pfa-fmt.factiva.com

- Dow Jones and Company -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 79:25:30:8f:1e:3f:3e:4a:d7:ea:95:3a:6e:e1:33:fa was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Dow Jones and Company

Organization: Dow Jones and Company
State / Province: New Jersey
Locality: Princeton
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 79:25:30:8f:1e:3f:3e:4a:d7:ea:95:3a:6e:e1:33:fa
Serial Number (int): 161029687368389830852212393016115147770
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): a4:54:4d:17:ca:f6:d3:a7:5e:1c:b0:ed:86:3c:12:9d:e3:40:5b:75
Fingerprint (sha256): 05:56:89:eb:08:17:80:97:e2:74:ab:29:ca:0b:8c:a0:ea:9e:ec:ac:97:b7:4b:cf:d4:c4:60:0e:05:64:94:38

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate pfa-fmt.factiva.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pfa-fmt.factiva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pfa-fmt.factiva.com

Other certificates including the domain name factiva.com

(limited to 100 certificates)
MOBILE.FACTIVA.COM
MANAGENV.INT.FACTIVA.COM
pfafeed.factiva.com
globalx.int.factiva.com
fce.int.factiva.com
global.factiva.com
suggest.factiva.com
accounts.dowjones.com
select.factiva.com
suggest.int.factiva.com
partner.factiva.com
MARKETDATA.DEVELOPER.BETA.FACTIVA.COM
select.int.factiva.com
global.beta.factiva.com
utilityhandlers.stg.factiva.com
securepartner.factiva.com
accounts.dowjones.com
newsplus.wsj.com
u1.utilities.int.factiva.com
ssl.wsj.com
labs.int.factiva.com
taxonomy.developer.beta.factiva.com
developer.factiva.com
www.factiva.com
IWORKS.BETA.FACTIVA.COM
ssl.wsj.com
reader.beta.factiva.com
global.beta.factiva.com
pfa-fmt.factiva.com
rss.factiva.com
newsplus.wsj.com
viewer.factiva.com
MEMBERSHIP.DEVELOPER.BETA.FACTIVA.COM
origin-global.factiva.com
customer.int.factiva.com
u1.utilities.factiva.com
DEVELOPER.BETA.FACTIVA.COM
IWORKS.BETA.FACTIVA.COM
MARKETDATA.DEVELOPER.BETA.FACTIVA.COM
INTEGRATE.FACTIVA.COM
*.stg.dowjones.com
salesworks.factiva.com
global.factiva.com
pfafeed.factiva.com
suggest.dowjones.com
REGISTRATION.DEVELOPER.FACTIVA.COM
REGISTRATION.DEVELOPER.FACTIVA.COM
salesworks.beta.factiva.com
djce.factiva.com
developer.beta.factiva.com
www.dowjones.co.jp
DEVELOPER.INT.FACTIVA.COM
u4.utilities.factiva.com
insight.factiva.com
pfa-fmt.factiva.com
utilityhandlers.factiva.com
*.dowjones.com
delivery.rnc-feeds.dowjones.io
m.int.factiva.com
DJCE.FACTIVA.COM
global.factiva.com
accounts.dowjones.com
publisherportal.factiva.com
TRACK.DEVELOPER.FACTIVA.COM
djlogin.beta.dowjones.com
companyprofile.developer.factiva.com
pfa.factiva.com
READER.FACTIVA.COM
GLOBAL.FACTIVA.COM
www.factiva.com
utilityhandlers.factiva.com
pps.factiva.com
publisherportal.factiva.com
pfa-fmt.factiva.com
integrate.factiva.com
MEMBERSHIP.DEVELOPER.FACTIVA.COM
global.beta.factiva.com
salesworks.int.factiva.com
pfa-ei.factiva.com
PFA-FMT.FACTIVA.COM
logos.factiva.com
accounts.dowjones.com
search.developer.factiva.com
widgets.factiva.com
*.dowjones.com
u5.utilities.factiva.com
suggest.int.factiva.com
global.int.factiva.com
integrate.stg.factiva.com
accounts.dowjones.com
rss.factiva.com
accounts.dowjones.com
BRIEFINGS.FACTIVA.COM
global.stg.factiva.com
*.factiva.com
global.factiva.com
developer.stg.factiva.com
mrm.int.factiva.com
ewb.factiva.com
pfafeed.factiva.com

Certificate

The complete raw certificate details for pfa-fmt.factiva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMW8+QxYvTzZVWJG27r
taIu6y8WYJTFfCV0BcQUrcAJrt6PLajrV6rwcQTarRrK2yGzdbmueG940ukxK0Rh
O8LloyWFZ7nRpbA2LFGiizGuKLYfJ3IH5Gxi+kG5GQTEPwLBJK7JMFxqs5CHueN6
ZNK+ORebeJ+Cy369dasO7QFlrx1OrROlKC0ZfuUlhRMsJrAvgtCMZr86OfQt+4r6
GorL4jMBJ+Wigh90xYZbzhfo99Os1BhQ/Snis/U5Qijq/bQ08RdmTrHWnUvUEwND
E879EvaTv7fu+0hRNfXbLTsw17BJg6NqOMXwjWgU0QgP32grCjhf0CfdjRk+IGDF
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161029687368389830852212393016115147770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dow Jones and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pfa-fmt.factiva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23631756278464780546399596422981615318155932973735370267858448126490556250465419628319342517687737363640872656773793431996337826331615988228846963822542522665236526105085765826089337509917395024068007728396950298578424578047888138274432483719572554156610709271759625414949690572000648115347547866070162247369783305940636619983191805750387528330430396738742100655724361879176399802666446554310549517556560096448527558818571987787972833171528521615464352303409470928967786843697824716869745972581366432506389215482407696394869308158819469521278965899061358083605038150930241920716514832219686486254972073071831639180649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfa-fmt.factiva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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