce661b81760bbf93a0a.control.sase.lumen.com
opstatus.cert.eis.lumen.com
interact.lumen.com
ups.dev.internal.sase.lumen.com
webops.centurylink.com
uyrnpoqrsikgbdcbkjas.fpwus2-001.control.sase.lumen.com
f8a98b94dae681ddcfd5.control.sase.lumen.com
area51-customer1-ems-1.test.control.sase.lumen.com
pilot.mss.centurylink.com
df265efb8f3d76768b27.control.sase.lumen.com
test.sase.lumen.com
api.ng911.lumen.com
dev-ui.shop.lumen.com
fc0cc664efbb6256c0ee.control.sase.lumen.com
c8d20e6ec2c6bce968ef.control.sase.lumen.com
cd19ceee589ba6cbdbce.control.sase.lumen.com
e6ce7b59fa744d066da0.control.sase.lumen.com
d1faeb5fdebd77e15d7f.control.sase.lumen.com
ecd.lumen.com
adf4d1304855ab912e26.control.sase.lumen.com
infoedge.com
akamaisecure7.qualtrics.com
staging.eis.lumen.com
mdl-staging.int.edge-delivery.lumen.com
env3.eis.lumen.com
latamblog.lumen.com
ddd0c126e99d64224622.control.sase.lumen.com
akamaisecure7.qualtrics.com
env2.eis.lumen.com
e6799555e84783a48f01.control.sase.lumen.com
versa-east-4.api.control.sase.lumen.com
akamaisecure7.qualtrics.com
chasetest.demo.eis.lumen.com
d8e02707a372fc69156d.control.sase.lumen.com
df94a37db71a8c97da88.control.sase.lumen.com
bll-analytics-data.mss.lumen.com
chasetest.demo.eis.lumen.com
c51d0c3f8ed282148df6.control.sase.lumen.com
ams.lumen.com
ms-prod.int.edge-delivery.lumen.com
al-swportal.lumen.com
dev.eis.lumen.com
traefik-ms.int.edge-delivery.lumen.com
e2c6369c523820b5ac31.control.sase.lumen.com
swportal.lumen.com
api.usps.lumen.com
portal-staging.edge-delivery.lumen.com
dnp03.lumen.com
b78d458b6dbdfccd6f43.control.sase.lumen.com
d53c135ccf4805bc006c.control.sase.lumen.com
b352fabf8d88daebdac0.control.sase.lumen.com
traefik-ms-staging.int.edge-delivery.lumen.com
me-swportal.lumen.com
eckCORALgreen.ccc.lumen.com
mdl-prod.int.edge-delivery.lumen.com
batcave.eis.lumen.com
portal.local-uk1.dubber.net
superset.mdl-staging.int.edge-delivery.lumen.com
d929ee5c90a491e8672f.control.sase.lumen.com
stage.savvisstation.savvis.com
hcde-test1-east.lumen.com
f171a674e65ea175a37a.control.sase.lumen.com
versa-emea-1.api.control.sase.lumen.com
d8918dc4037f4ce42396.control.sase.lumen.com
versa-emea-1.control.sase.lumen.com
eis-pulsar-manager-prod.eis.lumen.com
akamaisecure7.qualtrics.com
bea7d4fb91543535b108.control.sase.lumen.com
a62cdcb17882714422ce.control.sase.lumen.com
c4518d645680c7a47f4a.control.sase.lumen.com
env3.eis.lumen.com
c2e20b9622a6fe39366e.control.sase.lumen.com
ui.edgeprotect.lumen.com
eisportal-pseis-38889.eis.lumen.com
engagesupport.lumen.com
e924b1b1d2a13cde8c95.control.sase.lumen.com
uq-polygonautomation-test.lumen.com
ff4bec271bd71e758b1f.control.sase.lumen.com
versa-east-1.control.sase.lumen.com
traefik-ms.int.edge-delivery.lumen.com
ga.ccc.lumen.com
d33f22a2ca4f5ba14e54.control.sase.lumen.com
chatSOCCDA.ccc.lumen.com
uq-esrisvc-test1.lumen.com
bc2f899f9d8d80ad43ab.control.sase.lumen.com
cust-001-ems.control.sase.lumen.com
a235af16276cf5c0b578.control.sase.lumen.com
dev4-ui.shop.lumen.com
versa-east-4.api.control.sase.lumen.com
e4e9d1677c4b362907a8.control.sase.lumen.com
versa-west-3.control.sase.lumen.com
akamaisecure7.qualtrics.com
test.shop.lumen.com
caesarscustomercallback.lumen.com
jwycrvaikclkpmyqbgzu.fpwus2-001.control.sase.lumen.com
d086b756ddc1bcfc6c1c.control.sase.lumen.com
hcde-east.lumen.com
c6cb15eb28640176f0d6.control.sase.lumen.com

Certificate

The complete raw certificate details for traefik-ms.int.edge-delivery.lumen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArr4nXQJYFt04bbdcLheu
nXhOnqT0omrmZJbJnl/Oz9OKw3s2uryxcwBJ9pxGsPM3bdcDqK4lJR/uClRln2Q6
ST/y5H1cB7PWFwecIIfMnsDsZo5Zscpfe66SnFPUeaI6iUFH85P61IyFpL+jMyB/
A+1gtPxBHs2KbgKboTLStoXvHEqzPvw0rRlM5g3ULrzrRR0a2/fAgcGK7kjcq9D+
VjNlbRowBQwZ3+CAlapOCSlGkXPcB3P2RGqTXcQHvdPAYyNG0HcyaK8EY2+KCdon
Fk8xC0dc8fglstJLV/Pwipon4w8l1wcJ0MRfjYeQSs8/s4ydWX97zrQIP1sBm4D/
6H58uvIAj7XENhZMTdvo/XUDG1dPoRZEC2QLR+KCVavuIZwjIogR6vA9idSXisra
6RzSHfPmtz9aZCOcHVl0Mpha5HrzDFeiJJOkB3ZiB7JD3pEj5i0e/fzKZcKT3ZxG
JnmXiXQTMa9vGcpvwy43pb48LD4CGO6HGBmRa1NewU0zhcM/f/xx7hF9X8LjYznH
sP8ktQmjQIBlKABGcvfizk18VOR/H3ByIrVKGTiPBAY5Q56DkwatXm2i5XnIKHXo
RgPS7jQTOaxsYJJLCDjwboXMk/QWwhgNSZdxwAsaCeGiPQUppC6CCx70GLA3gLen
M7ayXHMWpEqyqPXVbYjAhFECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391558770351245228213507403993923537599174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-30 15:30:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 15:30:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'traefik-ms.int.edge-delivery.lumen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712888379050578838560536680594065880054611269514097642286111084732138571227434180226415670278732083367515387186292805422438990272427427162593602926117954891654677391685096463642009032267798231660295668947840932342666300788206890100993397115673792346591159694660282764636813061595504315412256498122168903482138541090964542203975192626681839684333938126183713752825201534738188595402636424673444906766827367204321394910965784551783259620655747082856383990158744733453543838212717271000948794805967351299548055385462812206848347263410585976609991964156160266428739076743805708945380553023197732714491409607561435427132903828458064865656427643762734481007888606985045094715720837166033365721314504341935235217098032903570649447769704842145188986004311351813139311191074501781836329888131529182352164359079609852440101533059643655357981440366280643950975236042887047507542152274682180390531671796633640930672724819772725041062913313107756851453358958932208711231260053553955305326154626366375380840179211543990931253857741331274507859885422453612754389427163868704299093457805977435723657281785149751211154089391301966560822346193301654458078368799115267073013844084464509641379431975378743853680398435709211997360656097731543560039203921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							066063224461627e9f20dfd762a96375433e6782
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traefik-ms.int.edge-delivery.lumen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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