www.cargolux.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e1:15:e8:17:c7:d4:88:21:c8:75:ce:09:f9:ce:a5:f3:2d was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cargolux.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e1:15:e8:17:c7:d4:88:21:c8:75:ce:09:f9:ce:a5:f3:2dSerial Number (int): 337929509235602158152328331361955900420909
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bc:67:b5:8e:3f:ba:82:e5:4d:99:75:ae:7c:78:63:b7:24:96:a0:62
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 76:48:6f:b6:a0:2a:67:9a:f7:ef:dc:be:64:6f:af:c2:9c:bc:a0:04
Fingerprint (sha256): 52:e8:69:c8:95:f0:71:9a:8c:bc:10:04:b2:e7:e2:ab:5d:53:6a:e0:2a:7a:55:94:92:34:1d:66:fd:79:78:f7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.cargolux.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cargolux.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cargolux-italia.com
cargolux.com
www.cargolux-italia.com
www.cargolux.com
cargolux.com
www.cargolux-italia.com
www.cargolux.com
Other certificates including the domain name cargolux.com
(limited to 100 certificates)
www.cargolux.com
cargolux.com
*.cargolux.com
www.cargolux.com
sip.champ.aero
www.cargolux.com
www.cargolux.com
CVZPWEUASAVAS01.cargolux.com
anniversary.cargolux.com
www.cargolux.com
sync.cargolux.com
cargolux.com
*.cargolux.com
cargolux.com
cargolux.com
cargolux.com
cargolux.com
sync.cargolux.com
*.cargolux.com
cargolux.com
sync.cargolux.com
www.cargolux.com
sip.champ.aero
sync.cargolux.com
www.cargolux.com
sync.cargolux.com
sip.champ.aero
www.cargolux.com
*.cargolux.com
www.cargolux.com
*.cargolux.com
sync.cargolux.com
sync.cargolux.com
sip.champ.aero
anniversary.cargolux.com
sync.cargolux.com
www.cargolux.com
*.cargolux.com
cargolux.com
*.cargolux.com
www.cargolux.com
sip.champ.aero
www.cargolux.com
www.cargolux.com
CVZPWEUASAVAS01.cargolux.com
anniversary.cargolux.com
www.cargolux.com
sync.cargolux.com
cargolux.com
*.cargolux.com
cargolux.com
cargolux.com
cargolux.com
cargolux.com
sync.cargolux.com
*.cargolux.com
cargolux.com
sync.cargolux.com
www.cargolux.com
sip.champ.aero
sync.cargolux.com
www.cargolux.com
sync.cargolux.com
sip.champ.aero
www.cargolux.com
*.cargolux.com
www.cargolux.com
*.cargolux.com
sync.cargolux.com
sync.cargolux.com
sip.champ.aero
anniversary.cargolux.com
sync.cargolux.com
www.cargolux.com
*.cargolux.com
Certificate
The complete raw certificate details for www.cargolux.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISA+EV6BfH1IghyHXOCfnOpfMtMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDExNzA3MDZaFw0y MDA2MzAxNzA3MDZaMBsxGTAXBgNVBAMTEHd3dy5jYXJnb2x1eC5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEeaLpavco7EeuYTgqrY0P5g6KbOEj FwcQP30ZrKZVD8gjuB+tyD1/e8B61Qjh8cgz2oFiboXEnjYd1leBfMXbtIeSGUYn bIeBV1cNJP4dp/BX3prqcheiMC588mWyRWLejwhpX/+eKedTGQya0UQ8tZpDS6Y/ qnP/F9TsE0+i95U6ethMfrkpKGxqEQB3PCvdbsQWYCuVhxj/S+7DBk5P3CXZmXV2 Q0l6m73Zgt6QNayXkVmwGCCF/Z6CfMy6eREXj/i54L08iWDfSXsxVAjzbA9eb/US NB7Kw+P/8lXW65+fhOtrg9CX2TIipCWQGDV7XXeRH+UhUZZsl/2Pbw0vAgMBAAGj ggKgMIICnDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLxntY4/uoLlTZl1rnx4Y7ck lqBiMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0 Lm9yZy8wVwYDVR0RBFAwToITY2FyZ29sdXgtaXRhbGlhLmNvbYIMY2FyZ29sdXgu Y29tghd3d3cuY2FyZ29sdXgtaXRhbGlhLmNvbYIQd3d3LmNhcmdvbHV4LmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB2AOcS8rA3fhpi+47JDGGE8ep7N8tWHREmW/Pg80vyQVRuAAABcTbs4tkA AAQDAEcwRQIhAOydrzaN7Ul6QpqMdePhQX31m2Yj8ou5hmRPwAXeqoUOAiA1KLuH PoXdxBJhkgnFixFNWpo3wuBs4xkI+IDN3owxnQB1ALIeBcyLos2KIE6HZvkruYol IGdr2vpw57JJUy3vi5BeAAABcTbs4rkAAAQDAEYwRAIgKpqaim5r3/m5rFsMH66w OFQtU32l4k2qEbNrqAQK0AwCIHUxJ/aCPw6a5+zBnom/b2Q4MbaB2K3DlDu8EQv8 ysIaMA0GCSqGSIb3DQEBCwUAA4IBAQCGR0PlSqG4cGG7jKOfRfldCD4jpkS+qO4E xq+vD5A+jru/JSdYOqFMT7tBAiRwe3reQXB08zO/wJSM9PuQi7tdpNbm7Jjh0Kv9 qe2elI/fmnhdJJyCJIe8x9KxxA2/cqFIjREIrV/Dk5El3CGZ7ZGQyF0DJZfS6kKc fyl3yv7S2PdQN5unLN8YduXHqKVYKA5nTS5Rah2spMkaXnWpBEmWjrf/SeFk5Yjh GXLkyxgzPnLNCpUeUQZ8y3yQ4pLAA+QQY+pI8j4IVVoZAOkRzvBl7InYnvHmu1DB TMXTW4JgGLjIrftj+QoBzTf0IGkVUf74aSsqt0FTV3XTW+FEa2zc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHmi6Wr3KOxHrmE4Kq2N D+YOimzhIxcHED99GaymVQ/II7gfrcg9f3vAetUI4fHIM9qBYm6FxJ42HdZXgXzF 27SHkhlGJ2yHgVdXDST+HafwV96a6nIXojAufPJlskVi3o8IaV//ninnUxkMmtFE PLWaQ0umP6pz/xfU7BNPoveVOnrYTH65KShsahEAdzwr3W7EFmArlYcY/0vuwwZO T9wl2Zl1dkNJepu92YLekDWsl5FZsBgghf2egnzMunkRF4/4ueC9PIlg30l7MVQI 82wPXm/1EjQeysPj//JV1uufn4Tra4PQl9kyIqQlkBg1e113kR/lIVGWbJf9j28N LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337929509235602158152328331361955900420909 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 17:07:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 17:07:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cargolux.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24802688904979828577471253773063928023463652789701471765638962847792881699215462924065674668151659817471367864667989120380131173135759655903805116456857907790375795390199797624093666412202433723030857169546384627460738859524800884516616343749789921155001723165609617028879254132519084359082668617160686455495177755341526651197283377726774574483052087178723385783061041265025395865237668468326336741545395157348292044849296563215877881137486547156323825587596903130956712574163981625322629722037215789225317367173816548267556534385640401002642680342304349631243149743608041880427079446990816421721775397414256075803951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bc67b58e3fba82e54d9975ae7c7863b72496a062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargolux-italia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargolux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargolux-italia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargolux.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017136ece2d90000040300473045022100ec9daf368ded497a429a8c75e3e1417df59b6623f28bb986644fc005deaa850e02203528bb873e85ddc412619209c58b114d5a9a37c2e06ce31908f880cdde8c319d007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017136ece2b9000004030046304402202a9a9a8a6e6bdff9b9ac5b0c1faeb038542d537da5e24daa11b36ba8040ad00c0220753127f6823f0e9ae7ecc19e89bf6f643831b681d8adc3943bbc110bfccac21a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00864743e54aa1b87061bb8ca39f45f95d083e23a644bea8ee04c6afaf0f903e8ebbbf2527583aa14c4fbb410224707b7ade417074f333bfc0948cf4fb908bbb5da4d6e6ec98e1d0abfda9ed9e948fdf9a785d249c822487bcc7d2b1c40dbf72a1488d1108ad5fc3939125dc2199ed9190c85d032597d2ea429c7f2977cafed2d8f750379ba72cdf1876e5c7a8a558280e674d2e516a1daca4c91a5e75a90449968eb7ff49e164e588e11972e4cb18333e72cd0a951e51067ccb7c90e292c003e41063ea48f23e08555a1900e911cef065ec89d89ef1e6bb50c14cc5d35b826018b8c8adfb63f90a01cd37f420691551fef8692b2ab741535775d35be1446b6cdc