qa-backoffice.leroymerlin.es

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 0a:e0:2c:ef:92:48:6f:48:12:de:b8:6f:69:18:66:ea was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa-backoffice.leroymerlin.es

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:e0:2c:ef:92:48:6f:48:12:de:b8:6f:69:18:66:ea
Serial Number (int): 14456265860986741305637772414869333738
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d3:bb:1c:4c:85:55:ee:cc:a5:05:dc:27:ea:1c:68:d2:c5:ca:69:67
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 46:b4:7a:df:08:f7:7d:06:8c:72:d4:14:2a:71:69:07:17:6e:2b:4f
Fingerprint (sha256): 09:4b:75:92:3c:3b:a6:50:55:71:f9:2f:95:1f:fa:d4:6a:0c:4c:34:68:89:81:8d:49:69:7d:3d:38:29:6c:cc

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/8oMXQlCALlw
CRL Distribution Point: http://crls.pki.goog/gts1d4/QAjxP9bEukA.crl

Check the revocation status for certificate qa-backoffice.leroymerlin.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-backoffice.leroymerlin.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-backoffice.leroymerlin.es

Other certificates including the domain name leroymerlin.es

(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
adeo.map.fastly.net
incapsula.com
incapsula.com
dns-vetting1-mims-pawel.map.fastly.net
adeo.map.fastly.net
incapsula.com
fidelidadempresas.leroymerlin.es
secure01.preprod.lithium.com
dns-vetting1-mims-pawel.map.fastly.net
secure03.stage.lithium.com
novedades.leroymerlin.es
secure03.stage.lithium.com
corporativo.leroymerlin.es
secure06.stage.lithium.com
incapsula.com
secure07.lithium.com
imperva.com
secure03.stage.lithium.com
dns-vetting1-mims-pawel.map.fastly.net
fidelidadempresas.leroymerlin.es
adeo.map.fastly.net
secure03.stage.lithium.com
secure07.lithium.com
secure06.stage.lithium.com
secure03.stage.lithium.com
www.leroymerlin.es
secure07.lithium.com
api-pre-client.leroymerlin.es
incapsula.com
secure03.stage.lithium.com
secure07.lithium.com
secure07.lithium.com
secure07.lithium.com
imperva.com
adeo.map.fastly.net
secure07.lithium.com
incapsula.com
secure03.stage.lithium.com
qa-backoffice.leroymerlin.es
incapsula.com
dns-vetting1-mims-pawel.map.fastly.net
adeo.map.fastly.net
adeo.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
secure06.stage.lithium.com
imperva.com
incapsula.com
dns-vetting1-mims-pawel.map.fastly.net
evaluacion.leroymerlin.es
incapsula.com
secure7.scene7.com
incapsula.com
dns-vetting1-mims-pawel.map.fastly.net
secure07.lithium.com
secure06.stage.lithium.com
secure07.lithium.com
adeo.map.fastly.net
secure06.stage.lithium.com
adeo.map.fastly.net
secure07.lithium.com
api-matching.leroymerlin.es
dns-vetting1-mims-pawel.map.fastly.net
secure03.stage.lithium.com
secure01.preprod.lithium.com
secure03.stage.lithium.com
dns-vetting1-mims-pawel.map.fastly.net
r.notify.leroymerlin.es
secure07.lithium.com
especialistas.leroymerlin.es
secure03.stage.lithium.com
imperva.com
adeo.map.fastly.net
secure03.stage.lithium.com
api-matching.leroymerlin.es
img.notify.leroymerlin.es
incapsula.com
secure07.lithium.com
unhabitatmejor.leroymerlin.es
dns-vetting1-mims-pawel.map.fastly.net
secure07.lithium.com
incapsula.com
adeo.map.fastly.net
secure07.lithium.com
incapsula.com
imperva.com
unhabitatmejor.leroymerlin.es
adeo.map.fastly.net
incapsula.com
incapsula.com
secure07.lithium.com
secure03.stage.lithium.com
incapsula.com
dns-vetting1-mims-pawel.map.fastly.net
secure06.stage.lithium.com
secure06.stage.lithium.com
secure06.stage.lithium.com
secure07.lithium.com
dns-vetting1-mims-pawel.map.fastly.net
empleo.leroymerlin.es

Certificate

The complete raw certificate details for qa-backoffice.leroymerlin.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h+Vmksnetj8VvSPm7mM
97jLk/9+6DeKk2yS6B7qRnK3HtX8x+FAYKwEt2S/+BY7381XAEwzRINU+NPFNxeh
AjTQ8heaejoRASXasYSttEa5PF7kSMSKpgy768EkyprMpvGz7ySRcZuk2ff6yH2+
n5z7we03a2gV0vDDLAFCrKPcrhwoU95UncfE56yYzt1469NNTJAMNE2/v7Ybuj9b
cZU7yDAQgNm7YPqrxwUS5KzJw6Y7zBW8DiZSuh32fC4azXpRJ2iR+vjmDVc1+f0i
KzBVhv/S+inU9k9whuxUHEtX7dUJJNbYsna5K6J8Zz/3g9bC8DcZW4V2c4Wo72CB
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14456265860986741305637772414869333738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-29 18:26:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 18:26:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-backoffice.leroymerlin.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27535525323614058647362715664282878751746601491680798735671384693953295521768673083020728921841898022596388309490412433369841821015160062979022228252961691610996285918504341723786361296034529604290127402131686995256010670314583275368132155821640331017634768864804445077747472382211467026151674523101845927485556714717627869863118267687380090939175372324509984815451609910838566551775896107285810400939558704705499678993078492531236593094434943931012669745408552239520444754154143501097039933325761610311505182264925043246583741114411156876990596238473375833218188340748090039592081019087650257904287185146662879265089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3bb1c4c8555eecca505dc27ea1c68d2c5ca6967
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/8oMXQlCALlw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-backoffice.leroymerlin.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/QAjxP9bEukA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000018076d92eac000004030047304502202067cbbf16bd993cca8fa82f0b0c0fc66f7447b8ddbf3cf3850a1ff49916bd1b022100f58e7497303802590ff07ac097348fde8499daf889fbec7f3237b5c7e6e13ae5007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018076d92f030000040300473045022065a30f83798389664e938db3f678a310c7975841b593abf99d02fc50e4a58a25022100f5032db947626f4aee259d237d7886d10944b22a3136586e24ef769a16cc3645
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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