secure.grandamerica.com

- Sinclair Oil -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 18:5c:71:2b:9c:3d:59:2d:8b:48:14:a7:32:48:a0:ac was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sinclair Oil

Organization: Sinclair Oil
Organization unit: Sinclair Oil
State / Province: Utah
Locality: Salt Lake City
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:5c:71:2b:9c:3d:59:2d:8b:48:14:a7:32:48:a0:ac
Serial Number (int): 32381458577273212981523673964809330860
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): e9:3e:5c:a8:bc:33:b8:47:b0:dc:cb:7a:ee:8c:af:e1:ed:3d:4f:ae
Fingerprint (sha256): 7f:38:17:ce:90:67:34:fe:a4:b6:61:6f:0a:2c:e5:4a:b3:dd:49:93:a6:7c:ac:40:8c:95:81:90:ca:27:1b:54

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate secure.grandamerica.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.grandamerica.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.grandamerica.com

Other certificates including the domain name grandamerica.com

(limited to 100 certificates)
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
san-4-s7.tlsprovisioning.exacttarget.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
secure.grandamerica.com
oxi.grandamerica.com
gahrows.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
ows.grandamerica.com
secure.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
gahrview.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
www.grandamerica.com
gahroxi.grandamerica.com
grandamerica.com
image.e.grandamerica.com
grandamerica.com
grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
grandamerica.com
san-4-s7.tlsprovisioning.exacttarget.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
ows.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
gahrview.grandamerica.com
grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
secure.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
secure.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
san-4-s7.tlsprovisioning.exacttarget.com
grandamerica.com
aruba.grandamerica.com
aruba.grandamerica.com
gahrview.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
gahrview.grandamerica.com

Certificate

The complete raw certificate details for secure.grandamerica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32381458577273212981523673964809330860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sinclair Oil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sinclair Oil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'secure.grandamerica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837376725925844726219652351961083942517894359977487789144561739262857032548688038352761321466262268488341672247064060370317596417347481943535341320119327606515578895957351505128788401555333844321475490653246285400371198926681859325898681169898647562714436660425175339881772558959219441924771260669028633828549441393241988796581446070306197485510986613067332762467932335454414004083068921310695253806434820332218463712060939362630899643315427711838390076948722224810812721363895446360938921108337027624665092811243008492818464904652085044722018065133098770304609178875807204606044909869961523636575669320080124694013671981226759287118326517220999595865880964835851786503249000310224911265890935533931567843440121833232426611528223578681532846917940565870269266084951750586474330315765930350074834320442730897906406002432197583500041337764725228330042988909088387214123717828565541847164518031806450884061870603827316459303726986449954660279920793437677726050114957168281407612803014017667404654118644829097864450001758636835697404437585972144186480223188831802745325932235466094224374964179826221451053749321896525390709774954499330543387646267927400441115270066308792472408172769039715041633362776266991015322379543106584938806359561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.grandamerica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008476e50f8ec35dff34399e7b8da9a6d18db129f7a3cc1424ffaae2673c86af98c3dcac862714a893a74cdf7abd69cd6da8f916d6e1e62807e8c2d3ab66ab386d6e68f5c3adce2f0bb2948c84a33c7d2e79747dc7700dd7231ef7385d6640b449c37e219dbde8d68420ce5f3e7ea19b258742be915e1360094abf6d81bd992976fd2f6fafea5e04b41114f3c5d4fa52a13321fcbf0794beed50b33394b193f3122276fdcea94b2da1f257301c1940b4dc275d662ffb7af8ec3a2045c8f803124ef78c07935061121754c538f58ea6dcc2879e1948f63d5fb398c9b72d5ab02370421a49b40aa8ff891ebbef0ca4a1bdf504bc332ab5a28796663cfed6e22e1cc7