www.ghana.accessbankplc.com

Issued by GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 07:cf:4c:1a:2a:8c:6d:91:0b:10:27:67:00:5a:d4:73 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ghana.accessbankplc.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:cf:4c:1a:2a:8c:6d:91:0b:10:27:67:00:5a:d4:73
Serial Number (int): 10380944956441360768021704492850009203
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 95:49:a1:b2:47:6f:a6:b2:b1:6b:8f:d6:e8:dc:23:1d:e9:ef:2d:56
AuthorityKeyId: 12:c9:88:9b:2f:c9:44:7a:7d:12:f1:df:40:03:42:98:92:c7:24:d6

Fingerprint (sha1): d8:c6:40:3f:66:38:0f:eb:6f:f4:98:6c:e2:7b:21:61:6e:b9:92:42
Fingerprint (sha256): 08:ad:6e:66:cd:7c:86:6e:28:24:de:35:be:fb:ea:5b:ad:8b:22:8d:e3:dd:62:41:55:80:20:d3:c1:69:39:5f

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl

Check the revocation status for certificate www.ghana.accessbankplc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ghana.accessbankplc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ghana.accessbankplc.com

Other certificates including the domain name accessbankplc.com

(limited to 100 certificates)
ghana.accessbankplc.com
fatca.accessbankplc.com
agpaymentnew.accessbankplc.com
creditcardstmt.accessbankplc.com
nextgenpilot-mozambique.accessbankplc.com
primusplustestbw.accessbankplc.com
blog.accessbankplc.com
primuspluske.accessbankplc.com
dtsreporting.accessbankplc.com
cib.accessbankplc.com
*.livebeta.ghana.accessbankplc.com
nextgenprod.accessbankplc.com
agencybankingrw.accessbankplc.com
whatsappbanking.ghana.accessbankplc.com
instantaccountrw.accessbankplc.com
cbnciss.accessbankplc.com
erms.ghana.accessbankplc.com
real.accessbankplc.com
digitalloanadminportal.accessbankplc.com
www.ghana.accessbankplc.com
optixserver.accessbankplc.com
nextgenpilot-zambia.accessbankplc.com
fcubs-ke-webservices.accessbankplc.com
nextgenpilot-zambia.accessbankplc.com
customerconsent.accessbankplc.com
accesspaycong.accessbankplc.com
www.accessbankplc.com
*.ghana.accessbankplc.com
ibank.ghana.accessbankplc.com
accessbankplc.com
link.amexmembershiprewards.accessbankplc.com
nextgenpilot-mozambique.accessbankplc.com
ibank.accessbankplc.com
primusplusguinea.accessbankplc.com
agencybanking.ghana.accessbankplc.com
*.accessbankplc.com
nextgenpilot-sierraleone.accessbankplc.com
*.accessbankplc.com
payroll.accessbankplc.com
merchanttamsapp.accessbankplc.com
accessmobile.ghana.accessbankplc.com
access-charge-pilot.accessbankplc.com
customercomplaints.accessbankplc.com
mail.ghana.accessbankplc.com
www.cameroon.accessbankplc.com
blog.accessbankplc.com
ussd-uat-ext.accessbankplc.com
nextgenprod-guinea.accessbankplc.com
blog.accessbankplc.com
blog.accessbankplc.com
accesstrade.accessbankplc.com
nextgenpilot-southafrica.accessbankplc.com
customercomplaints.accessbankplc.com
ghana.accessbankplc.com
www.ghana.accessbankplc.com
basement.accessbankplc.com
etranzact.accessbankplc.com
cib.accessbankplc.com
southafrica.accessbankplc.com
cib.accessbankplc.com
*.ghana.accessbankplc.com
nextgen-zambia.accessbankplc.com
agsandbox.accessbankplc.com
delivery.accessbankplc.com
accessmobilerw.accessbankplc.com
*.accessbankplc.com
real.accessbankplc.com
*.accessbankplc.com
primusplussouthafrica.accessbankplc.com
primuspluszambia.accessbankplc.com
dmobile.accessbankplc.com
uat-accessbank-appcenter.accessbankplc.com
901.accessbankplc.com
processmaker.accessbankplc.com
*.accessbankplc.com
primuspluszambia.accessbankplc.com
accessnotifier.accessbankplc.com
customerinformationupdate.accessbankplc.com
guinea-b2w.accessbankplc.com
access-charge-prod.accessbankplc.com
cib.accessbankplc.com
mbank.ghana.accessbankplc.com
accesstrade.accessbankplc.com
nextgenprod-sierraleone.accessbankplc.com
nextgen-zambia.accessbankplc.com
southafrica.accessbankplc.com
ebankgh.accessbankplc.com
fatca.accessbankplc.com
bc365.accessbankplc.com
processmaker2.accessbankplc.com
southafrica.accessbankplc.com
fatca.accessbankplc.com
primusplusguinea.accessbankplc.com
fatca.accessbankplc.com
nextgenpilot-zambia.accessbankplc.com
ibank.ghana.accessbankplc.com
blog.accessbankplc.com
delivery.accessbankplc.com
www.accessbankplc.com
rel-accessbank-mobile.accessbankplc.com

Certificate

The complete raw certificate details for www.ghana.accessbankplc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDTGL85cSsbngGcOdyzj
9Wa90x4QZAjMZth/Bp0UuQggOKcfITZZ0D84XxOOpMGAgDPUTZleU9xMNGT2r/MN
xUB1sIecT8NaGirKBk7B83i4YewbOSXsCuCQv/Cvz6P/hMjtUfd2HjRwTEPzg7iv
TXHpla5jGUZgn+TOYYmKkIVSob0fiTz7kgDIbelaoBW1Q7EcWXkNH2TgKDrlGzL0
p5p/nfBYEiwwK/6CiMUClAsJ+j1A1RiDCIkePj5jBW2WeYAwQoE7K7qz2h/+e76q
kEE/rUyrdjYaEha7gMd8i72cKYGowieFc0zYkFNrXP4TqdaGLKtOZrDja5+LrvcJ
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10380944956441360768021704492850009203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ghana.accessbankplc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22243965585680307561997634621115054073137699297418744612836540346839269169150743050718558497017899784123249255601223543241018064687110719725900346980724632912409449287177627242763236912414415802027309251294898547856602391418771092701815955918006058592718820308990275966036074975423638859822860105759957940419563449966750217094908793142547912289420055463297473893240812866547515598242818141829204341677981735561768745208872038752886203817033012490134094560483248588881849681669175280741507803679756024143154748983397581134284386361351704192439679243688604147245048535107425876704411452616913573420921193911496130103601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 12c9889b2fc9447a7d12f1df4003429892c724d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9549a1b2476fa6b2b16b8fd6e8dc231de9ef2d56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghana.accessbankplc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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