exchange-api.exchange.lgo.markets

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:a8:ac:04:cc:56:27:17:f7:16:6f:42:0b:2e:78:8b:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=exchange-api.exchange.lgo.markets

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:a8:ac:04:cc:56:27:17:f7:16:6f:42:0b:2e:78:8b:5c
Serial Number (int): 309540875006803443684848063673908283870044
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:6d:f5:35:41:5e:cd:cb:c4:6d:29:ee:90:b6:75:02:65:b4:48:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:4a:80:34:fb:b9:bf:13:23:84:58:bd:b2:d3:45:a5:2e:e3:5f:34
Fingerprint (sha256): 49:c0:34:b7:e4:ee:32:9a:5f:2c:c7:8d:07:50:a1:50:3f:51:25:d7:31:47:05:61:4c:72:24:0b:98:fe:dc:0e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate exchange-api.exchange.lgo.markets

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange-api.exchange.lgo.markets

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange-api.exchange.lgo.markets

Other certificates including the domain name lgo.markets

(limited to 100 certificates)
ws.exchange.lgo.markets
exchange-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
staging.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
elite.turnosweb.app
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
blog.haythoo.net
sni214014.cloudflaressl.com
blog.lgo.markets
*.lgo.markets
val.1sur10.fr
support.lgo.markets
sni214014.cloudflaressl.com
wallet.dgmcapitalpartners.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
blog.lgo.markets
blogs.lgo.markets
account-api.sandbox.lgo.markets
admin-app.sandbox.lgo.markets
codeshake.dev
sni214014.cloudflaressl.com
lgo.markets
sni214014.cloudflaressl.com
app.staging.videolevels.com
sni214014.cloudflaressl.com
www.app-indo.com
sni214014.cloudflaressl.com
www.organizados.com.br
sni214014.cloudflaressl.com
go.chaletexpert.app
support.lgo.markets
blog.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
exchange-api.exchange.lgo.markets
exchange-api.sandbox.lgo.markets
www.adop.co.jp
blog.lgo.markets
www.donalrafferty.com
sni214014.cloudflaressl.com
www.seoofseas.com.br
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
exchange-api.exchange.lgo.markets
market-data.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
account-api.exchange.lgo.markets
account-api.sandbox.lgo.markets
www.school4one.com
docs.puzzlemazing.online
account-api.exchange.lgo.markets
sni214014.cloudflaressl.com
sni.cloudflaressl.com
support.lgo.markets
ciateacademico.com
www.strikeuptheatre.co.uk
www.kadauters.be
sni214014.cloudflaressl.com
deporteconprincipios.com
support.lgo.markets
lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni.cloudflaressl.com
app.exchange.lgo.markets
sni214014.cloudflaressl.com
exchange-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
www.escaperoomwaiver.com
sni214014.cloudflaressl.com
exchange-api.exchange.lgo.markets
exchange-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com
exchange-api.sandbox.lgo.markets
market-data.lgo.markets
tagesklinik-rosenthal.de
blog.lgo.markets
sni214014.cloudflaressl.com
*.lgo.markets
blogs.lgo.markets
account-api.sandbox.lgo.markets
sni214014.cloudflaressl.com
sni214014.cloudflaressl.com

Certificate

The complete raw certificate details for exchange-api.exchange.lgo.markets in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309540875006803443684848063673908283870044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 12:58:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 12:58:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange-api.exchange.lgo.markets'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816346742152682136320483887803083844865364563355596760441663520875060196804081761725360254607387611247340657066348076945634425343157029088003493468856119553766747851482282044521341494926181196884473761086391711555616802074004577703805550445028114676489924982323669677239503317476735149326205704888999464851422812517124836513078876284536913068182704854929610724498503922392604976459742350453218433239841375972931324645275267299913821505430236418767281081104822930678120774593517365800610529710090738184896650991095292170635951531219991809543260543105184618805724957124509127387981957643662931204128692555242417259694518960581122684461738058488059295573700190884291534997656485630228848874564680342508666362331098961883909093089902983713456677761494024436524320347448035271016018318328577429290380713037534794313467355446994296482232953877215509094278860678765705413565161791070303910554137387592962497348155839845114288214594026923522558813147737640263282695081657785354856121819028779165939234702814536437863473501727219263908122897620375045503779457267795182917539147081922103551533316894541131472431213664150354290872563860635613536386108815689464180443423394370732076326979219840321868616833846199004283529034591093808563747039539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							246df535415ecdcbc46d29ee90b6750265b448fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange-api.exchange.lgo.markets'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170d956761f0000040300473045022100b5adb74e02935938bce1b013259e60f989322edf696da097a107e86475973a01022060ace80aec543b3963e810566184aceb99be27362843a235ba0ed3833435a511007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d95676120000040300483046022100bfd128b2da693bc2f894e56263866c1ce1333afab449edabe89be8e489659d76022100f305fbf5b3a6b7d0f3e5aa2032f115d9ac6087ef6327acc9470c073ae4502e17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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