work.elpolloloco.com

- El Pollo Loco -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 3f:ee:96:9e:8a:a3:ad:5a:b7:dd:76:77:d3:1e:a5:3f was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

El Pollo Loco

Organization: El Pollo Loco
Organization unit: IT
State / Province: California
Locality: Costa Mesa
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:ee:96:9e:8a:a3:ad:5a:b7:dd:76:77:d3:1e:a5:3f
Serial Number (int): 84980185309178018879659217849440707903
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 37:2a:28:cd:1f:3c:d9:39:d3:cd:04:80:97:6f:1b:5b:bb:0b:63:11
Fingerprint (sha256): f0:43:0c:c0:57:fb:cc:25:bb:8a:dd:2c:59:9f:a6:69:9c:e5:5b:e5:3c:89:ac:5f:23:02:e1:b1:13:94:34:8f

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate work.elpolloloco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for work.elpolloloco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

work.elpolloloco.com

Other certificates including the domain name elpolloloco.com

(limited to 100 certificates)
*.elpolloloco.com
links.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
leapfrog-ssl-34.gcs-web.com
work.elpolloloco.com
imperva.com
imperva.com
flybuy.radiusnetworks.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
movableink.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
order.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
*.elpolloloco.com
mymail.elpolloloco.com
mail.elpolloloco.com
imperva.com
pickup.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
nomnom-prod-api-shield.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
leapfrog-ssl-34.gcs-web.com
sni.cloudflaressl.com
imperva.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
imperva.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
order.elpolloloco.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
messaging.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
epl-exch-mb1.epl.lan
leapfrog-ssl-34.gcs-web.com
punchh.flyb.uy
leapfrog-ssl-34.gcs-web.com
flybuy.fiveguys.com
fhf.shopthefastlane.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
restaurants.elpolloloco.com
mail.elpolloloco.com
order.elpolloloco.com
mymail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
order.elpolloloco.com
*.elpolloloco.com
order.elpolloloco.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
mail.elpolloloco.com
order.elpolloloco.com
cdn.elpolloloco.com
fhf.shopthefastlane.com
work.elpolloloco.com
imperva.com
pickup.belk.com
leapfrog-ssl-34.gcs-web.com
leapfrog-ssl-34.gcs-web.com
flybuy.radiusnetworks.com

Certificate

The complete raw certificate details for work.elpolloloco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84980185309178018879659217849440707903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Costa Mesa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'El Pollo Loco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'work.elpolloloco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754622437474389075094934390398411912509671710177543525440168846687813895717922992758184113931451302209062335568499428232474575743142558719882488502316598275675933647401593783089573732747408053394460094261913688352326556734941976058451857491676095765805909671794578236555856315070210122193622800829519298501146042924105589779929600240896049188068672683614036648885159086160473718046003057097709848566340989395410382478841686417609278323828156714921780985512415768880557516306207330961273827420702378122545264165239519048300612841056047883967933937101681208050907724877534791038599477280500508109311714365326688271241405449520932796999515924925177843607853065198601864569415480762791807774462285032711483775616783404077493744271600384816069933868844415451419532253438753361739334892313503084471232147866185717823029397873139197281487007150285864589885054714640993918954234145891173681286374238624714084323542015791434160230786467264020502736620674038656289920406371913887229063969871999809044899287664099175505097705411134548758823951856566027672452228488686340221607336116824876508776845952298992786158616680158910647803904253245781087119345304453929843766029155605545156329213248342816862183726939974301389148669167035444325224537597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'work.elpolloloco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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