keylinklogin.key.com

- Key Bank -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 30:1f:23:79:d2:71:15:47:8e:0c:33:7a:c6:00:9f:d6 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Key Bank

Organization: Key Bank
Organization unit: CSC
State / Province: Ohio
Locality: Cleveland
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:1f:23:79:d2:71:15:47:8e:0c:33:7a:c6:00:9f:d6
Serial Number (int): 63964624536362894760066370932656086998
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): e1:c4:dd:e5:38:6a:7f:6a:b4:41:d8:8e:03:46:3e:d5:5f:97:8a:af
Fingerprint (sha256): 0b:20:93:35:9e:41:ea:1d:18:e7:b6:b7:41:06:14:32:a4:64:7c:98:1d:86:4b:57:38:5d:d6:7f:25:f8:cf:99

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate keylinklogin.key.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keylinklogin.key.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keylinklogin.key.com

Other certificates including the domain name key.com

(limited to 100 certificates)
online.key.com
onlinea.key.com
laurelroadpreview.key.com
pdfim7.key.com
tdpaxbpwebsrvc.key.com
ptfts.key.com
ptkey2cre.key.com
ptkeynavigator3.key.com
tmams.key.com
kbo.key.com
tpm.key.com
login-dev.laurelroad.com
uakbo5.key.com
ib2appua2.key.com
prektt.key.com
student-gcp-dev-np.laurelroad.com
ibxpreview.key.com
tdpaxbpwebsrvc.key.com
login.laurelroad.com
ispd99.key.com
ktt.key.com
key.com
ptsdr.key.com
qvbod.key.com
sso-origin-gcp-uat-pp.laurelroad.com
ptktt4.key.com
video.key.com
certs.key.com
sdr.key.com
ktt.key.com
ptib2tfim.key.com
login.laurelroad.com
ktt.key.com
uaktt6c.key.com
ibxmpreview.key.com
lcoqv.key.com
lcosbdev.keybank.com
ptkeynavigator2.key.com
consolidatedpayables.key.com
fts.key.com
www.solar.key.com
onlinea1.key.com
mblaggqv.key.com
www.solar.key.com
mto.key.com
developer-preview-origin-gcp-it.key.com
ibxpt3.key.com
keybank.com
outlook.keybank.com
qvtamtmpext1.key.com
keynavigatorpreview.key.com
qvshopmerchant.key.com
sl-gcp-uat-pp.laurelroad.com
pdib2tfim.key.com
bonline.key.com
accounts.key.com
san-4-s7.tlsprovisioning.exacttarget.com
fts.key.com
login-dev.laurelroad.com
qonlinea.key.com
online.key.com
online.key.com
ktt.key.com
video.key.com
ibxqv1m.key.com
ibxqva.key.com
aggregationqv.key.com
login-lr-dev.key.com
billpay.key.com
www.key.com
sdr.key.com
keybank.com
metrics.key.com
keylinklogin.key.com
careers.key.com
ptkeynavigatorfim.key.com
ibxqv1m.key.com
ptkeynavigator1.key.com
billpay.key.com
mblpreview.key.com
kmc.key.com
metrics.key.com
ptkeynavigator1.key.com
login-pp.laurelroad.com
target.key.com
ibxqv1m.key.com
preview.key.com
ibx.key.com
onlinec.key.com
view.emails.key.com
onlinea1.key.com
billpay-uat.key.com
git-qv.keybank.com
ibxqv2.key.com
ibxqv3m.key.com
ibxqv1.key.com
key.com
mblpt4.key.com
ptkeynavigator1.key.com
image.e.grandamerica.com

Certificate

The complete raw certificate details for keylinklogin.key.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxKkplaFSBrYBmJ5DZUO
eOi33E+8/8geIr86pKn8Mdf8YKt/XT7zK5gKzj63CcjCpiAMbTzOdOrMFbOZINeN
8h15wV4d2uKobRj7RsD4fUqSi9OJ9dai08nvBk5mNWI/rDMsByQk7V6e7Fb1vct9
PNpigx0Gl9mIYuxKy8EUztUmvhUptJEO5RR1nRYGpkMhmyWtB3lEnwhzRA+7ahQQ
osx9naBtnJjlXu4YTSBOZ56b0Orbkik6pl8UQk8ktZiOZNvQsdeKka0CpWdaQx73
VYUVErSBUcphcnaXObsHHk9p73QXuyhyafe9hJXB7DL3ttjxA1NgTnPSN+vUpgpa
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 63964624536362894760066370932656086998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cleveland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Key Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CSC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'keylinklogin.key.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19576130556110069218939739595285594654987464271961220659224144852515798799846425467366284292549198267230522478729780784503665603268331239470105235577204409557227272244770798352878253216281410826187531237897082742688401461797355367522735079228151295031982522035325103136781921763400578074480446133016913135958408793092310285901501077489780018156914202493457800039255060114359640926027592484670136991115011472169175245789586907965303383642950834579246643026714711173058681322139574017283266599755086956782396822989081300781470872026189917139334739851984667062425197855778513003076735971598651955472510268314585467083267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keylinklogin.key.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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