lp1-mobile-logon.lafargeholcim.com
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number b8:ee:5d:8d:b1:24:23:72:8f:19:3f:3f:15:94:7c:cc was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lp1-mobile-logon.lafargeholcim.com
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): b8:ee:5d:8d:b1:24:23:72:8f:19:3f:3f:15:94:7c:ccSerial Number (int): 245815615366842399170463056019070418124
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 6d:e0:7d:62:cb:02:99:e6:e8:64:90:c9:a3:c4:e8:73:31:ae:fe:13
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): 00:26:ce:f8:06:f3:4b:43:a7:65:86:12:02:ce:44:c4:8a:ac:bf:aa
Fingerprint (sha256): 52:ce:05:a9:fd:b4:8e:c0:e1:70:c8:90:97:e6:0c:33:9a:b8:4c:74:da:b6:f2:ee:d2:16:b0:f2:4f:64:b0:2d
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate lp1-mobile-logon.lafargeholcim.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lp1-mobile-logon.lafargeholcim.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lp1-mobile-logon.lafargeholcim.com
www.lp1-mobile-logon.lafargeholcim.com
www.lp1-mobile-logon.lafargeholcim.com
Other certificates including the domain name lafargeholcim.com
(limited to 100 certificates)
indwebiz.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
share.lafargeholcim.com
intranet.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
portal.zonda.lafargeholcim.com
fiori-mea.lafargeholcim.com
connect.lafargeholcim.com
lq3-logon.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
integrityline.holcim.com
jarvis.lafargeholcim.com
seawebiz.lafargeholcim.com
intranet.lafargeholcim.com
fiori-mea.lafargeholcim.com
jarvis.lafargeholcim.com
qa1-fiori.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
share.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
share.lafargeholcim.com
integrity.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
brandportal.lafargeholcim.com
jarvis.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
share.lafargeholcim.com
jarvis.lafargeholcim.com
vanity2.jiveon.com
financialreports.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
indwebiz.lafargeholcim.com
*.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
vanity2.jiveon.com
integrity.lafargeholcim.com
*.lafargeholcim.com
itemea.lafargeholcim.com
brandportal.lafargeholcim.com
share.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
itemea.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
itasia.lafargeholcim.com
portal.dev.zonda.lafargeholcim.com
integrity.lafargeholcim.com
share.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
portal.qa.zonda.lafargeholcim.com
intranet.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
share.lafargeholcim.com
indwebiz.lafargeholcim.com
share.lafargeholcim.com
*.lafargeholcim.com
vanity2.jiveon.com
www.holcim.com
vanity2.jiveon.com
connect.lafargeholcim.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
intranet.lafargeholcim.com
itemea.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
football.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
share.lafargeholcim.com
intranet.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
portal.zonda.lafargeholcim.com
fiori-mea.lafargeholcim.com
connect.lafargeholcim.com
lq3-logon.lafargeholcim.com
vanity2.jiveon.com
intranet.lafargeholcim.com
integrityline.holcim.com
jarvis.lafargeholcim.com
seawebiz.lafargeholcim.com
intranet.lafargeholcim.com
fiori-mea.lafargeholcim.com
jarvis.lafargeholcim.com
qa1-fiori.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
share.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
connect.lafargeholcim.com
dv1-fiori.lafargeholcim.com
share.lafargeholcim.com
integrity.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
brandportal.lafargeholcim.com
jarvis.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
intranet-demo.lafargeholcim.com
share.lafargeholcim.com
jarvis.lafargeholcim.com
vanity2.jiveon.com
financialreports.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
indwebiz.lafargeholcim.com
*.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
vanity2.jiveon.com
integrity.lafargeholcim.com
*.lafargeholcim.com
itemea.lafargeholcim.com
brandportal.lafargeholcim.com
share.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
itemea.lafargeholcim.com
*.ideastoaction.lafargeholcim.com
itasia.lafargeholcim.com
portal.dev.zonda.lafargeholcim.com
integrity.lafargeholcim.com
share.lafargeholcim.com
vanity2.jiveon.com
itasia.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
portal.qa.zonda.lafargeholcim.com
intranet.lafargeholcim.com
itasia.lafargeholcim.com
brandportal.lafargeholcim.com
vanity2.jiveon.com
brandportal.lafargeholcim.com
lp1-mobile-logon.lafargeholcim.com
intranet.lafargeholcim.com
vanity2.jiveon.com
*.lafargeholcim.com
share.lafargeholcim.com
indwebiz.lafargeholcim.com
share.lafargeholcim.com
*.lafargeholcim.com
vanity2.jiveon.com
www.holcim.com
vanity2.jiveon.com
connect.lafargeholcim.com
connect.lafargeholcim.com
brandportal.lafargeholcim.com
intranet.lafargeholcim.com
itemea.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
vanity2.jiveon.com
vanity2.jiveon.com
football.lafargeholcim.com
connect.lafargeholcim.com
vanity2.jiveon.com
Certificate
The complete raw certificate details for lp1-mobile-logon.lafargeholcim.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIRALjuXY2xJCNyjxk/PxWUfMwwDQYJKoZIhvcNAQELBQAw gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD QTAeFw0yMDAyMTYwMDAwMDBaFw0yMjAzMTUyMzU5NTlaMC0xKzApBgNVBAMTImxw MS1tb2JpbGUtbG9nb24ubGFmYXJnZWhvbGNpbS5jb20wggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDGZWsJYpX8PPyTCt2rD5EYAcxkBD5U/mynW4HKvgvd sLPs4TKMunCad6KmkAEDM/miUBOp6MBlIjsQtdcMvYaLv5hnhyf3eI7/Kppl0diA emUSCc4SW0PwNyRe1uv+LyBRlrIDhuGdoO8Zkcyv/DJ3nhz0+yNCMzvfc56y3JYx 4l7W/ej6LBt71K+zQ4BTOm11aAX4G+nnK/vRWJLO6fz+gFmHXnrSZlfLANwBcRiW 7Kbeu0NRXpW2xf2glkQz2nflE/Y9TjQyGXuklLhXe5YG/bdd6sksPvVf2zNLk1A7 Ug4fPrGTEwz4bc1MzVa1Y/XlkzDcVnvXRh9OkemWqpGOgQf/tVDx2OobibOLrikI nO9ihVBEMV60GKGlRprBvZtllAqkavKfhczT5K/Y6R1BFVwmgj1umhIRKGFhDAoi lnFn6m8ICY887W71rni0C7Ef0bh7qndrCxpo89WGTmM+fYD6mYv4lNogXt+XsipB iP+5Ab21iNVQQ0bMtBiNFKwRvYDYADlEuPyNqvnBrLzSunyLXtOFeorEYyPhHm29 LTzeZcF9k1/v/7mjey/9OKRCg/D85V/MUwvhd+hSWoX0GvYTLxnrRrkaJ7oAg1LR f0WlKN6X1GGYBh8bsRDpJuBYzPPmM6VU6qx2LiLt60mQ6m2Dw2d1bYlSlJi5vDWA XwIDAQABo4IDLTCCAykwHwYDVR0jBBgwFoAUjYxexFStiuF36Zv5mwXhuAGNYeEw HQYDVR0OBBYEFG3gfWLLApnm6GSQyaPE6HMxrv4TMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV HSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj dGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUHAQEEeDB2ME8GCCsGAQUF BzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FEb21haW5WYWxp ZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz cC5zZWN0aWdvLmNvbTBVBgNVHREETjBMgiJscDEtbW9iaWxlLWxvZ29uLmxhZmFy Z2Vob2xjaW0uY29tgiZ3d3cubHAxLW1vYmlsZS1sb2dvbi5sYWZhcmdlaG9sY2lt LmNvbTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYARqVV63X6kSAwtaKJafTz fREsQXS+/Um4havy/HD+bUcAAAFwTvWH4wAABAMARzBFAiEAlfAdlMd/s4YxCdW3 6P3X5NWpUIXoE7DYCaxvnIlp9pgCIBoLoAfh/UvYb/stFlEpROztBsWIHzCW2otx 9vf83oINAHcA36Veq2iCTx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAFwTvWI LwAABAMASDBGAiEAuZuu5nsIsl/uDlPECKoMRIdhkFr8LBXJa9+GpXB8r78CIQDz uopZnNKzjlu08p6LIMj8WszJejYu2udtDIKOtbERhAB2AEHIyrHfIkZKEMahOglC h15OMYsbA+vrS8do8JBilgb2AAABcE71h9AAAAQDAEcwRQIgVdkQYKcHBqCtkS17 0H8NZqEUKTBMp8lA9/PvItWxOTQCIQDfEUeU1T5XjTBOdVXYd1AUwL5OqnUBkZdH dMOIxv1KAjANBgkqhkiG9w0BAQsFAAOCAQEAEew8HkC/XCwMDpmBGYbCWfL72iCL M6c9cl6Q8vJ7QhHmwtBNFKO7JNbxoI3tv8IfBz3Pqr6en60O5LRSaDza6Q/2lu2k YSlLbodWbywFSIiiCrqoooAoJNkkSh3VWL9xrA6/JUMvEQq8bJSE22GxVulXNIK/ xwTy1IF6yo53/yignXGCKfunYBU3HExG0upfqVpeBNXS6j3Syf2Gd/Q4U5JuiWSy t0ZqcPL96xUY9ffRMWqu+Qvt4BJnuLy9zCBjimiYhnauP42TB6clwlR6qopQa2fN 6pNxYF3Ok2hr/VMJtdL3npD5fd2G/WBFyVyV3MULvHpRT/eyMiyTmA5PGw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxmVrCWKV/Dz8kwrdqw+R GAHMZAQ+VP5sp1uByr4L3bCz7OEyjLpwmneippABAzP5olATqejAZSI7ELXXDL2G i7+YZ4cn93iO/yqaZdHYgHplEgnOEltD8DckXtbr/i8gUZayA4bhnaDvGZHMr/wy d54c9PsjQjM733OestyWMeJe1v3o+iwbe9Svs0OAUzptdWgF+Bvp5yv70ViSzun8 /oBZh1560mZXywDcAXEYluym3rtDUV6VtsX9oJZEM9p35RP2PU40Mhl7pJS4V3uW Bv23XerJLD71X9szS5NQO1IOHz6xkxMM+G3NTM1WtWP15ZMw3FZ710YfTpHplqqR joEH/7VQ8djqG4mzi64pCJzvYoVQRDFetBihpUaawb2bZZQKpGryn4XM0+Sv2Okd QRVcJoI9bpoSEShhYQwKIpZxZ+pvCAmPPO1u9a54tAuxH9G4e6p3awsaaPPVhk5j Pn2A+pmL+JTaIF7fl7IqQYj/uQG9tYjVUENGzLQYjRSsEb2A2AA5RLj8jar5way8 0rp8i17ThXqKxGMj4R5tvS083mXBfZNf7/+5o3sv/TikQoPw/OVfzFML4XfoUlqF 9Br2Ey8Z60a5Gie6AINS0X9FpSjel9RhmAYfG7EQ6SbgWMzz5jOlVOqsdi4i7etJ kOptg8NndW2JUpSYubw1gF8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 245815615366842399170463056019070418124 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lp1-mobile-logon.lafargeholcim.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809385735619657605610082039946917259573265358643204430839483625782964624186930916621682643046016822560523706126515848673577157972844292066079831057558920584445129731681116872695491623729786338974051043971885109849470630334793568645395492790768746163181777426999002453005670734695264733765396887671841286089311335029307011254958812026434763946057111221467494509778198856116008742155767649052066613125660155451943729438820206636227279896599743347421157381982949142678583398849104432416843830184768451758529273708809370697138499470992225941695084278132860560184380920647693229720351292373670687546205844112373079995143677142769986332830140725968206693807636563011063264756219865901144065471630659848334856888874231178700405522781630140959985053248905106883791109186457240460581093798601810730286421704726441636485688524818545332667060053874646400399839338816388568652184469110297155788938129001503035368320743825180786113759492212692870448926528348755232923628050604353197220460430138897104555066551453375324704993164244788196429256766653459864357018620939715923640712100117673685463880318502145586314680726621948020558543292406175733963142818732987336886803508835069626535804052893822031845303611782389796194071487868947193168997482591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6de07d62cb0299e6e86490c9a3c4e87331aefe13 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp1-mobile-logon.lafargeholcim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lp1-mobile-logon.lafargeholcim.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 016900760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001704ef587e3000004030047304502210095f01d94c77fb3863109d5b7e8fdd7e4d5a95085e813b0d809ac6f9c8969f69802201a0ba007e1fd4bd86ffb2d16512944eced06c5881f3096da8b71f6f7fcde820d007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001704ef5882f0000040300483046022100b99baee67b08b25fee0e53c408aa0c448761905afc2c15c96bdf86a5707cafbf022100f3ba8a599cd2b38e5bb4f29e8b20c8fc5accc97a362edae76d0c828eb5b1118400760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001704ef587d00000040300473045022055d91060a70706a0ad912d7bd07f0d66a11429304ca7c940f7f3ef22d5b13934022100df114794d53e578d304e7555d8775014c0be4eaa750191974774c388c6fd4a02 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0011ec3c1e40bf5c2c0c0e99811986c259f2fbda208b33a73d725e90f2f27b4211e6c2d04d14a3bb24d6f1a08dedbfc21f073dcfaabe9e9fad0ee4b452683cdae90ff696eda461294b6e87566f2c054888a20abaa8a2802824d9244a1dd558bf71ac0ebf25432f110abc6c9484db61b156e9573482bfc704f2d4817aca8e77ff28a09d718229fba76015371c4c46d2ea5fa95a5e04d5d2ea3dd2c9fd8677f43853926e8964b2b7466a70f2fdeb1518f5f7d1316aaef90bede01267b8bcbdcc20638a68988676ae3f8d9307a725c2547aaa8a506b67cdea9371605dce93686bfd5309b5d2f79e90f97ddd86fd6045c95c95dcc50bbc7a514ff7b2322c93980e4f1b