edge4.xpo.com

- XPO Logistics LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:52:6f:ec:25:88:f9:50:e9:f0:75:b6:0c:6b:1d:6c was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

XPO Logistics LLC

Organization: XPO Logistics LLC
State / Province: North Carolina
Locality: Charlotte
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:6f:ec:25:88:f9:50:e9:f0:75:b6:0c:6b:1d:6c
Serial Number (int): 4415722386683498822759872480101997932
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 24:ca:ec:45:85:40:78:fb:d9:5b:28:7e:83:94:a8:52:9e:c7:56:d8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e6:b0:57:f6:4c:b6:06:13:3f:ed:6b:4f:d9:d0:43:7c:1b:60:77:7d
Fingerprint (sha256): 1c:7a:41:7f:3c:bb:5c:4f:f1:a1:c7:5a:28:3f:11:29:76:f9:c1:3a:2a:7a:b3:5c:3f:b6:d3:10:31:15:aa:47

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate edge4.xpo.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge4.xpo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge4.xpo.com
xpo2152-exp-e4.xpo.com
xpo.com
edge4.rxo.com
xpo2152-exp-e4.rxo.com
rxo.com

Other certificates including the domain name xpo.com

(limited to 100 certificates)
oci006vm2001.oci2.xpo.com
xfinprd.xpo.com
transportpartner.xpo.com
ocd006vm6001.oci.xpo.com
web.xpo.com
freightfwd.xpo.com
infoblox.xpo.com
www.dtci.xpo.com
powershellscripts.corp.xpo.com
qa.accesspanel.xpo.com
ethics.xpo.com
wts.xpo.com
ethics.xpo.com
ethics.xpo.com
cargowise.xpo.com
*.xpo.com
eu-support.xpo.com
nexusrepodev.ltl.xpo.com
san2018022701.sc.xpo.com
github.xpo.com
subservice.ltl.xpo.com
tmsbe.xpo.com
vpn-pdx.xpo.com
o2c.ltl.xpo.com
infoblox.xpo.com
prod.44.slot.cdn.salesforce-communities.com
ltl.go.xpo.com
eye.sarbacane.xpo.com
venafi-test.xpo.com
infoblox.xpo.com
copeuw1compemeacmg.xpo.com
tlsportalssl.xpo.com
*.sc.xpo.com
carrier.xpoconnectdev.gt.xpo.com
ethics.xpo.com
accesspanel.xpo.com
xpoprd.xpo.com
www018.sc.xpo.com
lets.go.xpo.com
myxpo.xpo.com
eceos.app
pdcs.ltl.xpo.com
*.transport-poc.xpo.com
*.xpo.com
san2018021300.sc.xpo.com
ethics.xpo.com
investors.xpo.com
www.expedite.xpo.com
ltl.xpo.com
*.ltl.xpo.com
myxpo.xpo.com
san2020031603.xpo.com
webtracker.xpo.com
inpau1463.amer.corp.xpo.com
tower.keypl.xpo.com
opentext-timestamping-certification.xpo.com
jobs.xpo.com
san2018060800.sc.xpo.com
drayshuttle.xpo.com
portal.xpoconnectdev.gt.xpo.com
qa.identitypanel.xpo.com
oraclefinancialsclientcertificate-dev.xpo.com
cp-eu.xpo.com
ltl.go.xpo.com
ethics.xpo.com
wts.xpo.com
id.xpo.com
san2018060800.sc.xpo.com
test1-0620.xpo.com
eye.sarbacane.xpo.com
*.amer.corp.xpo.com
iberia.xpo.com
jobs.xpo.com
graylog.chicago.xpo.com
infoblox.xpo.com
eye.sarbacane.xpo.com
xporeset.xpo.com
drayshuttle.xpo.com
accesspanel.xpo.com
identitypanel.xpo.com
*.qaamer.qacorp.xpo.com
ethics.xpo.com
mtssrsx.nat.xpo.com
build.gt.xpo.com
*.test.sc.xpo.com
*.im.xpo.com
www.lambda073.xpo.com
bi.ltl.xpo.com
access.xpo.com
leapfrog-ssl-25.gcs-web.com
san2018042400.xpo.com
www.expedite.xpo.com
mssrt.xpo.com
teamcity.xpo.com
ethics.xpo.com
san2019110500.sc.xpo.com
hentaigirls.net
api-jwt-xpoconnect.xpo.com
director-test.xpo.com
prod.44.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for edge4.xpo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4415722386683498822759872480101997932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XPO Logistics LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge4.xpo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670485445483262485594431386528588273777445384105130598789029631273991195066151997811815862446637100453961339380364405610168599436793442353618984033996239038590759979652476982332189592633344274931719435950327482804842794431991172474896237214298394046958433195709134959067425581246720312716941661136342374702378321866906285718357939869032747149156751098916918382137251240503909446449822216983485333026870145772379541170711026082894346088858931389324430160926062614631685364725536214438219989666696867135492894055897531848350591785803352188806643000643182767315414439122674621894447977029846916520425634765079019908316464297575250246469805252774763883550086789008697649080349059746712962278755632542745804329616323592707730530589117592774416975996208164292169661000109448052726274257597026973458747738436557727023287202955381510927885533246425010496188481964483467701595064519552043582200577810690064820784442387849958087079391147990794169881726706707321030716801334257397043920122398941726447818631625751062171816266639350721110651684355826191360447653994629403558529430923557659098792122497749335466184036695416394775577303193167102003404730694583169283644972874329971827020762149257582301353262019037496919598152102980437913931453101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24caec45854078fbd95b287e8394a8529ec756d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge4.xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpo2152-exp-e4.xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge4.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpo2152-exp-e4.rxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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