*.luizalabs.com
Issued by Sectigo RSA Domain Validation Secure Server CA
About this certificate
This digital certificate with serial number 05:05:c4:a3:19:8b:ea:eb:07:ab:2a:f7:05:75:e5:c8 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.luizalabs.com
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 05:05:c4:a3:19:8b:ea:eb:07:ab:2a:f7:05:75:e5:c8Serial Number (int): 6676089737596334358906300803812025800
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a8:69:78:8e:e1:c7:6c:dd:49:28:d0:9a:0c:8f:17:07:4a:be:11:4b
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1
Fingerprint (sha1): f4:96:4c:4b:ec:92:75:7b:83:42:64:42:8c:71:f2:1b:6d:91:c8:3a
Fingerprint (sha256): ad:9f:0c:ae:c3:91:a9:8d:8b:41:3a:a4:33:2f:0e:ac:48:21:ef:b6:85:ca:2d:09:2f:19:22:2e:5c:4c:cc:21
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCheck the revocation status for certificate *.luizalabs.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.luizalabs.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.luizalabs.com
luizalabs.com
luizalabs.com
Other certificates including the domain name luizalabs.com
(limited to 100 certificates)
pme-sandbox.luizalabs.com
jenkins.payments.luizalabs.com
*.luizalabs.com
www.fiasp-udine.it
p36.luizalabs.com
sacola-sandbox.payments.luizalabs.com
p36.luizalabs.com
buddy.luizalabs.com
blog.luizalabs.com
apu-teste.gcp.luizalabs.com
ml-static.luizalabs.com
magalu-app.luizalabs.com
buddy.luizalabs.com
p36.luizalabs.com
*.luizalabs.com
blog.luizalabs.com
*.luizalabs.com
*.luizalabs.com
p36.luizalabs.com
apu-teste.gcp.luizalabs.com
gitlab.luizalabs.com
*.luizalabs.com
*.luizalabs.com
*.luizalabs.com
spinnaker.payments.luizalabs.com
*.luizalabs.com
share.bigteamchallenge.com
spinnaker.payments.luizalabs.com
blog.luizalabs.com
*.luizalabs.com
mobile-api.luizalabs.com
apu-teste.gcp.luizalabs.com
blog.luizalabs.com
jenkins.payments.luizalabs.com
magalu-app.luizalabs.com
apu-teste.gcp.luizalabs.com
jenkins.payments.luizalabs.com
*.luizalabs.com
www.fiasp-udine.it
p36.luizalabs.com
sacola-sandbox.payments.luizalabs.com
p36.luizalabs.com
buddy.luizalabs.com
blog.luizalabs.com
apu-teste.gcp.luizalabs.com
ml-static.luizalabs.com
magalu-app.luizalabs.com
buddy.luizalabs.com
p36.luizalabs.com
*.luizalabs.com
blog.luizalabs.com
*.luizalabs.com
*.luizalabs.com
p36.luizalabs.com
apu-teste.gcp.luizalabs.com
gitlab.luizalabs.com
*.luizalabs.com
*.luizalabs.com
*.luizalabs.com
spinnaker.payments.luizalabs.com
*.luizalabs.com
share.bigteamchallenge.com
spinnaker.payments.luizalabs.com
blog.luizalabs.com
*.luizalabs.com
mobile-api.luizalabs.com
apu-teste.gcp.luizalabs.com
blog.luizalabs.com
jenkins.payments.luizalabs.com
magalu-app.luizalabs.com
apu-teste.gcp.luizalabs.com
Certificate
The complete raw certificate details for *.luizalabs.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIQBQXEoxmL6usHqyr3BXXlyDANBgkqhkiG9w0BAQsFADCB jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB MB4XDTIyMDgyNjAwMDAwMFoXDTIzMDgyNjIzNTk1OVowGjEYMBYGA1UEAwwPKi5s dWl6YWxhYnMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hRq hEBsKsCTBKBv14dKZZhMur7//6ANpKAhRQhkqGUaURVH27qV/EHcnLvhN/DmHTSh bO0R5Q5px7OMwj1hwnmR3VYGUEf2a8EnHDcTLTf6adfONwiItUWO9QE/JmFnfLc1 LQl9KU5oOLrc1qY81/rN+/DlDOUsJNi86KSy+CrgNQK2KsHz39KEzaAZHJ+Kf+H+ L1r4ndsKHAnnK3NgPwgX+WeO+xPIiExi5KU2aGXzgTYgz9UcAwuv5bFRtL+SOElN 44ExBPfbhb/Vsu3oj5WQ8bIoWbexWSOX/xva2byVI6Uz3DDuLopx1yHKOWE4bJOA xgeuUFlcMfPxprvO+QIDAQABo4IDADCCAvwwHwYDVR0jBBgwFoAUjYxexFStiuF3 6Zv5mwXhuAGNYeEwHQYDVR0OBBYEFKhpeI7hx2zdSSjQmgyPFwdKvhFLMA4GA1Ud DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUHAgEW F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUHAQEE eDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29S U0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUFBzAB hhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTApBgNVHREEIjAggg8qLmx1aXphbGFi cy5jb22CDWx1aXphbGFicy5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1 AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABgtuUTysAAAQDAEYw RAIgbw5SUqJbWDQLtY6X6v8MK3UsnMC7jr/HF5a+ub3s7+4CIBXgBG74JNIZ0VnB klyArpSbq1ixho/xK/w/IiODcAlGAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvS K8E6V6NS61IAAAGC25RPAgAABAMASDBGAiEAnDBdsV/uVPhoVlGBz7GZzplPQC+V cgePBlJAGa/I7XkCIQDlavSkZVBDHBifGBK3w6s0tNOw+3ibki0WtceNQgMiXAB2 AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABgtuUTscAAAQDAEcw RQIgDfNzbwjNifpWq/9v1AK8bFQCYoVkLFx/iDsB0a/mTwMCIQCPpCGuo075PTZR P23Q1CkeAGol5wVf2ip3ivO2UzGtLTANBgkqhkiG9w0BAQsFAAOCAQEAOh+w0lI6 vCd82eTaLReZat7BG88zmGzR8Gy6bui2JzqgU1W0GUqZ2T1g8UuErcOHgTHq0sHf e9b4WxZO1CO23oYrelLeiBvWwxHPdF6N7BtpB8lcXGlDfIn2DCEZPI+oRKGULDX/ plY26eWyEPqBHXJMnkI1o2b1lcX6ifYY00QzFqWQtJmDtBuIR3MLga1y9rtl9kAb /MUDDpg9V2BfvFB/JeKKiXSgW5bUUivqlCup1qwroo4PH6//TfsqNGeEigFrsGFu Ik7HEz2ILIAV7c5i7XeF5y4FWUDgJyzygtoZr68CKzyq9Tz37umAxdoFuIwSV4qx VApWulAI1AHdQw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hRqhEBsKsCTBKBv14dK ZZhMur7//6ANpKAhRQhkqGUaURVH27qV/EHcnLvhN/DmHTShbO0R5Q5px7OMwj1h wnmR3VYGUEf2a8EnHDcTLTf6adfONwiItUWO9QE/JmFnfLc1LQl9KU5oOLrc1qY8 1/rN+/DlDOUsJNi86KSy+CrgNQK2KsHz39KEzaAZHJ+Kf+H+L1r4ndsKHAnnK3Ng PwgX+WeO+xPIiExi5KU2aGXzgTYgz9UcAwuv5bFRtL+SOElN44ExBPfbhb/Vsu3o j5WQ8bIoWbexWSOX/xva2byVI6Uz3DDuLopx1yHKOWE4bJOAxgeuUFlcMfPxprvO +QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6676089737596334358906300803812025800 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.luizalabs.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27025064807253636623641242157285633048578494492665458235557614731645383775190342284722326549066078574293101027522797528179711591765165717083367706852163012860590471807741558798137433592724007750658173887040077028838223713268530421131053412364853282749494727759921682940145229614953256737488045391519699199953295527179034398146671755663284185476832367134855490892748469711852129248379052608642860396009962461472361024193649758232015444005889726498005027607933045853324167461785338584911343763292868322875720995519795105677485612665571709705860201523616800113461226804542906639637187556635773038971280983112705382272761 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a869788ee1c76cdd4928d09a0c8f17074abe114b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luizalabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luizalabs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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