fcb.accessmyiq.com

- Fidelity Information Services, LLC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 03:83:2f:3a:b5:e4:ac:61:67:b6:56:4f:3f:2f:88:88 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Fidelity Information Services, LLC

Organization: Fidelity Information Services, LLC
State / Province: Florida
Locality: Jacksonville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:83:2f:3a:b5:e4:ac:61:67:b6:56:4f:3f:2f:88:88
Serial Number (int): 4668832800600843402268499296180471944
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8b:22:3c:a5:d9:49:a5:54:53:70:c1:1e:6b:fe:46:d5:d9:21:68:ed
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6c:07:87:86:9e:15:a7:05:4b:c2:85:25:68:ff:10:77:f0:55:5a:b1
Fingerprint (sha256): 86:47:de:18:be:cc:27:f2:33:d4:d9:8d:30:b3:68:05:0f:fe:11:f5:db:c2:e6:64:8b:6f:99:a6:5a:94:c4:07

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate fcb.accessmyiq.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fcb.accessmyiq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fcb.accessmyiq.com

Other certificates including the domain name accessmyiq.com

(limited to 100 certificates)
global-us-smb-uat.accessmyiq.com
m-us-fm.accessmyiq.com
stage.accessmyiq.com
reporting.accessmyiq.com
stage-mds.customercare.accessmyiq.com
m-us-iqm-xapi.accessmyiq.com
reporting.accessmyiq.com
fraudsight.accessmyiq.com
m-us-iqpr-xapi-uat.accessmyiq.com
content.accessmyiq.com
customercare.sc.accessmyiq.com
global-us-smb-cert.accessmyiq.com
iqm.accessmyiq.com
merchant.accessmyiq.com
accessmyiq.com
global-us-iqm-uat.accessmyiq.com
customercare.mds.fhb.accessmyiq.com
m-us-iq-ds-cert.accessmyiq.com
iqm.accessmyiq.com
customercare.mds.usmerchants.accessmyiq.com
merchant.accessmyiq.com
accessmyiq.com
accessmyiq.com
global-us-iqpr.accessmyiq.com
customercare.scna.accessmyiq.com
fraudsight.accessmyiq.com
m-us-iq-ds-uat.accessmyiq.com
reports.accessmyiq.com
m-us-iqm-xapi-cert.accessmyiq.com
global-us-iqm.accessmyiq.com
dev-mds.customercare.accessmyiq.com
m-us-iq-ds.accessmyiq.com
global-us-iqpr-uat.accessmyiq.com
accessmyiq.com
reporting.accessmyiq.com
global-us-smb.accessmyiq.com
disputes.accessmyiq.com
finapp.accessmyiq.com
fcb.accessmyiq.com
ngen.accessmyiq.com
customercare.mds.accessmyiq.com
m-us-iq-ds-cert.accessmyiq.com
customercare.sc.accessmyiq.com
accessmyiq.com
re.accessmyiq.com
accessmyiq.com
global-us-iqm-cert.accessmyiq.com
customercare.scna.accessmyiq.com
m-us-iqm-xapi.accessmyiq.com
global-us-smb-uat.accessmyiq.com
stage-mds.customercare.accessmyiq.com
global-us-iqm-cert.accessmyiq.com
customercare.mds.accessmyiq.com
global-us-smb-cert.accessmyiq.com
fraudsight.accessmyiq.com
ops.int.accessmyiq.com
global-us-iqm.accessmyiq.com
merchant.discoverecentral.accessmyiq.com
ops.int.accessmyiq.com
customercare.mds.fhb.accessmyiq.com
m-us-iqm-xapi-cert.accessmyiq.com
re.accessmyiq.com
customercare.scna.accessmyiq.com
m-us-iqpr-xapi.accessmyiq.com
reporting.accessmyiq.com
customercare.sc.accessmyiq.com
global-us-iqm-uat.accessmyiq.com
global-us-iqm-uat.accessmyiq.com
fraudsight.accessmyiq.com
disputes.accessmyiq.com
global-us-smb.accessmyiq.com
accessmyiq.com
customercare.mds.fhb.accessmyiq.com
re.accessmyiq.com
m-us-iq-ds.accessmyiq.com
finapp.accessmyiQ.com
reporting.accessmyiq.com
merchant.accessmyiq.com
global-us-iqm-uat.accessmyiq.com
finapp.accessmyiq.com
m-us-fm-uat.accessmyiq.com

Certificate

The complete raw certificate details for fcb.accessmyiq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgmBGMAukytRUpxx4Kd
aiPLTbxKijDT/AnTLB0MrAoTswbnF2xgZ1KqjcXmRWacNbuT2PGBuf0cWE5LkSjc
TwSnvGxsu00+b5bVJYGvzw6qAX3rrJUmeZhLqnZPZLV9TQNTrd5uMrO+9M78Mc5+
t538oEFdL+T7jzZsJmSU4As0m90XIuBiZbJd6hhZHc7y1eMn57mGCaVVZ0S8Mmv7
hTiLKv1+QwrW/i0hFuCisAJ91v5gyE+237ybIaRM9tWX+MIet3NDAdsGQgz6ksEF
w1L7dd2xQbu0BnFQkUJqv2CfsHyupQzGkd9Z4lkoCpF6pKojRhfjucT9rHzguoYH
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4668832800600843402268499296180471944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 10:01:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-15 10:01:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jacksonville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fidelity Information Services, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fcb.accessmyiq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18829305405360493879345850772383213105859471764568873345830429825508600030015477945205485188831658553337559915043741673734757550972249641901557143641119842961113327351674576394481767304608357570324173858418676445913993773240510888767228771436143526593382167079573565479476092393644195428067027803382344930492607763075661444765355867754905771143803153135566219306200658948940180504036093432287186606179668120681113338732608975555643705221725418175673556404075236933228095267804551702960355998203685517691924343514486037042523899862239948356567290938823258043042718266998372484033805545744517709051497927879692244092717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b223ca5d949a5545370c11e6bfe46d5d92168ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcb.accessmyiq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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