telpddavg01.anc.geico.net

- GEICO -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:74:75:da:a7:f6:62:d0:b9:e9:3f:87:f7:ff:c7:bf:a6:05:34 was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GEICO

Organization: GEICO
State / Province: Maryland
Locality: Chevy Chase
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:74:75:da:a7:f6:62:d0:b9:e9:3f:87:f7:ff:c7:bf:a6:05:34
Serial Number (int): 166250345238542258609019633705255766306719028
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 91:51:e1:57:b6:a7:3c:80:a3:7b:5f:da:39:8b:60:bc:76:41:82:ea
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): 53:6f:ce:b7:ff:c6:be:f7:16:29:9d:55:ad:eb:7f:4d:d9:5c:7b:7c
Fingerprint (sha256): 82:3b:cd:67:17:b9:74:15:5a:ec:a7:eb:02:9e:92:ca:dc:0a:69:ce:d9:3c:18:c1:ad:ad:44:83:83:e9:02:d9

Issuing Certificate URL: http://certs.securetrust.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.securetrust.com/
CRL Distribution Point: http://crl.securetrust.com/OVCA2_L1.crl

Check the revocation status for certificate telpddavg01.anc.geico.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for telpddavg01.anc.geico.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

telpddavg01.anc.geico.net
telpddavg01.anc.geico.com

Other certificates including the domain name geico.net

(limited to 100 certificates)
Plazamail2016.geico.net
frws2682.geico.net
FRWS7845.geico.net
FredMail2016.geico.net
telpdchvg01.anc.geico.net
CHWS7104.geico.net
CHWS7103.geico.net
phrpd6slb11.geico.net
CHWS7102.geico.net
FredMail2016.geico.net
CHWS7102.geico.net
telpdchvg02.anc.geico.net
CHWS7102.geico.net
CHWS7104.geico.net
cavemail.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
FRWS4732.geico.net
Plazamail2016.geico.net
FRWS4731.geico.net
CHWS7103.geico.net
telexabvg01.anc.geico.com
FRUA9173.geico.net
gfs.private.geico.com
FRWS4732.geico.net
Plazamail2016.geico.net
CHWS3227.geico.net
Plazamail2016.geico.net
gfsnp.private.geico.com
FredMail2016.geico.net
FredMail2016.geico.net
FredMail2016.geico.net
FRWS7845.geico.net
CHWS3227.geico.net
rdspd1chweb01.geico.net
gfs.private.geico.com
FRWS7847.geico.net
FRWS4731.geico.net
mail.geico.com
CHWS7103.geico.net
telpddavg02.anc.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
CHWS3230.geico.net
FRWS7846.geico.net
telpdabvg01.anc.geico.net
FRUA9171.geico.net
FRWS4731.geico.net
FRWS7847.geico.net
FRWS7845.geico.net
FRWS7846.geico.net
packageregistry-np.geico.net
FredMail2016.geico.net
mail.geico.com
mail.geico.com
FRWS7845.geico.net
FRUA9171.geico.net
CHWS7102.geico.net
CHWS3230.geico.net
voltage-pp-0000.private2.geicoddc.net
gfsnp.private.geico.com
CHWS7103.geico.net
CHWS7103.geico.net
FRWS7847.geico.net
telpddavg01.anc.geico.net
PLUA9175.geico.net
Plazamail2016.geico.net
FredMail2016.geico.net
Plazamail2016.geico.net
logoncop.geico.net
FredMail2016.geico.net
PLUA9172.geico.net
telpdabvg02.anc.geico.net
*.ise.geico.net
CHWS7104.geico.net
gfs.private.geico.com
FRWS7846.geico.net
FredMail2016.geico.net
*.ise.geico.net
kashmail.geico.net
telexabvg01.anc.geico.com
gfs.private.geico.com
FRWS4733.geico.net
FRWS7846.geico.net
telexabvg01.anc.geico.com
telpddavg01.anc.geico.net
FRUA9171.geico.net
FRWS7845.geico.net
telexabvg02.anc.geico.com
PLUA9176.geico.net
*.ise.geico.net
telpddavg01.anc.geico.net
telpddavg02.anc.geico.net
FRWS7846.geico.net
Plazamail2016.geico.net
FRWS7845.geico.net
*.ise.geico.net
FRWS7847.geico.net
CHWS7104.geico.net
gfsnp.private.geico.com

Certificate

The complete raw certificate details for telpddavg01.anc.geico.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 166250345238542258609019633705255766306719028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-06 16:30:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 16:29:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'telpddavg01.anc.geico.net'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEICO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chevy Chase'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828076468754412688608893930292946573359805629831620518684135684609631805410464472906911286281408844572755595727697546325036584896144940757574591747453450689115384039325032952781310020377021098908162767163419405060941732516252554112981347771471852288571230374701345581152586469029970588885462345329633236488435706622852400855540515378845985921251199085220628078478424989374400691500940608786567778704683335877022297296971116562657729223848730322259731389342205994236602069338800759387358365952940080337358931059372652564705926015193550141349465127111058269010523822262826528478141049299175429904744981682887219090152135808359114259875006464621795625003098313034459492426574189374961647449739224676259229489248317439905008275062076361978947001891190536854345450825480106720895546171518966160496274747055601312168646788580759252048092339616204643334680132068411425021563987736208619288695390549842573060345283509212602017728341908591611349400155737913769393228412980042419126742742493381599321465409722401118580048129047063649956151674927174192214994988552410960000761532139696309107268517670956616347708534195973669996080446819787956319802598950072960494026106229359815385705490159823727771917858283385870981780611802714750472432009067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9151e157b6a73c80a37b5fda398b60bc764182ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certs.securetrust.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telpddavg01.anc.geico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telpddavg01.anc.geico.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.securetrust.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.securetrust.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.securetrust.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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