*.vpc.travelbank.com

- U.S. Bank, National Association -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 26:d0:3f:6c:7f:e8:b2:5d:7d:84:e6:ab:09:b1:b8:29 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

U.S. Bank, National Association

Organization: U.S. Bank, National Association
State / Province: Minnesota
Locality: Richfield
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 26:d0:3f:6c:7f:e8:b2:5d:7d:84:e6:ab:09:b1:b8:29
Serial Number (int): 51591947974434538256151355229067130921
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d8:08:65:0c:7e:df:46:25:2c:c6:d1:81:1d:f8:6e:20:0f:39:95:26
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 84:ab:a5:76:66:f6:a6:2a:f6:a3:b4:83:be:18:d5:25:70:32:b5:b2
Fingerprint (sha256): 56:ba:ff:77:f7:19:80:9e:c2:c0:de:51:48:4f:d8:a2:b2:d4:06:74:4d:d8:ff:83:72:13:d6:05:23:e5:fe:30

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.vpc.travelbank.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vpc.travelbank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vpc.travelbank.com

Other certificates including the domain name travelbank.com

(limited to 100 certificates)
estatus.facturame.mx
softwarealternatives.net
estatus.facturame.mx
estatus.facturame.mx
www.elaina.nl
estatus.facturame.mx
turtleapp.com.au
prod.travelbank.com
estatus.facturame.mx
uat.travelbank.com
estatus.facturame.mx
robertholmberg.fi
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
www.easycrypto.com.au
estatus.facturame.mx
instashop.bio
www.patrickodenborg.com
admin.cidadegestao.com.br
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
status.beeketing.com
cdn.love4succulents.com
estatus.facturame.mx
app.mcsloyconstruction.com
docs.travelbank.com
dev-talking-talent.geraldeve.cake-lp.com
support.travelbank.com
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
www.bendayan.com.br
*.vpc.travelbank.com
estatus.facturame.mx
estatus.facturame.mx
docs.travelbank.com
beta-app.travelbank.com
estatus.facturame.mx
cmckenzie.net
estatus.facturame.mx
firebasetest.mglsk.be
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
www.designhero.app
estatus.facturame.mx
aoseulado.edenred.pt
marketplace.travelbank.com
salesloft.travelbank.com
estatus.facturame.mx
liberetti.com
estatus.facturame.mx
estatus.facturame.mx
*.travelbank.com
*.travelbank.com
estatus.facturame.mx
centaureducation.com
silinna.com
estatus.facturame.mx
estatus.facturame.mx
email.travelbank.com
docs.travelbank.com
estatus.facturame.mx
email.travelbank.com
status.beeketing.com
aharecharge.com
estatus.facturame.mx
estatus.facturame.mx
*.vpc.travelbank.com
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
status.beeketing.com
estatus.facturame.mx
estatus.facturame.mx
travelbank.com
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
actions.content.b-dev.brd.so
dlh-hayati-kotim.rinjani-parahita.com
www.promounters.com
salesloft.travelbank.com
www.thatfreshlist.com
www.suomhosty.fi
estatus.facturame.mx
estatus.facturame.mx
estatus.facturame.mx
create.appsaur.com
email.travelbank.com

Certificate

The complete raw certificate details for *.vpc.travelbank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmzyR70pPGk3Vobic9CK
LTrUjB261zk55xbHi3UCt7motqcuFljdJFh25Ye2wC4v/tIh0JtQpfqCqVDXc7ei
XLK34/WJ636wboCEiw6xhTLr+XJig9zDdSxcdSvh4jFNh6AMYxw2qCB00acIXo3s
VwXeS74n2yRIftufVhX47hMaV2NQLGXNOXEBOmkSOT5H8HtwOv2tSg2MwmcNgL9m
bU55qeOr9dwFnPkjly0Y4lyPw7hBhSCVj1tN1e+yLl4izlXUl5xbrOlH1sJz8En9
x3knRACj+1PReXvRpToLd1YxffU7Gpbw8wrV1g0RHAh/2pPTyiPe3W0xu60OKKIR
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51591947974434538256151355229067130921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 19:00:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-13 19:00:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Richfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Bank, National Association'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vpc.travelbank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24543954639081855211461364865277360215636679443987801871588858699090238001032677763087987325598173757671514509675455098474489765472951622037120180678333430291678934400567935115952474340193722958682707094095364293635280781388148162012118838244315218346229630117297586164004894202951400809335286581471120006011049975259175629975277208335024747817583318001248086657136844868818780018452449267030897062992868133622160306337983108969625945222410353879840023490468083296901146548687235447173412825144159656407539431082779706766747730725200680938777311553317827994665941082266842129495645190806737394900114230253779807244717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d808650c7edf46252cc6d1811df86e200f399526
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vpc.travelbank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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