secure.fordeumicrosites.com

- Ford Motor Company -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:3e:84:b8:e9:e3:03:78:cd:fe:61:ad:44:86:b6:3b was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ford Motor Company

Organization: Ford Motor Company
State / Province: Michigan
Locality: Dearborn
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3e:84:b8:e9:e3:03:78:cd:fe:61:ad:44:86:b6:3b
Serial Number (int): 10958438299942520786311493612191790651
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e5:b0:1e:e1:67:a8:84:f0:27:5d:49:72:09:5b:63:99:a8:f6:78:f3
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 59:69:86:a5:c0:59:8c:1d:b5:36:27:2b:18:76:7d:c7:5a:9b:80:7a
Fingerprint (sha256): 5d:84:71:9a:78:ca:a2:80:98:e6:c3:e3:36:55:cc:79:82:95:fe:d6:7a:49:0b:0e:15:83:80:30:3f:61:f5:38

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate secure.fordeumicrosites.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.fordeumicrosites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.fordeumicrosites.com
www.fordrrpcache.com
www.mustang.consumer-connect.com
www.consumer-connect.com
mondeo.ford.com

Other certificates including the domain name fordeumicrosites.com

(limited to 100 certificates)
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secureqa.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com
secure.fordeumicrosites.com

Certificate

The complete raw certificate details for secure.fordeumicrosites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteIXS/FBBeZu88L/qf1v
Gn4D7V4Sw9gqwsnEOim8A/cbEjdDCxV1RMsJxJg4R4vIGr08PAxXcCtvwiiH76sy
IOtbBTYlXW9AJQYbBXF3W/PJS0WOySeeC0oNIxJyFHWX3QEvPMf+AL/RX0+Ywiz8
MBs+xnwjTMpWu4GpVL+NEWjJO2Bfz8lx9EUZTYHGENJaR8+gptpHSSzxjxGfJCCc
q8OtpLJwwO2rrz/4nnHxCVRqopHgadZd5OOQfbUTBf+j3OxIL8sPr0UeGvVNXyzy
S5xL9Ro8S8SA07tPOuB1l8Skc79cYqRIe+ajGuE+W+HR3usB8vN+uSqDgaEBBiag
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10958438299942520786311493612191790651
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dearborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ford Motor Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.fordeumicrosites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22960622827483974179079799046153513523795374197508173977201087676236681493755980033265016602547424867568033879120535760007374990179743625470033215379133334715838318974830968798388152447107498370020859157850940609247209493063383181635928833299445688003322337007864117820260335372286096375742385732024535076307583204867583675015265776993435733045145046073475846636421587892059005204004433465675403154507705231723914841496278579704074581945571961232575290266370595175453604661507678642040114898335819599312990478875468265705633619650726843613650292207632931876338470469484251957161665484768111118377224196226270672363641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5b01ee167a884f0275d4972095b6399a8f678f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fordeumicrosites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fordrrpcache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mustang.consumer-connect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consumer-connect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondeo.ford.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016267224c6700000403004830460221009c1db9320bd3711c49053c0b3f4bba1e53f5c2c2fb10f69f0a48678aa01bd42c022100e51d60ec0d38a1e93bdf098056560694da69c2d5d7cc32cb16a8b6c7d93515670075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016267224d63000004030046304402203ab4bc36ba4290e819e04c20bb1d7f6ddb780d8bbfc5c8603cea3dc6a0f994340220445a3fcbbd197b5aec48117fa6837c719ef375d69984fceba1070850e4533466
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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