edge4.townebank.net

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:74:43:08:49:63:38:53:92:2d:c7:84:6c:c5:a8:76 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=edge4.townebank.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:74:43:08:49:63:38:53:92:2d:c7:84:6c:c5:a8:76
Serial Number (int): 11237489979850467131409230868913694838
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:a1:d0:d2:6e:f2:a1:ed:9c:61:2a:de:57:cf:bd:f2:7b:4f:21:15
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): f3:17:e1:d5:86:34:2f:1f:dc:4c:85:88:a3:cd:e7:36:4d:70:60:2b
Fingerprint (sha256): 5d:37:e6:5b:ae:5c:ce:80:e7:d3:69:73:26:b6:2b:17:93:4c:c1:a5:4d:4a:35:7e:9b:11:39:b1:fe:89:35:97

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate edge4.townebank.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge4.townebank.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge4.townebank.net
tow5969ewe1p01swn.townebank.net
townebank.net

Other certificates including the domain name townebank.net

(limited to 100 certificates)
edge1.townebank.net
mfa.townebank.net
mvproxy.townebank.net
mfa.townebank.net
appian.townebank.net
adfs.townebank.net
tbentspsolutions.townebank.net
adfs.townebank.net
tbshare.townebank.net
entise01.townebank.net
fisopendcitest.townebank.net
mfa.townebank.net
a.townebank.net
edge4.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
tbshare.townebank.net
edge1.townebank.net
edge4.townebank.net
rcvpn.townebank.net
bnkvproxy.townebank.net
mfa.townebank.net
appian2.townebank.net
appian.townebank.net
rcvpn.townebank.net
edge4.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
appian.townebank.net
adfs.townebank.net
townesecureexchange.townebank.net
appian.townebank.net
mvproxy.townebank.net
edge1.townebank.net
fisopendci.townebank.net
appian.townebank.net
mfa.townebank.net
tbentspsolutions.townebank.net
mfa.townebank.net
adfs.townebank.net
scanner.townebank.net
adfs.townebank.net
appian.townebank.net
a.townebank.net
adfs.townebank.net
adfs.townebank.net

Certificate

The complete raw certificate details for edge4.townebank.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr10LrMq0A98P5gEgUikX
q3SFdLk1Wnxr3pXvlhylA5EpxG5ubUbwjp19tVsp2+E4d52mKpFukKRt8ANp8Zca
eGUwHRHqJGspOBMBTKJTGy80/OjPcFJvo1tqqDkF4FtLSLGWjzcWm4IAKoENkNys
jGGDRjjL1va8gWCWG4ajBA6ykCHSivkpFfprwbc6ILFqw9t4gFXhayWBRUp15q9A
8BiEK9DWo4q/IZlgy5n/JNIhhHQ1z9ozxpz3fPf7xfr7nxtcKwerOd+mBbRYwsZ3
jC9ctMCp0lmWQct3+4mIXUUIcvOIe+f1Qp0S2I8Bojm9oZeOKTesRhgwe1AtanTw
po8BKP10lBcyE4pqtQU1A/dzD0dm5UK5ANjqFU67bh4/mUv8UbYEjD105W0eRrxb
T5xxWhhG5bMA4SwAfj2AO8BBHBi18SNcdVxe1gC3eYsSs2sA8u4G4uTgFn6TO34t
RrPMJGx1/3Ror5hzBzmxOxc9TNtUtPM0X1NbK0WQUkcYkTzNmYXkweIoHcl7j/ql
dP4TShMK1hv31NWTh8XqIXt5lJ1Fisg+S6vkY3HgGF+VJJ7KgPE2JbfHGkp6wX0c
m8rmiBxowIcHKr4L/F6/XQN8Ln1cXrSqEne3lMpNJ6/gSUSymls6doERqOhnYUVM
1FmxvdvcsovR3F5g+VFTkFcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11237489979850467131409230868913694838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge4.townebank.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715420496871866179326457063270511495007656406926841091487652041729689818636195029086824054051919545856676307648088400529901200661118191338932360892851829378780496994475000313212189656241097477307364296904869143612634627019666685726050507420379684189267977793233810197718381135897711390395027746238453984349087509606585636925844592504194898454141802452803802990436287158979582652047334746198353889783259731728399368514232598093941965290765021336238012689151470747276832212756090373553348974518485534181853382432548731241662189046298621447341012801639375265687714583539580299329904821265361629228218676236761310417939770187391900459672617593072503403537931581571884048184947913940369062919841169078010268851374230486660265655062917308532018395502225080391102308888485243212607787562241205906840303617584678491158633263937862309331460322367015879904819155257033349850586924854956784930397951520628686737116181233739305618088936955326873510938107240520197607953848034966699173339183245317602018167953127969711865774128734239707282289286338598628536512967182540341163532600077251157732666467617959823974574464292920743324613768512191487149985934529684614356835707007578093951802263410999328457292247853756839587185075542400198265011408983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bba1d0d26ef2a1ed9c612ade57cfbdf27b4f2115
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge4.townebank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tow5969ewe1p01swn.townebank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townebank.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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