gewpasp.iss.lexisnexis.com

- LexisNexis -

Issued by Trustwave Organization Validation CA, Level 2

About this certificate

This digital certificate with serial number 0f:fb:2e:f4:2c:38:f2:84:7c:ee:dd:23:41:1f:56:90 was issued on by Trustwave Holdings, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: authorityInformationAccess MUST be present. (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

LexisNexis

Organization: LexisNexis
State / Province: OHIO
Locality: Miamisburg
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:fb:2e:f4:2c:38:f2:84:7c:ee:dd:23:41:1f:56:90
Serial Number (int): 21242638784465586820355185171245258384
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:af:e9:49:3a:16:a2:82:e1:1d:5e:32:03:c7:47:da:48:97:23:2f
AuthorityKeyId: 5d:d9:96:9a:40:c7:27:cb:2c:9b:a2:ec:cf:19:ab:c8:af:cc:86:48

Fingerprint (sha1): 28:91:60:c3:ce:e2:99:c3:27:b3:76:f5:d0:79:c6:41:7b:05:a2:1c
Fingerprint (sha256): 08:07:a8:21:25:c8:64:dd:a8:cd:12:2c:a4:8f:f8:a2:78:b6:fa:bb:ae:26:4a:87:e5:41:1d:fa:0c:c3:6e:d1


Revocation information

CRL Distribution Point: http://crl.trustwave.com/OVCA_L2.crl

Check the revocation status for certificate gewpasp.iss.lexisnexis.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gewpasp.iss.lexisnexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name lexisnexis.com

(limited to 100 certificates)
dev-clientshare.lexisnexis.com
insurancesolutions.lexisnexis.com
mfa.lexisnexis.com
personalreports.lexisnexis.com
*.product-aws-prod.nl.lexis.com
collectionsolutions.lexisnexis.com
cdn.insurancesolutions.lexisnexis.com
isit.lexisnexis.com
healthcareportal.lexisnexisrisk.com
dmvpre.alirts.lexisnexis.com
staging.identitymanagement.lexisnexis.com
apply.insurancelink.lexisnexis.com
sni.cloudflaressl.com
batchwebgateway.lexisnexis.com
uat.progressive.lexisnexis.com
risk.lexisnexis.com
RISK-OUT02.rsi.lexisnexis.com
images.solutions.lexisnexis.com
bender.lexisnexis.com
ukcrm.plcert.lexisnexis.com
bis.lexisnexis.com
idms.lexisnexis.com
docshare.lexisnexis.com
updatesxg.bridgerinsight.lexisnexis.com
gma.lexisnexis.com
equifaxconsumers.lexisnexis.com
mfaweb.lexisnexis.com
orders.paymentsolutions.lexisnexis.com
eo.lexisnexis.com
*.business.aws.lexis.com
san-005.ceros.com
risk.lexisnexis.com
demo.avcccert.lexisnexis.com
cdnfp.accurint.com
sni.cloudflaressl.com
test.telematics.lexisnexis.com
*.lexisnexis.com
*.content.aws.lexis.com
midex.lexisnexis.com
jprc.lexisnexis.com
espsso-sign-prd.risk.lexisnexis.com
Bridgerstaging.lexisnexis.com
pm.lexisnexis.com
BridgerDirect.LexisNexis.com
starsdocshare.risk.lexisnexis.com
sf.insurview.lexisnexis.com
*.content.aws.lexis.com
dev.mobiledataprefill.lexisnexis.com
invoice.risk.lexisnexis.com
reporting-stg.identitymanagement.lexisnexis.com
link2.lexisnexis.com
professional.lexisnexis.com
*.midex.lexisnexis.com
recordsretrieval.lexisnexis.com
pas.campaignview.lexisnexis.com
solutions.risk.lexisnexis.com
optout.lexisnexis.com
global.lexisnexis.com
siris.lexisnexis.com
jiradev.rsi.lexisnexis.com
uw.insurancesolutions.lexisnexis.com
gma.lexisnexis.com
induservpn.risk.lexisnexis.com
wcoresearchtraining.risk.lexisnexis.com
WcoEditorialSearchQA.risk.lexisnexis.com
api-caseanalyser.lexisnexis.com
nac.lexisnexis.com
san-005.ceros.com
trial.mapview.lexisnexis.com
r3.lexisnexis.com
forms.consumer.risk.lexisnexis.com
erie.lexisnexis.com
cdnfp.accurint.com
bis.lexisnexis.com
apply.insurancelink.lexisnexis.com
track.risk.lexisnexis.com
*.lexisai.aws.lexis.com
*.issdev.lexisnexis.com
san-005.ceros.com
lexismarkettracker.lexisnexis.com
*.lexisnexis.com
gewpasp.iss.lexisnexis.com
altauth.courtlink.lexisnexis.com
healthcareportal.lexisnexis.com
paymentsolutions.lexisnexis.com
healthcareportaluat.lexisnexis.com
Bridgerstaging.lexisnexis.com
*.lexisnexis.com
sat.lexisnexis.com
social.lexisnexis.com
salesportal.lexisnexis.com
wcoaudit.risk.lexisnexis.com
riskauth.lexisnexis.com
risk.lexisnexis.com
transfer.lexisnexis.com
ride.lexisnexis.com
marketplace.lexisnexis.com
mapview.lexisnexis.com
*.b2b.lexisnexis.com
insurancesolutions.lexisnexis.com

Certificate

The complete raw certificate details for gewpasp.iss.lexisnexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGamaXINagExi9LTlGGZ
7eVdGdZLBPNGftEsvHYE+ggfdg/8130g2RFLsRfRKgC+bGx8wrFr/Ic54swuafgg
z2Wr3DE5B+kU1xSglEmnbKd+wR6nUgfFTheekcFS4BDPuwW5E8A6mhL6eKWRPOK2
nh4oRlB5Wc+Ddu2prs1tdOdcxi1jXTpqXQpZ+9LaWNNaLG5rCl69QwZlLk88N3WD
UbbwB/lLCJKWPT8P1NA3l5B2XhNs4CT35fjFxBLj6eO67Knv/rCRhGL36mBmMFsI
aSiUOPU371o8ioQ6gqb4nLjn4xAc976Zr+GZOTPlR4/2H8tuVAoFphI7YX4lJ2HT
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21242638784465586820355185171245258384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation CA, Level 2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-17 19:34:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-21 20:51:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gewpasp.iss.lexisnexis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Miamisburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OHIO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LexisNexis'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25298279617708498295912309504907121177968498726002127568790906216458939652310241175500110362715993706315557411881265917273200355797643101299526239072581652717216142528428541539705832093602042092911820322222106422761470372810395826908898983051945133294785956923442953841629195479781632642569734789764253986562448277221919198148856721831290256348697024058087440957979562701062570132620011916343432297028345373548245255425929808629449421510749663168211384124447150977647052973027054791712359349146652706560777394104147146415972179667635465364907912408890608101381021381228988054681668573734487992159580436261225436926911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9afe9493a16a282e11d5e3203c747da4897232f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5dd9969a40c727cb2c9ba2eccf19abc8afcc8648
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA_L2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.30360.3.3.3.3.4.4.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://ssl.trustwave.com/CA'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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