*.gtefcu.org

- GTE Federal Credit Union -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:9a:94:e7:f5:b9:53:11:d0:ea:e6:13:3b:fa:6f:b7 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GTE Federal Credit Union

Organization: GTE Federal Credit Union
State / Province: Florida
Locality: Tampa
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:9a:94:e7:f5:b9:53:11:d0:ea:e6:13:3b:fa:6f:b7
Serial Number (int): 20741053827362853758560603983979376567
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:65:9a:8d:9b:0c:70:be:44:23:d3:66:fb:88:54:5f:48:be:0e:a8
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 74:49:66:3e:c7:0b:7d:5e:90:b8:4d:14:ca:5c:99:2d:f6:3d:06:66
Fingerprint (sha256): 20:ba:33:5e:6c:59:75:25:0c:8b:b6:ff:31:37:aa:9f:11:75:7f:7a:86:83:da:4d:24:65:85:e1:ab:63:c8:86

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.gtefcu.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gtefcu.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gtefcu.org
gtefcu.org

Other certificates including the domain name gtefcu.org

(limited to 100 certificates)
instantissueccm.ads.gtefcu.org
cuathome.gtefcu.org
*.gtefcu.org
webmail.gtefinancial.org
*.gtefcu.org
www.gtefcu.org
*.gtefcu.org
cuathome.gtefcu.org
m.gtefcu.org
cuathome.gtefcu.org
instantissueemv.gtefcu.org
instantissueemv.gtefcu.org
www.gtefcu.org
*.gtefcu.org
instantissueccm.ads.gtefcu.org
polycr01.gtefinancial.org
webmail.gtefcu.org
*.gtefcu.org
www.gtefcu.org
mortgages.gtefcu.org
*.gtefcu.org
www.gtefcu.org
*.gtefcu.org
cuathome.gtefcu.org
*.gtefcu.org
m.gtefcu.org
*.gtefcu.org
cuathome.gtefcu.org
cuathome.gtefcu.org
m.gtefcu.org
*.gtefcu.org
*.gtefcu.org
polycr01.gtefinancial.org
*.gtefcu.org
*.gtefcu.org
m.gtefcu.org
webmail.gtefinancial.org
*.gtefcu.org
www.gtefcu.org
webmail.gtefinancial.org
webmail.gtefcu.org
webmail.gtefinancial.org
*.gtefcu.org
mortgages.gtefcu.org
mortgages.gtefcu.org
cuathome.gtefcu.org
www.gtefcu.org
www.gtefcu.org
*.gtefcu.org
m.gtefcu.org
mortgages.gtefcu.org
instantissueemv.gtefcu.org
instantissueccm.ads.gtefcu.org
instantissueemv.gtefcu.org
webmail.gtefinancial.org

Certificate

The complete raw certificate details for *.gtefcu.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOrWvXMIfc8PGH2RgKkD
qG4p4LbrOsBtCxyWmPHsPtzrEGoGMWaeWarD7s2BJ6asqWgRF3upsfVN4VgnIScL
k+53iQhyOqiDoF+vVAH0gQzJNRRVoZE+0V77ZnHoDukEs/ADuV7snSxs3CCt02Pt
Vx7qXkEof9a9cbncGuq9Rmi4hb8NtZ1EojjONC/rUU9neBWT7ipRPLQY1WcIjNxG
erZr7MPElYIiH3GX+LPFdno49kTP9OIgoJwRJSjhsSI+v+ds+f+AAfx68b0u45Ej
heyRJRmAoFqsYqrFXGDb3MuzgZsx4NqKf3OElWlRjtfLg+G/fzsdnAhll/He5ufq
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20741053827362853758560603983979376567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tampa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTE Federal Credit Union'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gtefcu.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21828791796430531136508289909233960253826516238657535499581314565033576661009548756472163542225571502109316407044120249428759711501180330265742734014537371167210029038849915506218511816493290377646634030588560958250872999310905625614921262689099173373484084390559577542545692601202837193763967336698192558489862252922665506913675153979046685613478390912064047179732245945403940790550090617230985491304645363674772892877907331427072348778436614726035613922650814425944408666034235247457867670218592440123677455787435243426855938413041194247765979275962194089975672437167982495310931264507521499357683585143656277338843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09659a8d9b0c70be4423d366fb88545f48be0ea8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtefcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtefcu.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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