login.lafarge.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 75:cd:1f:31:35:96:fb:d7:db:49:ca:c6:90:3f:f7:be was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=login.lafarge.com,OU=Domain Control Validated+OU=Issued through LafargeHolcim Ltd E-PKI Manager+OU=COMODO SSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 75:cd:1f:31:35:96:fb:d7:db:49:ca:c6:90:3f:f7:be
Serial Number (int): 156584729016297706883641905117633968062
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0a:ab:05:05:df:6d:67:5c:82:d5:aa:2e:b7:0f:ee:77:c2:22:2c:1e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 5d:98:5b:1e:81:8a:bb:f2:e9:d8:c2:23:1f:a6:d5:a1:15:b7:27:a1
Fingerprint (sha256): 0d:fb:f9:d2:c6:0f:c9:6a:73:af:46:15:19:5b:df:fd:75:59:45:db:d1:33:34:42:35:ee:20:40:3b:3d:0f:df

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate login.lafarge.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for login.lafarge.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.lafarge.com
www.login.lafarge.com

Other certificates including the domain name lafarge.com

(limited to 100 certificates)
login.lafarge.com
getmarket.lafarge.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
nemo.lafarge.com
corpidc-app20.corp.lafargeone.net
lobaveno.lafarge.com
*.lafarge.com
login.lafarge.com
lnacsg01.qua.na.lafarge.com
egate-apac.lafarge.com
ERPCSS-VN.LAFARGE.COM
lnacsg01.lafarge.com
lnacsg01.lafarge.com
corpidc-app20.corp.lafargeone.net
engplatform-qa.lafarge.com
stinternet.lafarge.com
apcrss.lafarge.com
swift.lafarge.com
engplatform.lafarge.com
idacovoiturage.lafarge.com
getmarket.lafarge.com
lobaveno.lafarge.com
lnacsg01.lafarge.com
erpcss-cn.lafarge.com
lnacsg04.prd.na.lafarge.com
brandportal.lafargeholcim.com
zambia-supplychain.lafarge.com
zambia-supplychain.lafarge.com
egate-emea.lafarge.com
erpcss-cn.lafarge.com
nemo.lafarge.com
brandportal.lafargeholcim.com
lbmobileqa.lafarge.com
citrix.qua.na.lafarge.com
qa-zambia-supplychain.lafarge.com
brandportal.lafargeholcim.com
nemo.lafarge.com
login-qa.lafarge.com
getmarket.lafarge.com
qua-vpn.ap.holcim.net
*.lafarge.com
erpcss-cn.lafarge.com
oneipc.lafarge.com
corpidc-app22.lafarge.com
login-qa.lafarge.com
AMAACS.na.lafarge.com
login-qa.lafarge.com
egate.lafarge.com
brandportal.lafargeholcim.com
egate.lafarge.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
zambia-supplychain.lafarge.com
login.lafarge.com
maximo.lafarge.com
lbmobile.lafarge.com
www.holcim.com
lnacsg03.prd.na.lafarge.com
erpcss-cn.lafarge.com
brandportal.lafargeholcim.com
sdc.lafarge.com
egate-apac.lafarge.com
egate-emea.lafarge.com
apcrss.lafarge.com
login.lafarge.com
imperva.com
imperva.com
brandportal.lafargeholcim.com
AMAACS.na.lafarge.com
login-qa.lafarge.com
engplatform-qa.lafarge.com
syncrotess-itec.lafarge.com
maximo.lafarge.com
lnacsg01.lafarge.com
citrix.na.lafarge.com
swift.lafarge.com
oneipc.lafarge.com
twsinternet.lafarge.com
stinternet.lafarge.com
zambia-supplychain.lafarge.com
www.holcim.com
apcrss.lafarge.com
egate.lafarge.com
brandportal.lafargeholcim.com
theo.lafarge.com
lbmobileqa.lafarge.com
imperva.com
brandportal.lafargeholcim.com
getmarket-qa.lafarge.com
lobaveno.lafarge.com
citrix.qua.na.lafarge.com
engplatform.lafarge.com
brandportal.lafargeholcim.com
getmarket-qa.lafarge.com
twsinternet.lafarge.com
theo.lafarge.com
corpidc-app20.corp.lafargeone.net
login.lafarge.com

Certificate

The complete raw certificate details for login.lafarge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156584729016297706883641905117633968062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through LafargeHolcim Ltd E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'login.lafarge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800414343933184021286118799204722925267903789314990760289117107774710070364089928325895181603017759407074900425941704724246890513817882891965477093176426995905722296133177591578253585129921717923738276355524075664809112951351988053402843422323896813767741795593771318846138799742918568699857693536368741473987464382170104040681232152702839856418718843898805696562471499291887790280995299124897535087413313527154512704216665736155354957917817188591095506606187649955907459111526568693038570228506784131285241671126754631982681913472344816457023096734507652232830117977065460938786155771358258389387964209114404961764571232171826978965206049200177719988852753969423619048498329086771120642720684375704058588318997679184877556277750699279271862188588541955529301622668058576121566876100299552163487174380397774714512695657874164053760633893595578707307932307158340715709502045028571238167834663975767591048582621771528626437767731934113394238474494845876271188038417448579192878990372748683428453808212048566266715295735042520318538356098639475923442703399668465316991405909097715445840366358780023242065478548027979224726413454001364421491398455094662862112424479064328315389359481054103229113003142709637936780559122178248250971147189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aab0505df6d675c82d5aa2eb70fee77c2222c1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.lafarge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.lafarge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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