sandbox-dev.apis.lllext.com

- Lululemon Athletica Canada Inc. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 67:26:6d:75:04:db:87:bb:23:51:09:f4:a6:69:9c:24 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lululemon Athletica Canada Inc.

Organization: Lululemon Athletica Canada Inc.
State / Province: British Columbia
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 67:26:6d:75:04:db:87:bb:23:51:09:f4:a6:69:9c:24
Serial Number (int): 137110010900315806325322134225177648164
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ec:bf:71:62:d3:e5:e3:91:99:b6:90:31:77:4e:66:1f:b5:44:39:fd
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): e0:7f:4a:19:c0:39:61:d6:28:ef:0d:92:9e:83:a6:a0:03:17:2c:f5
Fingerprint (sha256): 53:4d:13:58:86:cf:dc:e0:0f:d0:e1:5a:9d:3e:2d:8e:d0:cc:24:4a:06:a7:02:17:87:4a:c0:af:e2:e5:d4:95

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sandbox-dev.apis.lllext.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sandbox-dev.apis.lllext.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sandbox-dev.apis.lllext.com
www.sandbox-dev.apis.lllext.com

Other certificates including the domain name lllext.com

(limited to 100 certificates)
*.np.rcsvcs.lllext.com
prod.apis.lllext.com
prod.apis.lllext.com
lma-prd.us-west-2.k8s.lllext.com
preview.apis.lllext.com
ek8s-sbx.us-east-1.k8s.lllext.com
prd-rmcosting.prd-product-systems.aws.lllext.com
ngc-prd.us-west-2.k8s.lllext.com
ngc-npd.us-east-1.k8s.lllext.com
lma-npd-main.us-west-2.k8s.lllext.com
qa-plm-svc.aws.lllext.com
stg-plm-svc.aws.lllext.com
ek8s-npd.us-west-2.k8s.lllext.com
stg-plm-svc.aws.lllext.com
ek8s-npd.us-east-1.k8s.lllext.com
prod-mtls.apis.lllext.com
ek8s-npd-rancher.us-west-2.k8s.lllext.com
sandbox-dev.apis.lllext.com
api.npd-nettools.lllext.com
dev-mtls.apis.lllext.com
stage.apis.lllext.com
ek8s-sbx.us-west-2.k8s.lllext.com
stage-mtls.apis.lllext.com
ek8s-prd.us-east-1.k8s.lllext.com
preview.apis.lllext.com
sandbox-mtls.apis.lllext.com
ngc-prd.us-east-1.k8s.lllext.com
prod-plm-svc.aws.lllext.com
api.nettools.lllext.com
ek8s-npd.us-west-2.k8s.lllext.com
cmmrfidinnovation.aws.lllext.com
prod.apis.lllext.com
api.plim-dev.aws.lllext.com
prd-psci.prd-product-systems.aws.lllext.com
ngc-npd.us-west-2.k8s.lllext.com
dev-psci.npd-product-systems.aws.lllext.com
sandbox.apis.lllext.com
preview-mtls.apis.lllext.com
prod.apis.lllext.com
stage.apis.lllext.com
ek8s-prd.us-west-2.k8s.lllext.com
ek8s-npd.us-east-1.k8s.lllext.com
dev.apis.lllext.com
api.plim-qas.aws.lllext.com
mock.apis.lllext.com
mock.apis.lllext.com
test.apis.lllext.com

Certificate

The complete raw certificate details for sandbox-dev.apis.lllext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WjCyG8Qrccen9bbcWol
FTNNCU+XXAlBBxapn++QYjXLOJQf0afTqIGATmc9U7tx6E3PeehFDEXMkTP9NC4l
fudsfz0q2bn16Dybi6pKiRtM0NaP2OLMvf30hEtYcVLjYnncXCH2162Dw+hEysxY
kkyJmTzTTPo9xmetdENQ/6LMk/PzaFLmaIsQ+dTGVOpKp6QmXFDP7ep8ACfr0F38
V9r0gRGN8wthk0/pc0cAPhGm3lekqqP7hjO/ofi6QzqhqRKgBJ4jTFlw6NHQrtBd
VbUCbxhw8S5Opa6TFzXBOtCZ4LpVX2OMdv0N+SuaONWER8Q5YNmjjgUeD7XFH9ZW
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137110010900315806325322134225177648164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lululemon Athletica Canada Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandbox-dev.apis.lllext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27445371688440904806716184842705804840334307187508154356599818547049014310745540176843618478881594157931331775947333295128352319016718379030277447278295144973311895320176688643296078173198565062738516555078893583036712793286553242777734525001375083034548872700780948114092017437629210007899838050654498985992078435695367366010138119652510211427947177863365505534839784320909538294900429404831503119677666458693216326646511511782466765384871814853702163703865377265052964259227772146054800753995886751179969160615757386731883681016984924596183114275309966477979488321553654136100052849289979187791452937484100886222353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecbf7162d3e5e39199b69031774e661fb54439fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-dev.apis.lllext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandbox-dev.apis.lllext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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