nomnom-prod-api-shield.elpolloloco.com

Issued by E1

About this certificate

This digital certificate with serial number 04:4b:5e:b4:d1:52:1b:22:1c:4d:71:b5:9e:d7:38:ea:b3:3b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nomnom-prod-api-shield.elpolloloco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4b:5e:b4:d1:52:1b:22:1c:4d:71:b5:9e:d7:38:ea:b3:3b
Serial Number (int): 374096207536678403529041478866182490207035
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 73:8e:86:12:9b:7e:06:04:bf:4a:4c:e9:76:f7:ae:b2:56:e8:5d:1b
AuthorityKeyId: 5a:f3:ed:2b:fc:36:c2:37:79:b9:52:30:ea:54:6f:cf:55:cb:2e:ac

Fingerprint (sha1): 0f:2b:b2:a1:05:a6:9e:66:7f:6b:1b:a4:de:82:f4:a3:59:24:be:77
Fingerprint (sha256): 54:10:11:ce:47:dc:7b:e2:2f:01:f8:08:f2:58:87:b1:92:25:59:c0:de:1a:34:03:d6:c6:e1:68:1f:55:bb:42

Issuing Certificate URL: http://e1.i.lencr.org/

Revocation information

OCSP Server: http://e1.o.lencr.org

Check the revocation status for certificate nomnom-prod-api-shield.elpolloloco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nomnom-prod-api-shield.elpolloloco.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nomnom-prod-api-shield.elpolloloco.com

Other certificates including the domain name elpolloloco.com

(limited to 100 certificates)
*.elpolloloco.com
links.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
leapfrog-ssl-34.gcs-web.com
work.elpolloloco.com
imperva.com
imperva.com
flybuy.radiusnetworks.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
movableink.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
order.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
*.elpolloloco.com
mymail.elpolloloco.com
mail.elpolloloco.com
imperva.com
pickup.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
nomnom-prod-api-shield.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
imperva.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
order.elpolloloco.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
messaging.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
epl-exch-mb1.epl.lan
leapfrog-ssl-34.gcs-web.com
punchh.flyb.uy
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
mail.elpolloloco.com
order.elpolloloco.com
mymail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
*.elpolloloco.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
fhf.shopthefastlane.com
work.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
flybuy.radiusnetworks.com

Certificate

The complete raw certificate details for nomnom-prod-api-shield.elpolloloco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAExDp/zfA6t9sIoXA2eOrwduD7GKU5
ZqhWCftnRScqkrHNUhA4Q2nz7keWHUA4oED5AAsbzsg3/1zA5FUfPd1+jQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374096207536678403529041478866182490207035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'E1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 17:09:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 17:09:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nomnom-prod-api-shield.elpolloloco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c43a7fcdf03ab7db08a1703678eaf076e0fb18a53966a85609fb6745272a92b1cd5210384369f3ee47961d4038a040f9000b1bcec837ff5cc0e4551f3ddd7e8d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							738e86129b7e0604bf4a4ce976f7aeb256e85d1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5af3ed2bfc36c23779b95230ea546fcf55cb2eac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://e1.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomnom-prod-api-shield.elpolloloco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018da8cf3ee90000040300463044022065b75f46bc376d34b196f5405574d57a1d7baf4037647cdfa0145a6f65d4ad43022059e40455647ce70bf9860a68863801309be60e61b4c4477030fd54fc92818f04007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018da8cf40a30000040300463044022070a00d2a3403c4896dc19370fb5b57da6b25683fd7ad6f22c69c68fbce7a7c620220297696adfcb96eef0c4281ca293e7172db2fc105a94310c845e097cd89aafbfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2921422772351014560084306223528066428945976714390259571200765813213155016713217843730085745816840293200300679507998
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 12816787895463558399188092933541454234685468174982723592214624999622215548259604693041249584515221700124312848527247