dev.idd.landolakes.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 03:cd:65:5e:cb:1d:72:67:e7:de:00:b8:ca:85:21:62 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.idd.landolakes.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:65:5e:cb:1d:72:67:e7:de:00:b8:ca:85:21:62
Serial Number (int): 5054160877032688551124077783940407650
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 71:49:68:7e:cd:c9:24:f3:96:d1:1d:ab:f0:83:bb:11:7a:f2:24:fc
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 6d:8f:c0:fa:03:1c:dd:d6:d2:5a:01:fe:eb:b4:45:35:b7:1b:48:4f
Fingerprint (sha256): 3f:a2:d9:08:d0:1b:ff:0c:8d:4e:d8:65:1e:fb:8c:e2:aa:76:e3:02:38:46:52:b4:bd:4e:2e:55:a3:35:33:41

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate dev.idd.landolakes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.idd.landolakes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.idd.landolakes.com

Other certificates including the domain name landolakes.com

(limited to 100 certificates)
smartlabel.landolakes.com
collaboration.landolakes.com
blcom.landolakes.com
loldftst.landolakes.com
sip.landolakes.com
iddcrm.landolakes.com
brandtrademarkqa.landolakes.com
businesslink.landolakes.com
dsimobile.landolakes.com
stage.landolakes.com
workspace.landolakes.com
secure.landolakes.com
portal.landolakes.com
portal.landolakes.com
dairydownloadsqa.landolakes.com
cdmsres.landolakes.com
fleetmiles.landolakes.com
apidv.landolakes.com
collaboration.landolakes.com
azure.landolakes.com
portal.landolakes.com
ssr.landolakes.com
feedlabeling.landolakes.com
collaboration.landolakes.com
expemra2.landolakes.com
kentscorecarddev.landolakes.com
webseriesqa.landolakes.com
ECPrd.landolakes.com
adminstage.landolakes.com
dairydownloads.landolakes.com
partner.landolakes.com
blcom.landolakes.com
adminsmartlabel.landolakes.com
securedev.landolakes.com
carrier.landolakes.com
iddcrm.landolakes.com
specs.landolakes.com
vcs1.landolakes.com
stage.landolakes.com
fleetmiles.landolakes.com
gis.landolakes.com
ftp.landolakes.com
sgpoc.landolakes.com
loltms.landolakes.com
dairycrm.landolakes.com
www.board.landolakes.com
basicresearch.landolakes.com
dev1.landolakes.com
smetrics.landolakes.com
specs.landolakes.com
idd-reporting.landolakes.com
dccstage.landolakes.com
dairydownloads.landolakes.com
ftpqa.landolakes.com
tms.landolakes.com
careers.landolakes.com
blcom.landolakes.com
SIP.landolakes.com
espmysite2013.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
partner.landolakes.com
idd-time.landolakes.com
dev.landolakes.com
ECPrd.landolakes.com
mpis.landolakes.com
tms.landolakes.com
ftpsqa.landolakes.com
smetrics.landolakes.com
apidv-internal.landolakes.com
ssr.landolakes.com
IMWEB2.landolakes.com
dairydownloads.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
vpnlab.landolakes.com
www.landolakes.com
portal.landolakes.com
esp.landolakes.com
ftpqa.landolakes.com
rms.landolakes.com
rms.landolakes.com
dcc.landolakes.com
loltms.landolakes.com
bimobile.landolakes.com
ssr.landolakes.com
dairycrm.landolakes.com
secure.landolakes.com
adminsmartlabelstage.landolakes.com
smartlabel.landolakes.com
fleetmilesqa.landolakes.com
dairycrm.landolakes.com
mpoldev.landolakes.com
api.landolakes.com
purinaorderfulfillment.landolakes.com
www.landolakes.com
kentscorecarddev.landolakes.com
dairydownloads.landolakes.com
dfcm.landolakes.com
mpis.landolakes.com

Certificate

The complete raw certificate details for dev.idd.landolakes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdvSNdvhtvWFEKjHNJVX
TVC3im4uBP6cvEmQ6UbfNsCAEXXIQ5+Yl+E1xBZi87RQzDPwg66bdx+3DNjQvpHB
IR3sM3oOQ7GtbgCKmtZ0Kp58Q38tLjOsD5xKZ+CDopN3tFOliaZ8D1Wv1UeH7USq
kSw8NI5wwO9ukhw+m9ybJd2N5fIOkXgOB+180NWy+EZ6rqdbFSyPYDOtMRTVbZt+
GOindVe3sOdwlRwr/sNUFXnUvgXLmKduo+RD0/OPZ1kQLaW+RCYbBCQNQhslJ7FV
Moac9g8QU8Y3oHnOBToyIX2N60RtHie2Nm/d+VwR0/PFmpJ+pHnKjvGpfv6VpDSV
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5054160877032688551124077783940407650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.idd.landolakes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21947624600505091514539974330191161976210440562260561573296693198125109485530856125538987824821562396075248411482360399258653262517588331035899940192368450785357593476997910002628722532068415639160346079208518306841110408174187885061757247638568292993164243451240599285799010324938992870180893696884763824463845195301207895564318409657311838204501126897870070260917129409817209444170447766525172283112388142171615604212760700158481992471426508476800745216229065362033458865834514064536974834567010273370187144788410732498525318185678304487709073814799295905520555944825337916985999697904165465405050736487208404161897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7149687ecdc924f396d11dabf083bb117af224fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.idd.landolakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006a76d913d84405ed47e44dd303be5a56a4172f2b3a3a470e199ddb70984c9a058c61c92bd2827acca35cfa6568b643d7b2524a0cd64df035b5fb6ce643523d9f7f11a10a0fd05ca4c47debb2a3e32165fb296576a8c2a740f0d262b3974faebcf8af5d7ee569c916bc4aadf573fd4afccced0a0e408f6c626e5d16979f57c058bd3e5a0864be9f15953113af2d34b7f85db436f69144f2ecd18227d74a1a20cf992b14d7cfc2b583588547ab83d6fc1384f2b97cd16eb4531694979ad6e6a0815af0562e237c7332fb81baa6f0c3a9c3eac3b1d7ba8e658a7e291d875ffba4b756f09b5251805679cf741e1b139431a9b900176ba3b2f8ebbd157ec569fa3716fb247466eaf2a11d98b83bb1c1dee4f4ea58f78f1d18a0e8369057b1a0d5fe45581da665a6679831703a6b309a0c657f3f33e798246cde2b504c42285f45b081428dda699994cca66dec51b382ff035d338208c4887ec29f45629ddc5e2c7f06b9da90990647f48cd1ca3d114a911920c5e6736b30aae92bd5b15f4f6a9eb5984d814bbdef6ae5ea05eb564ee91efa0bd35876b9eaf937d8fd2f14371435f1e7b24edea6025538cd90d2160349ab0f62e40adfd27739246929832156b924bbf9cb2cf8ad3cebc06d07169e6d33b67a81a5653940ffac13570fbb9af81f6b3821196adcef9f2104de448f9c2bb987ac975d19689f7b322fa32d7229a4c7dea56d