lpga.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:7d:a3:97:07:11:b5:65:ec:7f:c9:49:63:22:3f:04 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lpga.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:7d:a3:97:07:11:b5:65:ec:7f:c9:49:63:22:3f:04
Serial Number (int): 11286179072001918749169824410009485060
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:6c:66:72:c5:7a:17:9a:33:cc:42:98:92:05:d6:5c:6a:39:aa:b9
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 45:12:65:a4:65:7b:1e:0c:f3:3f:7e:87:9e:8e:9a:a1:87:06:25:d6
Fingerprint (sha256): 1a:48:a8:0d:be:f7:8b:3e:94:5e:47:7a:85:96:98:67:02:75:54:5f:24:f1:40:4e:08:8e:6e:9f:00:ed:73:01

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate lpga.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lpga.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lpga.com
solheimcupusa.com
thefounderslpga.com
ulcrown.com
symetratour.com
*.symetrascoring.com
symetrascoring.com
lpgascoring.com
*.lpgascoring.com

Other certificates including the domain name lpga.com

(limited to 100 certificates)
lpga-cuc-pub.lpga.com
vcse.lpga.com
helpdesk.lpga.com
www.lpga.com
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
itsupport.pando.ai
mail.lpga.com
helpdesk.clicktechretail.com
servicedesk.oneontacsd.org
portal.dakotalandfcu.com
www.lpga.com
lpga-cuc-pub.lpga.com
lpga.com
helpdesk.lpga.com
itsupport.waycool.in
helpdesk.admix.com
mail2.lpga.com
qs.lpga.com
servicedesk.metro-inet.us
www.lpga.com
servicedesk.stevinrock.ae
lecitsupport.maf.ae
portal.dakotalandfcu.com
lpga-cucm-pub-ms.lpga.com
lpga.com
vcsc.lpga.com
mesa4.aylsoluciones.pw
destek.coreway.com.tr
lpga.com
lpga.com
lpga.com
servicedesk.stevinrock.ae
portal.dakotalandfcu.com
itsupport.pando.ai
lpga.com
vpn.lpga.com
voc.utc-egy.net
helpdesk.lpga.com
mesa4.aylsoluciones.pw
lpga-cucm-pub.lpga.com
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
mail.lpga.com
mesa4.aylsoluciones.pw
lpga.com
lecitsupport.maf.ae
itsupport.qholding.com
www.lpga.com
scorpiontravels.sdpapac.org
destek.coreway.com.tr
api.lpga.com
helpdesk.intrepidmuseum.org
servicedesk.metro-inet.us
support.access2arabia.com
mesa4.aylsoluciones.pw
qs.lpga.com
lpga-cup-pub.lpga.com
mesa4.aylsoluciones.pw
encompasshelp.coastal-bev.com
lpga-cucm-pub-ms.lpga.com
mesa4.aylsoluciones.pw
helpdesk.admix.com
itsupport.waycool.in
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
secureservices.lpga.com
sac.spark-factory.ca
mesa4.aylsoluciones.pw
helpdesk.clicktechretail.com
portal.dakotalandfcu.com
destek.coreway.com.tr
mesa4.aylsoluciones.pw
lpga-cup-pub.lpga.com
lpga-cup-pub.lpga.com
www.lpga.com
www.lpga.com
mail2.lpga.com
*.lpga.com
*.lpga.com
lpga-cuc-pub-ms.lpga.com
rpc.lpga.com
itsupport.qholding.com
lecitsupport.maf.ae
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
servicedesk.metro-inet.us
itsupport.waycool.in
support.access2arabia.com
support.access2arabia.com
mesa4.aylsoluciones.pw
lpga-cup-pub.lpga.com
itsupport.pando.ai
vcsc.lpga.com
*.lpga.com
helpdesk.clicktechretail.com
helpdesk.clicktechretail.com
mesa4.aylsoluciones.pw
servicedesk.oneontacsd.org
www.lpga.com

Certificate

The complete raw certificate details for lpga.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KnotWDQR4XDcWCdggpf
iFIrv5E7rN0m8lcUlLa/Vcrs06oEK/vIZj+WU9Z459Xvn9nzI0GOQrDZt0U2VG7R
Yk57NTYLigGUhqNJzaTy4fxfm1BmE7oncBvYB9i9XcbwcxF2UrpL0LMoOUd52FZM
2Z4EB3Eie0Qlcfdb2/cqPLEPD5cVOTeQGlL3CMyNXjKcuNU6HrzHxAvh8hP04tlJ
p7fEYkaa54K7sMbq3Hq6ya8aSvSCB9pZEphvWaaxq7+jqbRawvVelu3bEcE5FI5l
BZ2VvsweuuptC87B3t0Yr2GZa33tyNhIaursBhvNA1cCeTET7jra5fbP4NxpxUq5
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11286179072001918749169824410009485060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lpga.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30380978451157609552666007376686993782816550963021032429175153172845094632334262492923509723622359639018338233374725457250631968696867983985581655254200500981441805189187007012672404162700564917487180834712240020040591314223625811070014346643719771209599716474291631253016663979171743958111778963387518078390234008979366683096304774846029689586576633413395055802446702817891469166088296735124222386955156726470960414679573248151065478810311360164910350656042111898702492768749402724253664877015426863827640984721297408542927697828120945179103964961031757239291173831926281095755655761575366780899089161298002729155051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b06c6672c57a179a33cc42989205d65c6a39aab9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solheimcupusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefounderslpga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulcrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symetratour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symetrascoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symetrascoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpgascoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpgascoring.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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