tlstest.walmart.com

- Wal-Mart Stores Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5d:82:af:95:82:f1:c1:f8:70:c4:06:d7:0e:a8:7c:e8 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Wal-Mart Stores Inc.

Organization: Wal-Mart Stores Inc.
Organization unit: Engineering Department
State / Province: Arkansas
Locality: Bentonville
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:82:af:95:82:f1:c1:f8:70:c4:06:d7:0e:a8:7c:e8
Serial Number (int): 124296763466808875838424849171131956456
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 05:81:33:b0:d5:f6:6a:a6:98:ba:bb:88:69:20:8f:3d:8b:13:88:45
Fingerprint (sha256): 07:de:e2:88:9b:8c:18:d8:ae:87:b1:37:a3:80:c6:bd:6a:95:ae:e4:69:0d:c8:69:d9:89:af:f8:a3:f5:42:4d

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate tlstest.walmart.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tlstest.walmart.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

http2.wal.co
tlstest.walmart.com

Other certificates including the domain name walmart.com

(limited to 100 certificates)
nonprod.samsclub.com
automated.services.pricing.qa.walmart.com
vendor.cca.uno.walmart.com
mex-sps-qa.walmart.com
nonprod.samsclub.com
vip26-massmart-qa-https-p-1.walmart.com
store.mobile.walmart.com
gdp.qa.walmart.com
roadshow-app.rs-dev.qa.walmart.com
ca-stiboapp.stg.walmart.com
weeklyads-test.walmart.com
sos.walmart.com
fuelapplications-dev.walmart.com
api.techcentral-nonprod.walmart.com
nonprod.samsclub.com
events-service.prod.membership-events.samsus.prod.walmart.com
www.walmart.com
lookeractions.walmart.com
looker.mx-dev.walmart.com
cf-prod.walmart.com
survey.walmart.com
help.walmart.com
benefits-wlfccr-stage.walmart.com
guide.walmart.com
irsws.atlas.walmart.com
bixby.stg.walmart.com
samsharetracker.qa.walmart.com
myinsights.qa.walmart.com
ws.stg.walmart.com
metropolis-assistant.prod.walmart.com
nonprod.walmart.com
metropolis-assistant.dev.walmart.com
dq.prod.walmart.com
recruiting.sc-stage.recruiting.services.walmart.com
mobile.walmart.com
tprpulse.dev.walmart.com
pc.ui.samsclub.prod.walmart.com
cf-nonprod2.walmart.com
wem-prod.walmart.com
cougar.walmart.com
ak-nonprod.walmart.com
bedrock.walmart.com
cf-prod.walmart.com
cca.chatbot.prod.walmart.com
uat-tu-tuconline.tss.prod.sec.walmart.com
customerfeedback.walmart.com
api-next-gen.qa.gdp-core.walmart.com
stg.cca.chatbot.walmart.com
finance-next.gdp.walmart.com
vip27-mexico-qa-https-web-p-1.walmart.com
benefits-wlfcms-stage.walmart.com
mx-cart-app-dev.walmart.com
fa-nonprod.wal-mart.com
dev.samsotifwebservice.prod.walmart.com
nonprod.wal.co
linksynergy.walmart.com
sonar.walmart.com
ultra-esb.qa.esb.platform.qa.walmart.com
origin-mobile.walmart.com
apility.walmart.com
jirasupport.walmart.com
cws-validate-walmart.com.walmart.com
api.notification-pref.qa.walmart.com
vip26-massmart-qa-https-p-1.walmart.com
otif-service.stage.walmart.com
cert-me.walmart.com
nonprod-int.samsclub.com
epi-test-cert.walmart.com
track.walmart.com
pavs.stg0.avs.services.glb.prod.walmart.com
sitemon.walmart.com
ak-prod3.walmart.com
nonprod.samsclub.com
nonprod-intone.samsclub.com
test.walmart.com
store-stg.mobile.walmart.com
realestate-next.gdp.qa.walmart.com
teamrosters-prodnew.walmart.com
vip20-pravaha-qa-https-web-p-1.walmart.com
vip01-misc-qa-https-web-p-1.walmart.com
partner.walmart.com
receipts-query.edge.walmart.com
vip26-massmart-qa-https-p-1.walmart.com
roadmap-prodnew.walmart.com
ak-prod4.walmart.com
nodecert.nodecert.xcallbot.fs-pos-infra-ops.qa.walmart.com
nonprod-int.samsclub.com
apis.teamrosters-dev.walmart.com
soefabric-qa.wal-mart.com
api.roadmap-dt-poc.walmart.com
voice.staging.walmart.com
ca-stiboapp.stg.walmart.com
sharepointwebhook.dpa.walmart.com
vip01-misc-qa-https-web-p-3.walmart.com
ak-prod4.walmart.com
affiliates.roku.pci.tss.walmart.com
hwclinicalservices-dmz-qa.walmart.com
vip07-www-pqa-walmart-ca.walmart.com
repository.cache.walmart.com
csr.photos2.walmart.com

Certificate

The complete raw certificate details for tlstest.walmart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSLxMqkv9ChlWWATEA+m
B0agMoj+kSQ3ojNzE+9t38ZLKLvGvuxv/LSijtBRev2syp631D+2ujbfsRuvHir1
CjcUa/0wIsQBWILDb41dZzdoH/ggviPnJyxXDlewZ/y39uOhtZEOo7v6o2qlN09b
pEsWDXFrBXEZXCjbZ5sjKNcetdyXgxYNz5uxsDsveK7qH8IofDvjCjIM5MqaXcdk
jpy/N0uEtOjLQI9bzSJKsnrp7CGxhjMcVH31vCJaQoCL7Vf8KWNbYMQcugtCauoa
jKufJpAB4FEEHEMHOb1cT9urRghQ4HfymSej2YaS+waydiDWYLonw3oJgxzUvoed
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124296763466808875838424849171131956456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arkansas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bentonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wal-Mart Stores Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Engineering Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tlstest.walmart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21351504170058223804851575244542619659954219115989676280211851240810093467455685717098412520996594931874215655961014164834302704258389494679758050080615092692483966299394913896309087751930737848589358886876230155355735364354622056465552334666509247207455720761300658350263415356084107117944120233221706338498241672414240374700856653830031065489612370476601030337746350632400572942799563428447070569393411515429896395621919848947631864533663381222190771024958001940468825858104194122786862091027339541554394276129756706810727331402333413785740414498452517856034136475530296950584900134137856455266985658075452631653693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'http2.wal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlstest.walmart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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