loftinequip.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:5d:5c:81:0d:82:32:e3:be:f9:70:ba:08:bc:84:a6:5b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loftinequip.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:5d:5c:81:0d:82:32:e3:be:f9:70:ba:08:bc:84:a6:5b
Serial Number (int): 308079640575869391371494622312396835038811
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:e9:0a:fc:7a:51:35:5c:71:7b:9a:27:a1:6a:fe:35:d0:62:6f:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:01:d4:91:74:ef:07:e2:34:78:0b:6e:b4:f0:20:d5:34:b2:74:ff
Fingerprint (sha256): 7b:9d:a6:61:c6:31:31:29:a0:a2:a1:20:1a:fb:a5:1f:17:fa:48:96:d2:ef:9d:b0:75:81:2e:4e:09:7a:46:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loftinequip.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loftinequip.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loftinequip.com
www.loftinequip.com

Other certificates including the domain name loftinequip.com

(limited to 100 certificates)
itservicedesk.locknet.com
itservicedesk.locknet.com
mail.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
www.loftinequip.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
mail.loftinequip.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
mail.loftinequip.com
srv-lecadfs.loftinequip.com
itservicedesk.locknet.com
loftinequip.com
loftinequip.com
loftinequip.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
loftinequip.com
loftinequip.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
helpdesk.loftinequip.com
mail.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
webmail.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
mail.loftinequip.com
loftinequip.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
services.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
remote.loftinequip.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
loftinequip.com
loftinequip.com
itservicedesk.locknet.com
loftinequip.com

Certificate

The complete raw certificate details for loftinequip.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308079640575869391371494622312396835038811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 09:59:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 09:59:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loftinequip.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749735520218724190497167470833558429187108474639652049987139778891681741515313162384615148617818550531130541771959925411848574910831122695012292762799973255869580270340557246613665793658699205417511597690255374349613246035588033375312737098927226455684111057642524827473212088221225826759112558849438954018529049272565865485519990094776067276108053437666255129432045623449522224190823579608052835309520461458797970183125779610653187017864633781043635006020737294774279793199784387126213950344973504024383278110437060306467326497862197486031584861523034016542038627402292040429347843914859073988779190302335470183373825573505357780523281799273644910104162779740964591181166592218892049713769129783146226610642949104118618775100939805398124574066213507335374306222072054114392553211649713438681815782027657453769677539076235469006069993558561772915163986949782929015577973569949291331219620688421830565725709867751643095307701304775643891599807366912893988813905683516210585328420372235519267114063874816321227307605538097877626054278869914664318099189381143518868884190852124475150300840685490965767647449297382685042301832077996262957245170613177620831318939498111095616147904126358624962589203238851490330417948470655484886853332841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4e90afc7a51355c717b9a27a16afe35d0626f49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loftinequip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loftinequip.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016af8f203a00000040300473045022007fb7a2f342d79486063b18e1c8051cc24e95946f10487dbb12f4d37089fb2f4022100fd6cedd7bc3fa903e3d85825867f31901cfea4e986f5de4f96c81090f3fa22fc007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af8f2038e0000040300483046022100b7632a90af3695b9081eaeb3e4095e5349a04d5db8ef39d167aeae33463deff0022100ca8d1c0e3bc8dda6a0f9b2ca7abddb15e4ce211a9df9576cacce6dfd9f3a0b6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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