www.lbfoster.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:f8:39:ef:af:fb:33:e1:b9:c2:c1:7e:11:f9:9a:21 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lbfoster.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f8:39:ef:af:fb:33:e1:b9:c2:c1:7e:11:f9:9a:21
Serial Number (int): 13251916670322691266452852158450211361
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:b5:35:ad:34:43:f3:09:8c:08:8c:8f:c0:b9:52:8a:e4:02:e0:89
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 3f:4f:36:db:b4:cb:2d:8b:2d:66:07:68:d0:9a:27:23:7f:67:19:94
Fingerprint (sha256): a7:86:e5:7d:f1:fe:d2:52:4b:be:2e:45:57:57:79:cf:20:b4:cb:8a:df:ca:a0:a1:8a:bf:a0:a9:33:b9:20:dd

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.lbfoster.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lbfoster.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lbfoster.com

Other certificates including the domain name lbfoster.com

(limited to 100 certificates)
servicedesk1.adaresec.com
tickets.ec-comptech.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
lbfoster.com
leapfrog-ssl-1.gcs-web.com
helpdesk.visitbarbados.org
helpdesk.anfalservices.com.sa
helpdesk.brazos.org
servicedesk.melnor.com
helpdesk.visitbarbados.org
helpdesk.porticopm.com
clfhelpdesk.clf.uk
lbfoster.com
lbfoster.com
servicedesk1.adaresec.com
serviceportal.lbfoster.com
serviceportal.ami.com
helpdesk.porticopm.com
serviceportal.lbfoster.com
helpdesk.brazos.org
servicedesk.chiranogold.com
lbfoster.com
helpdesk.brazos.org
preview.lbfoster.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
servicedesk.chiranogold.com
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
serviceportal.lbfoster.com
servicedesk.owdsales.com
helpdesk.brazos.org
tickets.ec-comptech.com
servicedesk.owdsales.com
leapfrog-ssl-1.gcs-web.com
lbfoster.com
servicedesk.melnor.com
cwsupport.wefreight.com
leapfrog-ssl-1.gcs-web.com
www.lbfoster.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
servicedesk.melnor.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-1.gcs-web.com
tickets.ec-comptech.com
lbfoster.com
lbfoster.com
tickets.ec-comptech.com
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
leapfrog-ssl-1.gcs-web.com
servicedesk.melnor.com
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
lbfoster.com
serviceportal.lbfoster.com
serviceportal.lbfoster.com
serviceportal.ami.com
cwsupport.wefreight.com
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
serviceportal.lbfoster.com
servicedesk.chiranogold.com
www.lbfoster.com

Certificate

The complete raw certificate details for www.lbfoster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxgzyLjNMfqNmit/4mRN
bteoDMgTAis7ifZOI/wxL7In4uiV7+8yC9eMYkcsLOv5mLaQBPRfYQFJS4kwUbUh
VuJ/khNb3zKZ1OrN2ZuqOco5RBLRM/wtbNmSZrUR7eSDdO02XTczGcilP5iySCX/
38fndvYJeCHze55pMShx75cScu/mP5ozkd0eeThP2vYUqZChIfTbeKAO5znL0+ea
ndlXFtrHGRObFOfrA/JaSqFyNLLxotlBZNyhngUOeMmzsyjzbvjp/6z9BFI82+SY
P+Qz6EdqGoyMGHF877L6cr0pJCxkz8VnHcU2eZZ5gmpHfQyx5OuiVONE1MMIW2Q6
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13251916670322691266452852158450211361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lbfoster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21093731519158958062064175763162368876962385984228524875667838639000527326015459845769657168924291054595758401123602407479829537329103210359913494586206830859782009968203041111191998023816425135216429131050819595993107780189223802892526983496625962465129744208553816216314790635058186687975224259289765882318452039518394908998262832397349950997826703385789963188045215890070696901376821518413732906730984195597036873887432745254350026711358385773233277738979711411322736228822736225527426811824679336048864392498653358801673009120355265417150951856919547817034292939565624044000880291626254863012435186018461208033961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1b535ad3443f3098c088c8fc0b9528ae402e089
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbfoster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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