password.pafco.ca

Issued by Thawte SGC CA - G2

About this certificate


This digital certificate with serial number 78:6e:b7:4d:f1:c6:6e:bd:7c:f0:10:f7:a3:7b:3f:ed was issued on by Thawte, Inc. .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Using depricated TeletexString for '[Markham]'
  • WARNING: Using depricated TeletexString for '[Allstate Insurance Company of Canada]'
  • WARNING: Using depricated TeletexString for '[IT]'
  • WARNING: Using depricated TeletexString for '[password.pafco.ca]'
  • ERROR: Certificate contains a key usage different from ServerAuth, ClientAuth or ServerGatedCrypto

Allstate Insurance Company of Canada

Organization: Allstate Insurance Company of Canada
Organization unit: IT
State / Province: Ontario
Locality: Markham
Country: CA

Thawte, Inc.

Organization: Thawte, Inc.
State / Province: Ontario
Locality: Markham
Country: CA

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 78:6e:b7:4d:f1:c6:6e:bd:7c:f0:10:f7:a3:7b:3f:ed
Serial Number (int): 160082230004980495276615096921967247341
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 24:c0:c0:a4:49:3c:52:0b:12:d8:92:0c:51:d1:87:a7:4d:54:75:2c

Fingerprint (sha1): 0b:2e:fd:48:18:f8:93:61:92:1f:e9:82:f6:c6:a1:0c:8d:ab:f9:24
Fingerprint (sha256): 04:32:c0:ac:21:3a:57:86:e0:3a:1e:1a:e8:a4:de:6e:a0:fd:4b:1e:f2:02:36:a3:6e:ee:5b:8e:60:27:92:a7

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for the current certificate on password.pafco.ca
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: password.pafco.ca

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIQeG63TfHGbr188BD3o3s/7TANBgkqhkiG9w0BAQUFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRswGQYDVQQDExJU aGF3dGUgU0dDIENBIC0gRzIwHhcNMTMwODE1MDAwMDAwWhcNMTUwODE1MjM1OTU5 WjCBiTELMAkGA1UEBhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xEDAOBgNVBAcUB01h cmtoYW0xLTArBgNVBAoUJEFsbHN0YXRlIEluc3VyYW5jZSBDb21wYW55IG9mIENh bmFkYTELMAkGA1UECxQCSVQxGjAYBgNVBAMUEXBhc3N3b3JkLnBhZmNvLmNhMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuARg1P9k9luF6lBhHxpzvliI PFssg47MdbiEvjdYXOdgWesjBS7DjuP6rUZo+/Tz3/jLre9ZYk7cgtT21omCgs3+ WZQ8tUG13Qv6axVAfi9oNEFm1jnIdCW4jD2hOs5/cw8V8St4wMFqxAELtpv0md7e y+VNtRTPj95rd7Mr/NvG47no+6uftXiJo9vBKOSuHTjn7+GQ87bMHGDIVW9g/ZoY /cCTASuReH480+dmV4TmOL4b0NrfjDf41AKqc0+gyHlERRzW2AAXHHsRvWee2TTb gC3/EvtOhjj0VaYfMLub9E6vSUFGFO+4PlWIvS5aULK2DpyVUiHq01gB9gMhgQID AQABo4IBejCCAXYwHAYDVR0RBBUwE4IRcGFzc3dvcmQucGFmY28uY2EwCQYDVR0T BAIwADAOBgNVHQ8BAf8EBAMCBaAwQQYDVR0gBDowODA2BgpghkgBhvhFAQc2MCgw JgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMB8GA1UdIwQY MBaAFCTAwKRJPFILEtiSDFHRh6dNVHUsMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6 Ly9zdnItc2djLWNybC50aGF3dGUuY29tL1RoYXd0ZVNHQ0cyLmNybDAoBgNVHSUE ITAfBggrBgEFBQcDAQYIKwYBBQUHAwIGCWCGSAGG+EIEATBtBggrBgEFBQcBAQRh MF8wIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0ZS5jb20wOQYIKwYBBQUH MAKGLWh0dHA6Ly9zdnItc2djLWFpYS50aGF3dGUuY29tL1RoYXd0ZVNHQ0cyLmNl cjANBgkqhkiG9w0BAQUFAAOCAQEAmhiofZ8Nmh6QYIjgSjUzwiRGzwTNhVAvs3vj um9122ikOSOvFF82dCCwbnQl3bBC7phuCrDN94c9U9HTkSmMU4fNFgPXj7cZFjca hAwqlrhcsDZsSPwitv83MtHkKIaccr73QYyRTymASN7WfWIBHI0GosNUNkg5A4nq qmyklVZnlLElEjGcWIqZBpHUwCTBtwNfefIlwMqbksWz62isdurIwGb62uNwX4JT CZOaEZTiYS2lDywbDyGEjKrp4AyE7mhgGaczVAoEA3QziqM5nbyfXt/ynKyh1/Ki q4vPcENOOOG8LPtNQYT44hkRP5I6gpP7/CyhEiISLO3eJCx3eg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuARg1P9k9luF6lBhHxpz vliIPFssg47MdbiEvjdYXOdgWesjBS7DjuP6rUZo+/Tz3/jLre9ZYk7cgtT21omC gs3+WZQ8tUG13Qv6axVAfi9oNEFm1jnIdCW4jD2hOs5/cw8V8St4wMFqxAELtpv0 md7ey+VNtRTPj95rd7Mr/NvG47no+6uftXiJo9vBKOSuHTjn7+GQ87bMHGDIVW9g /ZoY/cCTASuReH480+dmV4TmOL4b0NrfjDf41AKqc0+gyHlERRzW2AAXHHsRvWee 2TTbgC3/EvtOhjj0VaYfMLub9E6vSUFGFO+4PlWIvS5aULK2DpyVUiHq01gB9gMh gQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 160082230004980495276615096921967247341 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Markham' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Allstate Insurance Company of Canada' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'password.pafco.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23230007109339047066987043753174553997645592716449690009575151099727911385520754288765638483927511284893496000722830969384186399591706202961572792712802084578979312236054580476920453888161030269412126427034263217524862997797859906059225583860677949631756790843535028151866809238913116958426651955218452480730841917572550011440813255127762600068272813228847646622456767064423896551074712396879012456440647166468620615344416494614283091955030657311793675642174726222746864270049781775480920392841256373108030716400821811213298830865444027295993517631607004167715140772938610601673703679331097704857690314753882747773313 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.pafco.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c0c0a4493c520b12d8920c51d187a74d54752c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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