voyager.corp.luno.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8f:95:76:ed:a1:1c:58:99:07:e2:88:60:a9:97:8f:ec:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=voyager.corp.luno.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:95:76:ed:a1:1c:58:99:07:e2:88:60:a9:97:8f:ec:ee
Serial Number (int): 310195908747071782708514196288942856203502
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:ea:fe:32:a9:54:66:90:7f:6c:8f:37:c4:e1:dc:df:f0:b9:f9:c0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:a7:e9:25:18:9d:c2:b2:6a:e5:1f:b7:f6:59:87:65:92:58:8b:81
Fingerprint (sha256): 17:a2:a2:d9:2a:76:be:23:cb:71:a0:fe:3a:5c:35:40:18:2a:4b:5e:33:e3:7c:ee:62:f8:70:5b:77:98:79:b6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate voyager.corp.luno.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for voyager.corp.luno.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

voyager.corp.luno.com

Other certificates including the domain name luno.com

(limited to 100 certificates)
nebula.corp.luno.com
trade.luno.com
app-status.cloudsign.jp
*.corp.luno.com
app-status.cloudsign.jp
ssl425545.cloudflaressl.com
try.luno.com
*.corp.luno.com
confluence-staging.corp.luno.com
one.luno.com
lunobase.corp.luno.com
corp.luno.com
*.corp.luno.com
unifi-controller.corp.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
discover.luno.com
ajax-geo.staging.luno.com
apollo.corp.luno.com
luno.com
wordpress.prod.luno.com
app-status.cloudsign.jp
staging.luno.com
*.corp.luno.com
app-status.cloudsign.jp
app-status.cloudsign.jp
nebula.corp.luno.com
careers.luno.com
luno.com
try.luno.com
app-status.cloudsign.jp
staging.luno.com
corp.luno.com
one.luno.com
ajax-geo.staging.luno.com
one.luno.com
discover.luno.com
staging.luno.com
staging.luno.com
sandbox.luno.com
api-geo.staging.luno.com
*.staging.luno.com
try.luno.com
any-quote.blueur.com
trade.staging.luno.com
sni.cloudflaressl.com
app-status.cloudsign.jp
try.luno.com
ajax-geo.staging.luno.com
trade.luno.com
luno.com
ajax-geo.staging.luno.com
sni189482.cloudflaressl.com
staging.luno.com
app-status.cloudsign.jp
invest.luno.com
staging.luno.com
app-status.cloudsign.jp
papercut.corp.luno.com
app-status.cloudsign.jp
luno.com
ssl425544.cloudflaressl.com
ajax-geo.staging.luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
uob-jwt.luno.com
*.corp.luno.com
*.staging.luno.com
crypto.luno.com
app-status.cloudsign.jp
sni189482.cloudflaressl.com
voyager.corp.luno.com
sni.cloudflaressl.com
corp.luno.com
api-geo.staging.luno.com
luno.com
*.luno.com
one.luno.com
sandbox.luno.com
new2-www.luno.com
*.staging.luno.com
sw.luno.com
uob-jwt.luno.com
discover.luno.com
ssl425545.cloudflaressl.com
dev.v3.playbook.vc
app-status.cloudsign.jp
luno.com
ajax-geo.staging.luno.com
app-status.cloudsign.jp
ajax-geo.staging.luno.com
staging.luno.com
staging.luno.com
invest.luno.com
staging.luno.com
ap-southeast-3.prod.luno.com
app-status.cloudsign.jp
ssl425544.cloudflaressl.com
staging.luno.com

Certificate

The complete raw certificate details for voyager.corp.luno.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlg/SWyqBD/a1IIMNjJ6m
CgEXUjNbCxy7DgVjlB14oAKNvGYF7exdXAvNVfLntefIlT9AjInvcPKdElB+rNH7
CvaJU4jH1fjCeScFgwSej3sp5/C4LZU+E05T+4co3Zw3Hllyl86HpOkHNykcFOhS
9deECLAy9tY0WZxkCnQWlgcqzmK52WPJFAwyPYiPQbVoYk11mPgZKMcq0yhBnUov
RPZAGFmo7EjzG7dtcse6nLBk0ZcV8SP9HdD20MR6tqaWH6GL8MgvAbcKUqbc4gYh
VMg+AgDYR0l7W26UcEziKxEw38nJgr09Pf5P0ukr9NH4wDV07hdrk+MoqKncVdPm
XWyIPzwKhXbfdn8rTvw5u2FnBxsL9gEbfwoteKSeP9z3gTn0mbBL7bKn4BLLi/lQ
5CC1ApPdl5icJ9oiTCI5vlBLbhcmd8A5twAKoxRPzSzjSMF0jjyiwfyTtiTCgncQ
uJClhv25W/GkB+p5hcKkqwOfPAs7tZBdx8+4Ic0PJZvSwy7nw5nGrQ6eJI9hwzSk
JB3wb3htaCdPFhyekOv27sJfZEQFYwxdfyImdFY3rweb1FMpZW4IvJiJ0ULNQzbE
rb47ker8XGeABz0Wz1Ew+qaq0h8JFaTLjdjNgd4mb6HGK0D57iFPaU+7TGb7NdGC
vFgzwTGu+SAVM9ivFlJ2Bw0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310195908747071782708514196288942856203502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-16 19:38:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-14 19:38:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'voyager.corp.luno.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 612198746606024423316098030450736972163395013464030826156491582095499383909596185785956565127627570139890258575923501545001656807337782568136169410601482549751559093310435422190419059416265893876431648473787381312385158335903732756739799748251774672885683415617850896304515251056627090201755556677949421353500925540082445732108329432775293924349192336567606286200299161248632804503733701880945911579186137876204180924433319622123686545924828669866402772987756584557696901687888454587882782758851534778805823963973045057329826259491891682886223402011920467230637470295151699610274564390503952259870831242678526217840879995597822706144925032167370839530814750540269952895672820087359864919280359578774060051589441233185224140644346397761535263319860511663132565346226972507092947005916662757341183131647280463713331882105994516413207451014276997121756198986098788676268177065674237973853927796194212059428691721734047048481034832320103003795917543126990761292292478530955948626734077771105667979833389112257825102058747659968305432028018750989549290335312283696214743326209165456030478724132856140393499263799318273497360271483881613778873851312556924319356897328583370432996421949410866086063380416652268262590107923881613661486581517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89eafe32a95466907f6c8f37c4e1dcdff0b9f9c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyager.corp.luno.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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