loftinequip.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:86:79:a0:3e:ee:75:db:88:33:43:30:c6:dd:ec:d1:86 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loftinequip.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:86:79:a0:3e:ee:75:db:88:33:43:30:c6:dd:ec:d1:86
Serial Number (int): 312898243269868991937474169158485117030790
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6d:a5:bf:c0:e8:2e:30:d1:7a:80:50:53:c6:8c:e8:97:2d:2b:82:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:81:04:fd:02:66:eb:21:73:ad:20:90:91:57:14:ae:cb:bd:d9:2b
Fingerprint (sha256): 81:08:14:10:b1:4a:12:74:09:eb:95:e7:fa:56:bc:19:dc:7a:f0:71:bb:93:da:22:67:d7:a8:b6:15:02:f0:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loftinequip.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loftinequip.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loftinequip.com
www.loftinequip.com

Other certificates including the domain name loftinequip.com

(limited to 100 certificates)
itservicedesk.locknet.com
itservicedesk.locknet.com
mail.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
www.loftinequip.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
mail.loftinequip.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
mail.loftinequip.com
srv-lecadfs.loftinequip.com
itservicedesk.locknet.com
loftinequip.com
loftinequip.com
loftinequip.com
itservicedesk.locknet.com
techsupport.dmgevents.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
loftinequip.com
loftinequip.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
helpdesk.loftinequip.com
mail.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
webmail.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
techsupport.dmgevents.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
mail.loftinequip.com
loftinequip.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
services.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
helpdesk.loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
remote.loftinequip.com
loftinequip.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
itservicedesk.locknet.com
loftinequip.com
loftinequip.com
loftinequip.com
itservicedesk.locknet.com
loftinequip.com

Certificate

The complete raw certificate details for loftinequip.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312898243269868991937474169158485117030790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 04:31:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 04:31:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loftinequip.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877941005089378611823582691015758207077277120049634137543049107359519534817955616968484136660935382236715044862596431558417649017150022427560995018872951203192939436269140688545424867592942944616212595789722391861892105386220208238311451723457442094498485011347802272678538114420358316969062851742344045069023998894829697430746727398801175406645454039408812158513991373585122749761650423970376205700201518221922674217788820448872212585500283154176300784321694142642459055166725103494453604112004654692383117963550818222838803433399643537274815389479643890805339930882842082358620713447857850678199710408734190942526799321935941106780552391744745160391628682582360380669133884609975767260173856337086335944329380364371168531459032211315046010874727133847399844018972392113984870523466385593042102611346771872314158716359789982414722740345718377989482365567413188111076220035730227096702558462973440681896001730418345940018983477382625728360190453979157619427941907348568542864578998555319807092051921064890346993515411154080299269928628931440218458737744959969297968879071752393764429806032709284269554836360644867083581561754297768674627819650165278967257779676100913237082596380229908703971302834597359803883323733142037927781246683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6da5bfc0e82e30d17a805053c68ce8972d2b825b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loftinequip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loftinequip.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e2572f03d00000403004830460221009aef6966ee341525f1f49d263ef16bc2720680ba77d34b84884624f9bc119705022100e762a9b82d4f5d8c166eb72bf6ca988b716289893a806a2195cff9bc646f3fb000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e2572f06200000403004830460221009aea5d0a469974f7989f68180b715586fbe7b7c371dd6332e7a566882860a58f022100e4491f68b6b42580e55099bd2ac2e917825c5be40876edbeed0e8f2a83463f0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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