checkout.lokmark.com

Issued by Trustwave Organization Validation CA, Level 2

About this certificate


This digital certificate with serial number 06:2a:15:7e:f0:ad:98:50:34:ff:0b:9f:41:34:2f:22:e3:58:07 was issued on by Trustwave Holdings, Inc. .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Lupon Ventures Ltd

Organization: Lupon Ventures Ltd
State / Province: SA
Locality: Sarajevo
Country: BA

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: SA
Locality: Sarajevo
Country: BA

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2a:15:7e:f0:ad:98:50:34:ff:0b:9f:41:34:2f:22:e3:58:07
Serial Number (int): 137470501862422648228867114341811903439001607
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 2c:a6:94:90:e1:fc:83:ef:7c:9d:3c:b3:fa:84:0c:f1:bd:b4:a6:bc
AuthorityKeyId: 5d:d9:96:9a:40:c7:27:cb:2c:9b:a2:ec:cf:19:ab:c8:af:cc:86:48

Fingerprint (sha1): 0a:26:b8:68:ed:6f:c2:53:b8:a2:84:26:68:60:19:49:8e:50:47:30
Fingerprint (sha256): 51:b7:06:73:68:e9:b9:0e:6b:92:12:ff:d8:5c:b4:3f:f7:43:7c:02:8b:d7:e5:38:88:9a:2c:20:26:d6:c0:a5


Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA_L2.crl

Check the revocation status for the current certificate on checkout.lokmark.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: checkout.lokmark.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgITBioVfvCtmFA0/wufQTQvIuNYBzANBgkqhkiG9w0BAQUF ADCBrjELMAkGA1UEBhMCVVMxETAPBgNVBAgTCElsbGlub2lzMRAwDgYDVQQHEwdD aGljYWdvMSEwHwYDVQQKExhUcnVzdHdhdmUgSG9sZGluZ3MsIEluYy4xNjA0BgNV BAMTLVRydXN0d2F2ZSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBDQSwgTGV2ZWwg MjEfMB0GCSqGSIb3DQEJARYQY2FAdHJ1c3R3YXZlLmNvbTAeFw0xMzA3MjQxNjMw MThaFw0xNTA3MjQyMjMwMThaMGkxHTAbBgNVBAMMFGNoZWNrb3V0Lmxva21hcmsu Y29tMRswGQYDVQQKDBJMdXBvbiBWZW50dXJlcyBMdGQxETAPBgNVBAcMCFNhcmFq ZXZvMQswCQYDVQQIDAJTQTELMAkGA1UEBhMCQkEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSiZM2xeYezLIRB36Ti1/6kmXNyNHWEiGTxNpunzyMc5lx PfdIt3kobLlUb39pYU8dEgghUM0k4YirDpAaaGrzX3jVTifCgF2RI2ja1evRHHEc lw7OOQ/UFLH5dzVSYtQwMrnVaJS39d4+9Lk/9lfcw54pBdqaMtUSeji+UyBW3Wzz JrlW3arDXmi/GPsHajUsl3YMAaEgS/p4Lrew3moubtseGtSG1qpCQe0rVWVl3YYo BemyjDX0+vAOaFvH4G1xEAczLxehxvQiDO4TuI2MYPQDNKG8J/wqAo3+j4NEa0Sf z92l62kMuSX113j8tkQK28hJLYVyRd38x9lqZpFRAgMBAAGjggFYMIIBVDAMBgNV HRMBAf8EAjAAMAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYB BQUHAwEwHQYDVR0OBBYEFCymlJDh/IPvfJ08s/qEDPG9tKa8MB8GA1UdIwQYMBaA FF3ZlppAxyfLLJui7M8Zq8ivzIZIMEgGA1UdIARBMD8wPQYPKwYBBAGB7RgDAwMD BAQDMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vc3NsLnRydXN0d2F2ZS5jb20vQ0Ew HwYDVR0RBBgwFoIUY2hlY2tvdXQubG9rbWFyay5jb20wNQYDVR0fBC4wLDAqoCig JoYkaHR0cDovL2NybC50cnVzdHdhdmUuY29tL09WQ0FfTDIuY3JsMDYGCCsGAQUF BwEBBCowKDAmBggrBgEFBQcwAYYaaHR0cDovL29jc3AudHJ1c3R3YXZlLmNvbS8w DQYJKoZIhvcNAQEFBQADggEBABOLfq6Y47DYeSzQ8NfWMjsmZjeA+waRXE94W6y6 cQQRmP/RXqIPmu2NpL35qj4Jje7+PH5OVPQwLXIIFRs04oqtYQDvwptJspK7+ZNy ubC5h0UKDcwFvhnK4QmBYUEPlhft3MZES7+xgDDNsEKqNOY59djB2XHZqnlpWIz1 Oby7NZH1rjVVvbaR95yDoy3o34lJUhOoQnAdRzjl12G0g1p5s8RpiSfWt0sLVRVJ t+Eien6KCpMnPRS8F9Sd6S1QkXZYvuSs1tjKB7NOiJIxSMkDoSF7L/EjaWAUMpdD jomPKaP6gZuEFNaoF1/9FdIGlcaWvLLbc9wboBwwjijaeU0= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0omTNsXmHsyyEQd+k4tf +pJlzcjR1hIhk8Tabp88jHOZcT33SLd5KGy5VG9/aWFPHRIIIVDNJOGIqw6QGmhq 81941U4nwoBdkSNo2tXr0RxxHJcOzjkP1BSx+Xc1UmLUMDK51WiUt/XePvS5P/ZX 3MOeKQXamjLVEno4vlMgVt1s8ya5Vt2qw15ovxj7B2o1LJd2DAGhIEv6eC63sN5q Lm7bHhrUhtaqQkHtK1VlZd2GKAXpsow19PrwDmhbx+BtcRAHMy8Xocb0IgzuE7iN jGD0AzShvCf8KgKN/o+DRGtEn8/dpetpDLkl9dd4/LZECtvISS2FckXd/MfZamaR UQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 137470501862422648228867114341811903439001607 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation CA, Level 2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-24 16:30:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-24 22:30:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'checkout.lokmark.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lupon Ventures Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sarajevo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26577884830717061494575716346879290328503452041791802460553924715404249299835451837993321215213946903971610600054443544789360559454395110443782860553852515585134485389023248820414458624823270017291827351991198870476030021779664953010417795056093944015152941452442621859603675980521432315322213065234634797560894709833978573767793070589459506043587750766422489235427742946391816480934998213489234765491124529286954061606709407561593765699308029716171910352799118838761721030944131887502478525928091592030688121344661560333533878781986385104087733140944223813792804190869178642608975800045088414912345414166498226114897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ca69490e1fc83ef7c9d3cb3fa840cf1bdb4a6bc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5dd9969a40c727cb2c9ba2eccf19abc8afcc8648 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.lokmark.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA_L2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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