telexabvg01.anc.geico.com

- GEICO -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:51:ed:9c:39:90:53:7c:45:9e:cd:42:32:0c:b3:c9:01:b5:15 was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

GEICO

Organization: GEICO
State / Province: Maryland
Locality: Chevy Chase
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:51:ed:9c:39:90:53:7c:45:9e:cd:42:32:0c:b3:c9:01:b5:15
Serial Number (int): 163242166129602749149050275508328739052303637
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 13:5a:3d:69:63:2c:48:8f:27:38:b2:3f:02:f4:2f:ca:f1:5b:92:b5
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): 69:73:9d:b0:db:03:3d:a3:6d:6d:b8:8c:df:c0:3d:9b:39:53:59:77
Fingerprint (sha256): a4:b4:fb:41:8a:cf:1a:b5:05:ef:9a:d7:44:a4:27:03:fd:a9:7f:9b:88:ac:63:b2:a6:f3:1e:e6:49:b5:e9:6f

Issuing Certificate URL: http://certs.securetrust.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.securetrust.com/
CRL Distribution Point: http://crl.securetrust.com/OVCA2_L1.crl

Check the revocation status for certificate telexabvg01.anc.geico.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for telexabvg01.anc.geico.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

telexabvg01.anc.geico.com
telpdabvg01.anc.geico.net

Other certificates including the domain name geico.com

(limited to 100 certificates)
copart.geico.com
sattest.geico.com
Arbitration.geico.com
Ivanticsa6.private.geico.com
umbapp-umbuicustomer-ed1.geico.com
tierb2b-test.geico.com
partnersgateway-tt.geico.com
imperva.com
imperva.com
hive.geico.com
comcbs-ut1.geico.com
docusigneo-ut1.geico.com
imperva.com
docusigneo-EU1.geico.com
claims.geico.com
partnersgateway001-tr.geico.com
mstage2.service-ft.geico.com
umbrella-user.geico.com
service-ft.geico.com
mts-ut1.geico.com
psfthr-dr.oci.geico.com
awpocseg365.private.geico.com
partnersgateway001.geico.com
imperva.com
isotest1.geico.com
imperva.com
billingreportsapi-eu1.geico.com
Plazamail2016.geico.net
gragwns.private.geico.com
homeowners.geico.com
partnersgateway009-tr.geico.com
Ivanticsa12.private.geico.com
partnersgateway005-in.geico.com
tier2-int2.geico.com
ecams.geico.com
sales.geico.com
sales-in2.geico.com
boat-user.geico.com
dmvtest.geico.com
partnersgateway-tr.geico.com
egressgateway14-lt.geico.com
partners.geico.com
umbrella-user.geico.com
awprodsegv2.private.geico.com
ingressgateway07-ut.geico.com
sig-ft.geico.com
crm-cs-eapi-gateway-tr1.geico.com
*.geico.com
partnersgateway007.geico.com
edgein-tr.geico.com
claimsdr.geico.com
anbcui-prod.geico.com
tier.geico.com
ecams.geico.com
claimiq.geico.com
mts.geico.com
docusigneo-FT1.geico.com
imperva.com
atlastest.geico.com
vdipd1external.private.geico.com
propertysales.geico.com
polcomexpressvue-eu1.geico.com
edgeex-in.geico.com
imperva.com
commercial-in1.geico.com
nocpaa.np.geico.com
auto-buy-tr1.geico.com
imperva.com
optout.geico.com
portfolioex-lt.geico.com
ingressgateway08.geico.com
capsales-test.geico.com
partnersgateway002-dv.geico.com
adestimatetest.geico.com
polcomexpressvue-eu1.geico.com
bilpyh-ut1.geico.com
blaster.geico.com
umbrella-c-load.geico.com
edsinbound-trng.geico.com
umbapp-umbuicustomer-ed1.geico.com
FRWS7845.geico.net
claimsportal-tr1.geico.com
FredMail2016.geico.net
partnersgateway005.geico.com
salesb2b2-int.geico.com
telpdchvg01.anc.geico.net
cvshealth.geico.com
propertysales-ut1-api.geico.com
imperva.com
rewards-ut1.geico.com
*.geico.com
ivrpl.private.geico.com
edsinbound-load.geico.com
billingwdayinterface.geico.com
CHWS7104.geico.net
auto-buy-GZ-ftrack1.geico.com
PartnersTest.geico.com
auto-kate-fn1.geico.com
propertysales-It-api.geico.com
imperva.com

Certificate

The complete raw certificate details for telexabvg01.anc.geico.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163242166129602749149050275508328739052303637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-23 12:27:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 12:26:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'telexabvg01.anc.geico.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEICO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chevy Chase'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894112512916680185556832878525722494522185289643722949764781893177352218139453000404434517291180850279876110350322949669567204524129036723534979348823464562096581413561910984368968023840635292935866784390604241595763027538040597585134292884720178356093120603936996735239457509772784732219797290740618166283932134519085051587616318399741139430908728841832292610709282678477035056165289025924903621095544072225777804379060371415943211240673671603527405187226391821565472305480107875619959295022087142399029767982944215919506647018954246954334537030868336763222885489740208017091131516809205798154061338871979720946413203877428302061977589541720325207449921730262586081331568570334861303268847395275049288133988761457593917701699604913726585695008031778628583866368942548103180749071474991933687197186069859970791266631733228492004600818085960061858705636669292860541675700990239468764822115710930270418247042446043233564242610466739519901377081416580026516405770970160578105166452162774209714523330533862400444694929117574299970156415321256548712254705316963174867094817904665100746206542060513145151210458031731245945182340710151057788000096061776149349292610054201836798467244601578988640589959470263878106964178551929586197307147183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							135a3d69632c488f2738b23f02f42fcaf15b92b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certs.securetrust.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telexabvg01.anc.geico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telpdabvg01.anc.geico.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.securetrust.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.securetrust.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.securetrust.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0007e925b24cf83cc1f5946517e9ff284a6de1d0073b64e6b1cc650700e1a3a33dd66dc27da26eed9d583e315e5d07e23d92cf51a290dd5539c9efc691d8a0c8a4f30068a2239af804e21f72b2e8e07da6630a9571e3dc8d572d3b652dca67bef7fd7b7af7b80de12d76dc76ca31478e96070c82f4df8373d8d4023226209c0047dd6c6792ba3ea5f0cbd43ffe8e6d5239235dd8e8cba9d76e08bd5304b207c370249b7f22f29b4b13d6c3b9342c413d10b2dc106a5e7dda756565fdbdddf5145bf47036221061c475e1fa5a5de29a2455c5b0c8c5548a36b6dbd773ac55bf8f4c19710e3490e9581e0406c590a03967a0672ea71486f8435b9a0215dec7ae399e