sep-qa.pncint.net

- PNC Financial Services Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 6c:f4:5f:76:36:31:48:01:f5:12:d4:f2:2d:00:1e:67 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PNC Financial Services Group

Organization: PNC Financial Services Group
Organization unit: UAT Environment
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:f4:5f:76:36:31:48:01:f5:12:d4:f2:2d:00:1e:67
Serial Number (int): 144825480172860703748861387096004238951
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 84:ca:66:35:48:d8:e4:a5:30:14:b4:39:a1:f4:1f:af:80:50:e0:a0
Fingerprint (sha256): 13:74:d5:75:46:74:47:53:7d:05:66:5e:ec:ca:61:5a:43:88:30:7e:42:a7:d1:f0:06:e2:14:ef:91:f5:da:47

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate sep-qa.pncint.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sep-qa.pncint.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sep-qa.pncint.net

Other certificates including the domain name pncint.net

(limited to 100 certificates)
vta-test-091718a.pncint.net
rtsah.pncint.net
oly-app.pncint.net
vta-validation.rnd.pncint.net
atydmadmin-bf.pncint.net
commercialimaging.pncint.net
wdlp260a.qa.pncint.net
lesp354v.prod.pncint.net
pnc-next-clearxchange.pncint.net
udc.pncint.net
capitalstream.pncint.net
psg-iib.pncint.net
sepq5-qa.pncint.net
brt-ch2-tb.pncint.net
pse-cxc-prod-pnb.pncint.net
fros.pncint.net
pwwft.pncint.net
ucrp1.pncint.net
moo.pncint.net
wis-iib.pncint.net
cptxidocs2.pncint.net
brt-ch1-pf-qa.pncint.net
ldga315a.prod.pncint.net
applyint2-qa.pncint.net
skqamedpool01.pnc.com
wimx236a.qa.pncint.net
mqqmgr.lmqs344qm3.prod.pncint.net
vta-validation2-prod.pncint.net
rek-prod.pncint.net
brt-ch2.pncint.net
mfrcsa-qa.pncint.net
nsm-hv.pncint.net
vta-validation-rnd.pncint.net
skooprodpl02.prod.pncint.net
wdlp261a.qa.pncint.net
m-tn3270-t.pnc.com
leth128a.uat.pncint.net
brt-ch2-uat.pncint.net
wdkm313a.prod.pncint.net
test181vcom.pncint.net
vta-validation-prod.pncint.net
share-prod.pncint.net
leth200a.qa.pncint.net
aes-atf.pncint.net
atydm-uat.pncint.net
brtpcetablet2-rnd.pncint.net
cgtcomplianceqcrebuttal.pncint.net
hcacl2-ext-rnd.pncint.net
wls-qa.pncint.net
rtsfc.pncint.net
deliveryuat2.pncint.net
leth364a.prod.pncint.net
iforms-rnd.pncint.net
vta-validation2-prod.pncint.net
vestedinterestgateway.pncint.net
gtes1.pncint.net
vtatest.pncint.net
test181vcom.pncint.net
confluence.pncint.net
*.wpi.pncint.net
LETL338A.prod.pncint.net
cfo-iib-uat.pncint.net
vta-validation-rnd2.pncint.net
brtpcetablet2-rnd.pncint.net
bam.pncint.net
lcm.pncint.net
lss.pncint.net
deliveryforms2-qa.pnc.com
docs.pncint.net
brtreport2-bf-qa.pncint.net
deliveryforms1-qa.pnc.com
lesi32v32waz.prod.pncint.net
atoadmin.pncint.net
cwm.midlandls-uat.pncint.net
mortappsvcsint-qa.pncint.net
view.pnc.com
cgtcomplianceqcrebuttal.pncint.net
mfr-qa.pncint.net
brtreport2-bf-qa.pncint.net
mobile-uat.pnc.com
vta-validation-rnd2.pncint.net
skwebappint01.pnc.com
lmqs260261az.qa.pncint.net
brt-ch2-tb.pncint.net
communicatorhq.pncint.net
sep-qa.pncint.net
ced-rev.pncint.net
leth128a.uat.pncint.net
aecin.pncint.net
vta-test-24a.pncint.net
pncint.net
vta-test-27c.pncint.net
imxiqa.pncint.net
wato315a.prod.pncint.net
atydm.pncint.net
wp.pncint.net
connect4.pnc.com
skedpool01.pnc.com
vta-test-rnd.pncint.net
map.pncint.net

Certificate

The complete raw certificate details for sep-qa.pncint.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRGRkTPktQpN7ppscJqM
uaupHWzr/Q4OgtDn0egQwH7IzR9fYxzZMJDurq9JEc6iWBRUqMFwgBWFeL/PK5GY
T2CyANbMp9fe3bTLnOnUQ5n2peqN17cA9DTipo0yE/XmK0m1RDbWG0qA+j4Q3VmH
WU8KYcJhYrfjjfMVFnjNgKUuqh8dgJz/2ULUW8eBoGf/1ZbrMTQm80XKZBWMcPWo
f7pUMEp7QqqPQWAAhhLec1tOBnyX6Ys1h0TW6sjYKJf3KpnLnhs1LemGb4VCSQ2U
Qhx/c7MXF2T1UNsitkfxmLLHqZGpvTcDuEZ4DB44Vb9ob4lCMfx2RO29ClrYLsZN
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144825480172860703748861387096004238951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PNC Financial Services Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UAT Environment'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sep-qa.pncint.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21847890169460731324597604729819535274397216520762436928937701728151419343173896282293273121274282967069096885711423137129137574714747353192828300951814649588536584460666154876112931491629146697273122016484970613615401809174309739334195140732525393004345325757734584315081039154557572256260031026002648181964834799495365468518730732686624595177050626019617855646345617974469178364144395049956462018448556447921609053003281918832563513219364535314858215838889850089081848091154650367914103861800837988806607046347168796054650666089418652737077039860493949310903670908598615202566811628829684069792735517385437038923191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sep-qa.pncint.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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