secure.fordeumicrosites.com

- Ford Motor Company -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:33:17:05:2e:eb:fd:f0:d3:c0:3d:f8:e8:67:20:b1 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ford Motor Company

Organization: Ford Motor Company
State / Province: Michigan
Locality: Dearborn
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:33:17:05:2e:eb:fd:f0:d3:c0:3d:f8:e8:67:20:b1
Serial Number (int): 13557554003717738718422883074811830449
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 17:81:55:8c:99:a0:e2:85:a8:8b:cb:4e:e6:f0:2f:c1:d6:1c:49:ea
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c0:f7:51:24:c2:9a:c2:8f:90:ff:dd:38:fb:06:06:83:15:e9:10:eb
Fingerprint (sha256): 28:35:2e:a7:10:8a:e7:76:10:e5:17:9f:fc:38:d2:00:72:f2:a3:7a:0a:d0:7a:20:30:b4:e1:a3:21:e6:71:33

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate secure.fordeumicrosites.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.fordeumicrosites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.fordeumicrosites.com
www.mustang.consumer-connect.com
mondeo.ford.com
www.consumer-connect.com
www.fordrrpcache.com

Other certificates including the domain name fordeumicrosites.com

(limited to 100 certificates)
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com

Certificate

The complete raw certificate details for secure.fordeumicrosites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzupI8yDMXljClzIrGMb
JisZHDW4NbrpK3sd7/l6FnIU04YDvHj6ibXH/JSfRDJfTstWvTrz5UfX3MtjPuUx
Guy2hIH7mkmywxXzyNnPGVV/5Myd+5bfafHDUysUU2SViZyRwF7yl10ct8m33z67
aXD1gYXCpYgLrvAVP056YfaT0xawETPkvFo+Y2F66kdauC1nbq69S/B60sjkLnMy
weiUio/hlqrRpwzagtMQmjGUb8XHnlnmoHwRheWhzkec2HFf3hE5OMpABUAsVIjD
L1UQeSEcCubYIShcpW4v2Aq6UnN6Cxv+KtJvFh3Rbqm/LxTe7pIm6FMpXg2XMMur
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13557554003717738718422883074811830449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dearborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ford Motor Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.fordeumicrosites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25655795697001970749794144487649350889303682507136317411743525341016368915476551374059163838535372951256546569764368867495105880585568035683433606144866119451233556625077957368887130713900750356198425682645102909758579688261708856248523454760273495298577620402034100393297110898099425083983813468881383660332816611757791544980678695026281591528316242772033103313334268659987863308026933836931746285556484966327540480744082298540694281856692403126148893137264095880696887652060493625228756278256691606177959193756404542886006241528173056884142164429153270035133917929840727995795751305814019142127706436580282118941457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1781558c99a0e285a88bcb4ee6f02fc1d61c49ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fordeumicrosites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mustang.consumer-connect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondeo.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumer-connect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fordrrpcache.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163972c28e80000040300483046022100de2fd33934e5f5f458c0565431f066ab5d0c788cc595348a6e196b75d3eba350022100e6fb532457bd9fc4b2ad66a076ab3cc47226d5f8361bd6b75a71abe0ee79d8710076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163972c29460000040300473045022100d2f4bb7a6487966b76d26970795b35f4978ccf9b104850fdd1e0ec9501275bba02203803183c3d5b48d961ae1fa232735cdd7e39d1c76ec2428fc99f079b79406139
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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