jpmorgan.chase.com

- JPMorgan Chase -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 26:6b:f4:93:9d:ef:9d:51:d7:80:6b:ec:e5:da:5f:f2 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

JPMorgan Chase

Organization: JPMorgan Chase
Organization unit: cig1w071
State / Province: New York
Locality: New York
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:6b:f4:93:9d:ef:9d:51:d7:80:6b:ec:e5:da:5f:f2
Serial Number (int): 51071200207052033065130183625857982450
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): f2:36:e9:1e:bb:85:b3:63:d6:21:0b:08:4f:01:54:f4:85:61:fb:49
Fingerprint (sha256): 00:ea:31:b8:a2:21:0e:12:71:b4:de:7f:84:1d:c5:56:97:d2:0a:b3:a5:37:b9:54:49:81:20:8a:c8:3d:69:f7

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate jpmorgan.chase.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jpmorgan.chase.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Netscape Server-Gated Cryptography
Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jpmorgan.chase.com

Other certificates including the domain name chase.com

(limited to 100 certificates)
secure06ea-edge.prod.aws.jpmchase.net
banking.chase.com
api2.chase.com
load-cards.chase.com
mq2.chase.com
aatcpo.chase.com
sites.chase.com
authe-test.jpmorgan.com
?.?.chase.com
uat-edacbo.chase.com
load-investments.chase.com
mq3.chase.com
Servicing.CHASE.COM
tstp2-secure01a.cig.chase.com
analyticsext-qa.chase.com
urexperiencescspbf.chase.com
accounts-uat.chase.com
secure05a.chase.com
mfasapwcpp.chase.com
view.auto.chase.com
reco.edgeprod24.cldlb.jpmchase.com
uatpublic-edacbo.chase.com
apply.chase.com
?.jpmchase.net
uatp4-secure01a.chase.com
api-apps-gw02-perf01.jpmchase.com
chasemortgage-banker.chase.com
secure07b.chase.com
mfasa.chase.com
wwwq2wcm.chase.com
chaseloanmanager.chase.com
chaseloanmanager.chase.com
email.chase.com
uat.gallusapp.com
jpmorgan.chase.com
dev1ea-secureiglob.chase.com
?.?.chase.com
stmts.chase.com
secure.chase.com
ictest-public.chase.com
jpmcsso.jpmorgan.com
investments.chase.com
aatcpc.chase.com
scd1nts516.card.jpmchase.net
applyw1qa2.dev.chase.com
api2-oauth-perf01.chase.com
?.chase.com
api-s2-ma.jpmchase.com
pbcreditmortgage.chase.com
jpmorgan.chase.com
aatcpc.chase.com
nls.chase.com
devp9-secure01a.cig.chase.com
payments.chase.com
ultimaterewardstraveldv.chase.com
www2.chase.com
JPMorgan Chase and Co.
survey.chase.com
www.chase.com
chaseloanmanager-mfa.chase.com
pws-cco.chase.com
staging-surveysweeps2023.chase.com
authe-test.jpmorgan.com
api2-qa08-ak.chase.com
mfasa-qa7.chase.com
losextinterfaces-ist.chase.com
wwwqa1-microsites.edgeuat.cldlb.jpmchase.com
investments.chase.com
sitesqa1-edge.uat.aws.jpmchase.net
activityresponse.chase.com
mfasa-qa8.chase.com
pws-cco.chase.com
?.jpmchase.net
dev.gallusapp.com
accounts-uat.chase.com
istp1-secure01a.cig.chase.com
rewards.chase.com
customerservicing.chase.com
load-chaseonline.chase.com
jpmorgan.chase.com
mfasa.chase.com
experiencesbf.chase.com
m.creditcards.chase.com
accounts.chase.com
dig-qa-cs.jpmchase.com
jpmcsso-uat.jpmorgan.com
?.?.chase.com
?.?.?.jpmchase.net
autopreferred-uat.chase.com
cws-other.jpmorgan.com
messagecenter.chase.com
jpmorganq1.chase.com
gwmuiservice-uat.chase.com
searchq5.chase.com
uat-edacbo.chase.com
personal-stage.chase.com
grid102-cdc1.chase.com
midas-ist.chase.com
resources.chase.com
smf-uatmr.chase.com

Certificate

The complete raw certificate details for jpmorgan.chase.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfVuWdje4ykPRH+qCpLg
BN5re7d41rh1kY6p9xIp94hr/XgCe71iJQDFl6Yai1KhK6HnBv9F+K5GXKBOYFWV
3OnLB+J5CtpPWVRHwly+TVjAY6whkYaVDUpc/YDCpSHGUtXAZ435mhgYQ1OVEUsy
MoGu0HUscBJ3szPrbil4op41URKiiKj4IQcDjX3/C2l2GZIz8GAQ4R5SwG9NwtJk
9/JW2pw/gMKS+wNMtjUj/BU9AsOig9iRjVJ2HIN8ANW0Aownhci6WfaUc4V6QJ0P
7cMi0ihfoI4+opjWxEpSDag3sR+cJwEmkyr8VSkpFT8aLAOE/rW+hq0nHVOVGIhu
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51071200207052033065130183625857982450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'JPMorgan Chase'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'cig1w071'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'jpmorgan.chase.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21455300104911778521777063205328070437397929079139922207681933094097682408754572649058546494750709495681629351206224304261086778927807237094829081878899400815230622413614572457631661395301656292120578832106494808603196675890907020892212965123899562839709614046668836084432566269660163345996588161012068346569168311429384311793331077245730599817840798150129796791440560796882864580628475866247857743755846500119568417797087894802146205183693737309120210335998189100882889342873521101298983804099480059312827455274633494694161867836345659906086034141810913905975575322620250924326114664205678178436619588468529783402067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpmorgan.chase.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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