edge1.townebank.net

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:40:c7:80:f0:b4:01:f6:a6:70:0a:06:cc:f8:ec:e4 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=edge1.townebank.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:40:c7:80:f0:b4:01:f6:a6:70:0a:06:cc:f8:ec:e4
Serial Number (int): 2994809405726007499195214941864389860
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cd:dd:8a:9a:8d:34:04:5c:06:79:c9:f5:b0:32:92:54:5e:c8:6a:96
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 8d:70:ba:d8:8f:2e:36:27:7c:28:8d:54:5a:a4:ee:02:4c:6e:59:ac
Fingerprint (sha256): 01:7c:0c:e7:69:5b:f2:21:67:58:8a:dd:8f:14:2f:bd:8e:77:1b:3c:df:18:42:d5:d2:8f:f5:54:75:24:15:7a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate edge1.townebank.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge1.townebank.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge1.townebank.net
tow5969ewe1p01den.townebank.net
townebank.net

Other certificates including the domain name townebank.net

(limited to 100 certificates)
edge1.townebank.net
mfa.townebank.net
mvproxy.townebank.net
mfa.townebank.net
appian.townebank.net
adfs.townebank.net
tbentspsolutions.townebank.net
adfs.townebank.net
tbshare.townebank.net
entise01.townebank.net
fisopendcitest.townebank.net
mfa.townebank.net
a.townebank.net
edge4.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
tbshare.townebank.net
edge1.townebank.net
edge4.townebank.net
rcvpn.townebank.net
bnkvproxy.townebank.net
mfa.townebank.net
appian2.townebank.net
appian.townebank.net
rcvpn.townebank.net
edge4.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
appian.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
appian.townebank.net
mvproxy.townebank.net
edge1.townebank.net
fisopendci.townebank.net
appian.townebank.net
mfa.townebank.net
tbentspsolutions.townebank.net
mfa.townebank.net
adfs.townebank.net
scanner.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
adfs.townebank.net
adfs.townebank.net

Certificate

The complete raw certificate details for edge1.townebank.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2994809405726007499195214941864389860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge1.townebank.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 737192505121149438745643928864278577540424293444673009728387201947368130274056019839172212148807488534640896382112684287743165953670569462087159273423045745645202236900965825095050631632454906295478673511520700766060827608859038457146750749243421660954023720811344770926886122520077760896633942722806739929087303935021886553590479110677124005050596841547384018479548231057969105456430392107664960633194688264796525016751212516892750173546738850847007967513076684617017349097565663236710505867128966734949271514791928246556079924250359028346434010182918787440580797689994123847308624467599674868427694982424842257206946162763370731296924088821014765788329178011753612025562980089103025188796215107333966766733863291314463959602465135323364497239484284688176070931453375439460101484758826051448202060694415396479714476149688524150304874874278516969506909487111153370043062085066317083064101106259292736489843064831438715002358610533537170135291647200925438023694011079301480778302951160077137481373956572565868479797106731463639254634966314545414699431767928428310193930535517224049227056075284478213085119994622218258110923819951198854301484687470862241029206418835941078306171623224347490157776940373501481010136413574040961217582249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cddd8a9a8d34045c0679c9f5b03292545ec86a96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge1.townebank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tow5969ewe1p01den.townebank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townebank.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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