mqa2.statestr.com

- State Street Corporation -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 1d:be:7c:db:d8:bc:85:64:fa:1e:32:57:43:b5:6d:27 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

State Street Corporation

Organization: State Street Corporation
Organization unit: SES/MSG
State / Province: Massachusetts
Locality: Quincy
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:be:7c:db:d8:bc:85:64:fa:1e:32:57:43:b5:6d:27
Serial Number (int): 39536680717719291107591313768295263527
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 5c:9a:d3:26:b5:e1:db:2f:2b:c7:46:a5:58:ba:55:c0:86:b2:46:73
Fingerprint (sha256): 01:37:11:d9:be:0d:de:c0:fc:be:d8:87:68:ec:40:7d:51:85:37:9b:a8:77:d5:ce:f6:46:e3:72:d9:87:fb:cd

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate mqa2.statestr.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mqa2.statestr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mqa2.statestr.com

Other certificates including the domain name statestr.com

(limited to 100 certificates)
corpldapemea.statestr.com
gtsoverview.statestr.com
rits-uat.ssga.statestr.com
dwms02q2.statestr.com
gdcpw5490.statestr.com
ehartt-clo2.statestr.com
kycplatform-preprod.statestr.com
wdcrlvg0015.ssga.statestr.com
na1.bizapps.statestr.com
arch-uat.ssga.statestr.com
amis.statestr.com
statestreetintranet.statestr.com
desjasper.ssga.statestr.com
gvpdfuat52.ssga.statestr.com
SFCPW3212.corp.statestr.com
fre.statestr.com
gvcrsprd67.ssga.statestr.com
gra.statestr.com
sld-preprod.statestr.com
IB4PW3257.corp.statestr.com
gdcvcscamer1.statestr.com
sfculvg0018.ssga.statestr.com
fre.statestr.com
gvcrsdvi67.ssga.statestr.com
ssgaitools-pfm.ssga.statestr.com
mqa2.statestr.com
acc.ssga.statestr.com
*.ssccqa.statestr.com
DEDPW3537.corp.statestr.com
jabhmgamer2.statestr.com
gem.statestr.com
pamanager.statestr.com
gvcrsdr67.ssga.statestr.com
myssc-dev-sg.statestr.com
areapm.statestr.com
crstools-uat.ssga.statestr.com
sfculvg0082.ssga.statestr.com
gvcrsuat68.ssga.statestr.com
jabdl3650.it.statestr.com
sf360.statestr.com
buat-recontmv.statestr.com
nsrdwfe-prd.ssga.statestr.com
gvjbsdr66.ssga.statestr.com
glspl3225.statestr.com
gvwlsuat58.ssga.statestr.com
gaxspapp-uat.ssga.statestr.com
wdcplvg0014.ssga.statestr.com
buat-tlmservice.statestr.com
gvjbsuat87.ssga.statestr.com
mmsg46.statestr.com
fixedincome.ssga.statestr.com
axdsprd.statestr.com
cashviews-dev.ssga.statestr.com
gdcdc50076.statestr.com
sfculvg0006.ssga.statestr.com
master1.devops.ssga.statestr.com
prod-fjw.statestr.com
ses-security.statestr.com
invop-newuat.ssga.statestr.com
cdrapp-dev.statestr.com
invop-uat.ssga.statestr.com
sailpoint.statestr.com
pda-uat-eft.statestr.com
sspr-int-ha.statestr.com
drs-buat.statestr.com
mdf.ssga.statestr.com
*.ssccqa.statestr.com
sfcplvg0123.ssga.statestr.com
PKPPW3201.corp.statestr.com
babelwfe-prd.ssga.statestr.com
nagus.statestreet.com
jabdw3279.corp.statestr.com
sfculvg0042.ssga.statestr.com
gdcuw3246.corp.statestr.com
dwms02q2.statestr.com
solrrequesthandler-uat.statestr.com
brtapp2-uat.ssga.statestr.com
gvcolprd51.ssga.statestr.com
babelwfe-dev.ssga.statestr.com
jabpw3410.statestr.com
wdcplvg0082.ssga.statestr.com
aedp38.statestr.com
ams-xmgbrk-mmsg44.statestr.com
gdcps2200.statestr.com
DEDPW3538.corp.statestr.com
DEDPW3732.corp.statestr.com
igbpw3261.corp.statestr.com
esf-uat.statestr.com
hpmweb.corp.statestr.com
gdcpl4119.statestr.com
LCPPW3560.corp.statestr.com
govapm.statestr.com
ehainq-clo2.statestr.com
gvcmsdr56.ssga.statestr.com
jira.dev.us-east-1.aws.galleon.c.statestr.com
sfcplvg0031.ssga.statestr.com
inss2007.corp.statestr.com
aofs08.statestr.com
aci.statestr.com
buat-fat.statestr.com

Certificate

The complete raw certificate details for mqa2.statestr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EQGrlk3ljBxu5Nn1Pb0
AYFJSYteaqDx3i3uH+Ztl59ZVeE5/OtHV70cwbUCTLt6eijofX/lGBaregKcmil3
DvOw7g4Dm0cxH8IBj+mts2YwAjmxP3lw+CFsBmexKh8tXoffe1vVV9b3pHq+k1NG
Fejrx7y6WTtpeeV70xppxgxa4O8Y5Z3B4twFdc0tKedc6lfmOGSh0cx7QAbOaT3y
Uix+NonMPULuhn3Suj4ca1Bh+UgOEa8DTl7ckA42epqY7SlL2+bj3zIZQ6Wqgpwe
6tpAPoYvAcIyNIYUzjt5XRU2iPUcqB/BaApt/zmOzSy3ugPIDM5WT0RVALB3oaYz
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39536680717719291107591313768295263527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Quincy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'State Street Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SES/MSG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mqa2.statestr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26796065571889065274930382563291149824414239763794789891097064421903835769591446464398911253061779421491544820732123722949430924442487887248601695740244444918532853316584292840579245826774736383097213694087145846666424285694911351637789482912296011278872958496342213502990968482787272848109775787471744174726073065332730976594698127698385581346404110066161538459036124791435195488956100638114951852835022794572767535364404709722095984253904775540028820806568157967137098204658652865325366935720177626530467065703860209378480551740807054834480727328232859408006230812373768678744962108459353798592262689412443546203057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqa2.statestr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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