legal-backoffice.fifa.org

Issued by R3

About this certificate

This digital certificate with serial number 04:28:b1:0b:aa:b8:36:6d:df:45:f7:1b:bf:d8:cd:1b:5f:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legal-backoffice.fifa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:28:b1:0b:aa:b8:36:6d:df:45:f7:1b:bf:d8:cd:1b:5f:d9
Serial Number (int): 362295772337002358658870127866573062103001
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:41:d5:ec:c3:cf:50:3f:44:80:c3:da:af:fe:a6:2e:ac:5b:d2:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:da:f7:e6:6a:58:88:e7:18:53:83:8b:64:2d:af:78:66:e8:12:a5
Fingerprint (sha256): 69:b3:cb:26:40:75:f1:36:1c:16:1a:2d:5b:ce:a3:d1:d5:45:28:0f:3a:37:66:cb:a1:d0:ec:8d:14:96:f4:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate legal-backoffice.fifa.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legal-backoffice.fifa.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legal-backoffice.fifa.org

Other certificates including the domain name fifa.org

(limited to 100 certificates)
mi.fifa.org
cargo.fifa.org
mail.fifa.org
*.xtm-intl.com
querydb.fifa.org
webmail.fifa.org
sip.fifa.org
sts.fifa.org
sentry.fifa.org
*.fifa.org
owa.fifa.org
*.ifes-uat.fifa.org
sentry2.fifa.org
*.fifa.org
sts.fifa.org
reg.fifa.org
cargo.fifa.org
sam.fifa.org
portal.fifa.org
*.fifa.org
eptest.fifa.org
survey.fifa.org
portal.fifa.org
fqp.fifa.org
login-dev.fifa.org
survey.fifa.org
survey.fifa.org
*.fifa.org
*.fifa.org
webmaillight.fifa.org
survey.fifa.org
mi.fifa.org
sentry2.fifa.org
turftender.fifa.org
reg.fifa.org
tmscms.fifa.org
webmaillight.fifa.org
share.fifa.org
forward.fifa.org
survey.fifa.org
portal.fifa.org
mi.fifa.org
survey.fifa.org
querydb.fifa.org
survey.fifa.org
survey.fifa.org
translation.fifa.org
*.apps-u.fifa.org
turfmaintenance.fifa.org
testforward.fifa.org
*.ifes2-ibm.fifa.org
reg.fifa.org
sts.fifa.org
owalight.fifa.org
cargo.fifa.org
translation-request.fifa.org
epuat.fifa.org
*.fifa.org
tmscms.fifa.org
guest.fifa.org
*.ifes2-dev.fifa.org
survey.fifa.org
mail.fifa.org
*.fifa.org
webmail.fifa.org
tmscms.fifa.org
survey.fifa.org
legal-backoffice.fifa.org
apps.fifa.org
portal.fifa.org
sts.fifa.org
match.fifa.org
input.fifa.org
*.apps-u.fifa.org
mail.fifa.org
reg.fifa.org
translation-uat.fifa.org
*.xtm-intl.com
ifes2-prd.fifa.org
sni.cloudflaressl.com
turfmaintenance.fifa.org
querydb.fifa.org
match.fifa.org
accreditation.fifa.org
tmscms.fifa.org
*.fifa.org
sip.fifa.org
*.ifes2-tst.fifa.org
pmkt.fifa.org
sip.fifa.org
*.fifa.org
turfmaintenance.fifa.org
survey.fifa.org
*.xtm-intl.com
webmaillight.fifa.org
*.ifes2.fifa.org
tfs.fifa.org
webmail.fifa.org
survey.fifa.org
*.ifes2-uatrc.fifa.org

Certificate

The complete raw certificate details for legal-backoffice.fifa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq65lkF+GJAyk+dZg4km0
3mNy5wfPE5VmcOC6yJWYYUwGyZSw5O8WEirYTiJG8gfEPuW9QDDMiLmbCQr491X4
LTHchwrFAyqXF0ybXvMl3y+Fp+IIBdD3XJIVyejfHS2zYE/xhD68+dbF9KaMIgBg
TPbiNzuf3EeaN69fxGJ5dFaoLBKLKHsGZdzaURw9Jsw2jmVgxyPslAdkxHnQEeCQ
6L7sz8fmONRd1NQrwMH9ZwJpKIu8IRL4r5YzUHqEwNseQwdKXMWP/6bCzoGk6QEm
W4WxIOBFxe5X1YbPlLKcKpYgLGqmHwMVWYXakIqOZ7H1v0R9gt1B2vPnb9g9hHJc
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362295772337002358658870127866573062103001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 16:24:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-15 16:24:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legal-backoffice.fifa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21672748384032735630901615819649800828794998405015082255431150136098988409233985204730915230203011520531793608493991412112523005052606412843505724069546752904850646044281088951289108765308756376948499368517486527055628856581784537092788152602060734479170689209097454789539736005365152029681148469264959145018943219165935607363139562777157013944409967710252477618057386324140378408025491528373502947440227800317680833723088246939412096085226564169831280471190608695121161768531791263019386807365609089193263002093043120599767198377480988727959413723402219595486664215584180480567386983801223198848253498786229137857697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5641d5ecc3cf503f4480c3daaffea62eac5bd21a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal-backoffice.fifa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186f099951b0000040300473045022100d5aca910d0f9fbe299d706303cd71dbacb2cc672626baafd0cdf022f32fe256202205fdfb85cf0aa97da8957fca8523c10a7ad617de2391cbaeea453e271c0a457f4007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186f099957b000004030048304602210087bc8ede761b7138fad83ecf11023e3aa657994f5654f9ddc9e580845b82d4b6022100d827c5ac40b9fc38d6e797bfff7ccd7b778e20545af257c57006c51cd60c673e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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