lbfoster.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 70:10:0d:39:11:45:d3:49:f4:24:80:ef:99:78:5f:c4 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lbfoster.com,OU=Domain Control Validated+OU=Hosted by Applied Innovations Corporation+OU=PositiveSSL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 70:10:0d:39:11:45:d3:49:f4:24:80:ef:99:78:5f:c4
Serial Number (int): 148956880470322904624114439107227705284
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e3:77:d6:cc:b7:c3:89:04:51:34:90:6f:13:6f:b3:48:f6:2e:4d:81
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): d0:9e:34:8c:1d:3d:68:e5:04:25:98:e7:98:54:73:0c:19:15:0f:8d
Fingerprint (sha256): bd:a3:81:7f:60:8a:c0:a9:a8:a8:e0:7f:ec:a6:6e:3e:9f:77:a5:95:72:48:4d:36:da:cd:87:8a:9c:60:58:a4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate lbfoster.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lbfoster.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lbfoster.com
www.lbfoster.com

Other certificates including the domain name lbfoster.com

(limited to 100 certificates)
servicedesk1.adaresec.com
tickets.ec-comptech.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
lbfoster.com
leapfrog-ssl-1.gcs-web.com
helpdesk.visitbarbados.org
helpdesk.anfalservices.com.sa
helpdesk.brazos.org
servicedesk.melnor.com
helpdesk.visitbarbados.org
helpdesk.porticopm.com
clfhelpdesk.clf.uk
lbfoster.com
lbfoster.com
servicedesk1.adaresec.com
serviceportal.lbfoster.com
serviceportal.ami.com
helpdesk.porticopm.com
serviceportal.lbfoster.com
helpdesk.brazos.org
servicedesk.chiranogold.com
lbfoster.com
helpdesk.brazos.org
preview.lbfoster.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
servicedesk.chiranogold.com
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
serviceportal.lbfoster.com
servicedesk.owdsales.com
helpdesk.brazos.org
tickets.ec-comptech.com
servicedesk.owdsales.com
leapfrog-ssl-1.gcs-web.com
lbfoster.com
servicedesk.melnor.com
cwsupport.wefreight.com
leapfrog-ssl-1.gcs-web.com
www.lbfoster.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
servicedesk.melnor.com
leapfrog-ssl-1.gcs-web.com
leapfrog-ssl-1.gcs-web.com
tickets.ec-comptech.com
lbfoster.com
lbfoster.com
tickets.ec-comptech.com
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
leapfrog-ssl-1.gcs-web.com
servicedesk.melnor.com
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
lbfoster.com
serviceportal.lbfoster.com
serviceportal.lbfoster.com
serviceportal.ami.com
cwsupport.wefreight.com
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
serviceportal.lbfoster.com
servicedesk.chiranogold.com
www.lbfoster.com

Certificate

The complete raw certificate details for lbfoster.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK8DCTh4mEdqNIX2e7Vl
eYzhhhtU9TaCbvkY598HERC7uuYDqd67YVKTRf5YzzArFSCQs7OJrROcEiT5upJw
ihCG3nCg8Nrtfg+LsQI/cW4Zzo1JqRf9BeqUFcVvxjzaT11ijeGGuCFBjiRPuRyj
r9El9j4+wiyY4atAsg5e7haJYSTpugNfN4X+jTwK+Ntm5NV6FkWb/NOFNBOLnsw6
AI4RIUpCJXRrfo1d7VSkruFzbcP17gyetAeU8r4J4C9/xS7l+xs3wezY5mJLMn7u
sK1QpdA0UyUR3VJH3J/d64pqkKPjEOfUt3qgdWLjUoHqn+GrQy+WoEL7s3MnR3w2
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148956880470322904624114439107227705284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Applied Innovations Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lbfoster.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22304243238422020358866981354311907317138422173163239050429750577018942585540085883050755670954147713204466929631810007812637262828334848024939062782692982961819837500441554721930711080842320540424229671031700987647821520948132081814301363540522545052472283794863683506052833563975836639975497721752862680008129539095636315241628446513673062715589793873942407163071078380056919320991339091096973893750034924518024395045945819066704556103271868711579262663384083707223470984328061533732696334615032131811145814857124068638892036566284093168904738444356080512400377343545064159970171315049851382047202823350795263293037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e377d6ccb7c389045134906f136fb348f62e4d81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbfoster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbfoster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016dd0343d430000040300463044022012fbd6275864024543094e723e3edae545541116704e450f809b8c352219e92e0220484d104db5c428717356bc6fdea6729f183406894b82088b981cdcb8448942240077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd0343d350000040300483046022100e0509ad36d4bffb8a8bc56a7ca796af06ca134ffd931167fdea6343c757826e0022100b24b5c6e1d2b1b661289ccff65904528ef1686e6abb95c80c5bb30a3aba8e1fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d40036539c048c23bd40e172126634280c8b294c98169ee0deb05bdd4f989fdd8980577ecaf2d60d3b207a3b0792698890aeb7472920116a99680512c50cc746f2a9044b21a3682a1f2170a3458e997f1ba9818c26ffb11b8bff7c75615ba9cd7f46846df0b9748f1fcdd330ac2d7f8f48168a00b292628c9b48118fab83df1198df8a56abe14f99f24cedd6a8315a834a2f05ab0c00426729e15f630d1c3eb420ba6e3a2031fd07e2e77cfcc378df78ad327bc6957e00ed71521560f167fb2def26c13d728f45400d24ffcc82b99434431b8c770b705e0a6a2577e7612bb3964df5febb9adce37e079b5f95d45e36ff8b4e7a274b7c8b5e1ce4a11b39eae99f