pershing.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:0b:74:35:43:28:c4:57:c9:c6:b8:29:bb:c0:ba:da:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pershing.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:0b:74:35:43:28:c4:57:c9:c6:b8:29:bb:c0:ba:da:6f
Serial Number (int): 298442860684340869218402122300313338305135
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:e8:d2:14:4e:bb:46:a0:03:35:11:50:9e:71:2f:e3:19:fe:b3:c7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 18:59:09:eb:b2:52:e5:0f:30:97:d1:9f:f1:75:9a:ba:de:ad:0d:4a
Fingerprint (sha256): 07:8d:fa:a6:d5:33:1b:63:6a:ba:ac:08:27:a8:c0:1e:f6:e2:e1:d9:c4:a0:01:12:67:0e:68:3b:38:b2:22:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pershing.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pershing.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pershing.com

Other certificates including the domain name pershing.com

(limited to 100 certificates)
coh.pershing.com
ccenter.pershing.com
bc.pershing.com
support.pershing.com
info.bnymellon.com
inside.pershing.com
investor.pershing.com
pershing.com
information.pershing.com
investor.pershing.com
voiceware.pershing.com
pershing.com
insite.pershing.com
jtapcentral.pershing.com
cfat.pershing.com
ccenter.pershing.com
data.pershing.com
cfat.pershing.com
content.pershing.com
mft.sfg.bnymellon.com
uat-bondwave.pershing.com
pershing.com
roars.pershing.com
uat-bondwave.pershing.com
bc.pershing.com
mqmf-mqu1.pershing.com
remote1.pershing.com
bc.pershing.com
voiceware.pershing.com
remote1.pershing.com
insite.pershing.com
retirement.pershing.com
xat-bondwave.pershing.com
qc.pershing.com
investorportal.pershing.com
xne1e1.bnymellon.net
roars.pershing.com
files.pershing.com
mod-content.pershing.com
qpr.pershing.com
infodirect.pershing.com
demo-pernet.pershing.com
xat-bondwave.pershing.com
services.pershing.com
data.pershing.com
bc.pershing.com
qpr.pershing.com
ice2roars2.bnymellon.net
sni243645.cloudflaressl.com
information.pershing.com
mqmf-mqu2.pershing.com
pershing.com
pershing.com
mansee-test-external.dev.pershing.com
managergateway.pershing.com
support.pershing.com
services.pershing.com
www.pershing.com
data.pershing.com
xat-bondwave.pershing.com
voiceware.pershing.com
sni243645.cloudflaressl.com
controlcenter.pershing.com
cfat.pershing.com
content-demo.pershing.com
cfat.pershing.com
insite.pershing.com
pernet.pershing.com
content.pershing.com
dasf-saml.sso.pershing.com
bc.pershing.com
actimize.pershing.com
pernet.pershing.com
files.pershing.com
www.pershing.com
mqmf-mqu2.pershing.com
managergateway.pershing.com
managergateway.pershing.com
data.pershing.com
standardfiles.pershing.com
communications.pershing.com
actimize.pershing.com
info.bnymellon.com
controlcenter.pershing.com
mod-content.pershing.com
uat-bondwave.pershing.com
actimizedemo.pershing.com
xat-insite.pershing.com
xne1e1.bnymellon.net
remote2.pershing.com
infodirect.pershing.com
uit.pershing.com
ftps5.pershing.com
mft.sfg.bnymellon.com
iceroars2.pershing.com
files.pershing.com
insite.pershing.com
iceroars2.pershing.com
files.pershing.com
insite.pershing.com

Certificate

The complete raw certificate details for pershing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298442860684340869218402122300313338305135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 07:41:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-19 07:41:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pershing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778142328091211314457347562577397012296826062980164717029287217100795288445945970532460743178598179800399946358347256894809154679302397846996513949768458737138976967757009401694939582009734832691659936063214548365853399277394812992609182973175009159089670398284838689744319589072067600711683138461082090758477117325349277141932871054647672571350524957570755148595359997779603960799678691706578635747917783990133586310284163425206623144581896620790679565947228093702343910803742136303991587194189787571128292948094942047969214172115570587968000013061433750459046381437210351097606967737221633546516723633007887198091802558223342405606523137761015405667375841736001443956662914333042103306509014128972271267381594830646153370569178292003408554566930749221956724173957016590800469735113080099016863379586577735261211894412140395184591996803117502985906864911344625221442502289012554079775337904365066128300139759824985388084060833166587160654634115269483314589101798057000455619533946974981131451536355354226524101820826606061530810614991238900638079699173782588821406587735380810575241080435203957055438432368337730583033015546456780204784213583363571696999518042055850598709467609746662925178949662473780625270634969442652987150497223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47e8d2144ebb46a0033511509e712fe319feb3c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pershing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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