lbs.mvpbanking.com

- MAGIC-WRIGHTER, INC. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0f:12:29:33:d6:5e:4b:7a:43:28:e8:24:26:4b:ea:8e was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MAGIC-WRIGHTER, INC.

Organization: MAGIC-WRIGHTER, INC.
State / Province: Michigan
Locality: Grand Rapids
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:12:29:33:d6:5e:4b:7a:43:28:e8:24:26:4b:ea:8e
Serial Number (int): 20032716966001190498479239053225749134
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c0:55:8a:ea:b8:c7:52:ad:a6:04:75:17:56:2f:b0:e5:2b:0c:54:38
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): a0:58:90:fd:31:04:9a:bb:b2:9e:fb:80:a5:78:0e:a5:15:4d:b7:e7
Fingerprint (sha256): 3e:be:56:67:3e:4a:2e:1c:60:4f:63:3a:0d:37:47:3d:ce:8e:9a:74:76:04:21:08:b3:8d:88:a0:bd:9f:58:03

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate lbs.mvpbanking.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lbs.mvpbanking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lbs.mvpbanking.com

Other certificates including the domain name mvpbanking.com

(limited to 100 certificates)
elb.mvpbanking.com
elb.mvpbanking.com
elb.mvpbanking.com
lbs.mvpbanking.com
lbs.mvpbanking.com
lbs.mvpbanking.com
elb.mvpbanking.com
eps.mvpbanking.com
lbs.mvpbanking.com
lbs.mvpbanking.com
lbs.mvpbanking.com
lbs.mvpbanking.com
lbs.mvpbanking.com
elb.mvpbanking.com
eps.mvpbanking.com
eps.mvpbanking.com
lbs.mvpbanking.com
lbs.mvpbanking.com
elb.mvpbanking.com
elb.mvpbanking.com
elb.mvpbanking.com
eps.mvpbanking.com
eps.mvpbanking.com
elb.mvpbanking.com
lbs.mvpbanking.com
eps.mvpbanking.com
lbs.mvpbanking.com
eps.mvpbanking.com
lbs.mvpbanking.com
elb.mvpbanking.com
elb.mvpbanking.com
lbs.mvpbanking.com
smtp.mvpbanking.com
eps.mvpbanking.com
eps.mvpbanking.com
eps.mvpbanking.com
elb.mvpbanking.com
elb.mvpbanking.com
eps.mvpbanking.com
eps.mvpbanking.com
lbs.mvpbanking.com
eps.mvpbanking.com
lbs.mvpbanking.com
elb.mvpbanking.com

Certificate

The complete raw certificate details for lbs.mvpbanking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h5yVAFVh8s19KlzEpo2
AonosNknw3xKLE4jPknGffsj75oXj8GPYJmNG4nXYTMzGFy39433sM6LXzj9H+Q0
1x67SfredqEybmw3kzz2QYDPiSzjZDQZ5rzEiYNEr7s9Td+PQUxQKc7J2OuC+BUP
kdFB8PlptXF8C9JizxAjurLtiaIRwUcyiAfoPG9cooFBxBwos6sax1fZ352HPshL
n00L2awat50zTmqYWJGkw5ObCzHyp/pzIbDONpAhOokQMNZONgssNCYkOFqQZLQB
SB7oLpBE2N0c3mw107I03bSCygY6r/q68dmCEg7oVUvwzFvqnOQCYF0AfsaU4X32
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20032716966001190498479239053225749134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MAGIC-WRIGHTER, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lbs.mvpbanking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27030011037965718229414598275011601839715545273207442727488485067110773278601782630394952805351611652299760278408987754139709063686546781221961594995718484491431977447737154292454220777833679796942447253428184763079557378325540093219836356732101170706276295314233907769822491651443820084712366356062843058515174324770510784755882303649437989667117820312744649817086761045445009516396700951022016666020575336452964895822380118942221754998046702656018753384933855489366919210688161919578568561951533729622915255792763387601799110349115698746748832864280567121645254826265991539273778514055873484793239691356890000651781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0558aeab8c752ada6047517562fb0e52b0c5438
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbs.mvpbanking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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