bancaseguros.seguroslafise.com.ni

- Banco LAFISE BANCENTRO, S. A. -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 16:54:d9:23:f9:30:5c:58:12:8f:44:d8:4b:a8:41:f3 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Banco LAFISE BANCENTRO, S. A.

Organization: Banco LAFISE BANCENTRO, S. A.
Organization unit: Tecnologia de la Informacion
State / Province: Managua
Locality: Managua
Country: NI

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:54:d9:23:f9:30:5c:58:12:8f:44:d8:4b:a8:41:f3
Serial Number (int): 29683572976374987103637819462171247091
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 8f:b6:a8:2c:91:6c:af:fe:06:fe:40:f5:01:05:86:c3:2f:80:2d:6a
Fingerprint (sha256): 00:00:d3:d7:52:f9:71:88:ce:9d:93:e1:4a:63:e6:cf:8f:d0:44:20:4d:51:97:29:b0:9a:55:08:4c:9b:d2:83


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate bancaseguros.seguroslafise.com.ni

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bancaseguros.seguroslafise.com.ni

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name seguroslafise.com.ni

(limited to 100 certificates)

Certificate

The complete raw certificate details for bancaseguros.seguroslafise.com.ni in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VllOncdyIJ34z18CSRd
h9b/gMv8RGZIoVo/MS0xMnUqOLJgUXC0S23UCZVoj+3u3fJHVOLC/3aBzJXAz8Xp
phavLqSCncZBGqQs+HT/d1TeM1U1yDrhGTntb1OU1VUUPkfOHjtBCiCjg3djO85V
ekCFzl0Am9bsMXnh4KyMKyoviMPAVxO4S7YvEOByZKGYlHQFpQnr+rGdWJ0A86TO
lPn19GG3vyf8dVtVQ/DjM4TTeqR13RJs3Xr+H1A3WrXvVKUomA2EYjgkFwlLb+7n
ht5vOe0RuKsVMuYNMKI2hftjjLl9EL/h5xYuHs5K+ALwrsxUdbry2V6fq8Yf3CzE
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29683572976374987103637819462171247091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Managua'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Managua'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Banco LAFISE BANCENTRO, S. A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tecnologia de la Informacion'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'bancaseguros.seguroslafise.com.ni'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30972467242921260001010390587549619670998432657706352509659185842060011070408169640402659308202322951134796878345256105162897623200084552026019996220073840153691165324493210984627166606992024551124564040134249360956722155957214714303824243002659281736997552170780026455843461522321769068561708110287439657873945267854227972134914267171260646594507364682429783018388882574188227007578735727326026095294203438991311081950792213415772965622647502309215239238812022124219546798217603698811042335547566378742514258741092905970900556001620179197811199077266290068358556485376615317212621480874485955700769692772863253988371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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