www.fmls.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:57:fa:72:38:a5:c0:10:06:29:e8:31:54:a7:e5:b6 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fmls.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:57:fa:72:38:a5:c0:10:06:29:e8:31:54:a7:e5:b6
Serial Number (int): 12419861440699752703745384350489241014
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:b7:e8:a0:2f:9f:bb:f6:2e:03:c6:48:52:a5:c8:89:cf:3c:97:15
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): b5:20:29:61:69:fb:bc:92:df:14:a0:32:8b:77:44:b0:fb:a5:db:6d
Fingerprint (sha256): aa:83:6d:75:58:b8:41:f5:51:ae:0f:ca:04:ee:8c:63:28:78:67:3a:60:f8:0c:38:d6:f3:8e:74:4c:c8:a3:43

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.fmls.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fmls.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fmls.com
fmls.com

Other certificates including the domain name fmls.com

(limited to 100 certificates)
mimecast.fmls.com
sip41.ct950.com
login.fmls.com
support.fmls.com
legacy.fmls.com
sip71.ct950.com
email.fmls.com
legacy.fmls.com
preview.fmls.com
email.fmls.com
support.fmls.com
azsts.fmls.com
support.fmls.com
helpdesk.star-ti.com
nevpn.fmls.com
sip71.ct950.com
content.fmls.com
login.fmls.com
email.fmls.com
sip71.ct950.com
www.fmls.com
www.fmls.com
email.fmls.com
sip71.ct950.com
login.fmls.com
svn-edge1.fmls.com
email.fmls.com
sip71.ct950.com
www.fmls.com
sip71.ct950.com
marketplace.fmls.com
content.fmls.com
support.eprfireworks.com
login.fmls.com
email.fmls.com
sip71.ct950.com
login-dev.fmls.com
www.fmls.com
hqvpn.fmls.com
sip41.ct950.com
email.fmls.com
facilities.fmls.com
sip71.ct950.com
marketplace.fmls.com
sip71.ct950.com
sip71.ct950.com
sip71.ct950.com
sip71.ct950.com
login.fmls.com
support.fmls.com
www.fmls.com
sip71.ct950.com
sip41.ct950.com
bswnbr.webbfontaine.com
www.fmls.com
www.fmls.com
azsts.fmls.com
sip71.ct950.com
support.fmls.com
www.fmls.com
access.fmls.com
sip71.ct950.com
email.fmls.com
login-dev.fmls.com
support.tampabaypaddle.company
autodiscover.fmls.com
www.fmls.com
www.fmls.com
sip71.ct950.com
support.fmls.com
support.tinyalbert.ai
nevpn.fmls.com
sip71.ct950.com
email.fmls.com
login.fmls.com
sip71.ct950.com
www.fmls.com
sip71.ct950.com
preview.fmls.com
app-training-dev.fmls.com
www.fmls.com
sip71.ct950.com
access.fmls.com
login.fmls.com
sip71.ct950.com
access.fmls.com
sip71.ct950.com
nevpn.fmls.com
sip71.ct950.com
sip71.ct950.com
autodiscover.fmls.com
sip41.ct950.com
access.fmls.com
sip41.ct950.com
sip41.ct950.com
sip41.ct950.com
support.fmls.com
email.fmls.com
az110-sql-noc.fmls.com
sip71.ct950.com

Certificate

The complete raw certificate details for www.fmls.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIhKX899OMYTVq97fRHO
+qANoscdAZ4bZgwyWgOZZV/rEPv3cjt8YhaR9ny2Iyi/4rRV5a0ki73rKeWbtVpl
nhwakk4nhJVuFOy1qDNzwnwP81JBUtbgX95x38l9LD9R6/YxGcN1QSEAlvfDOCKs
Z5Yo17zaI1QL4EAGk+Y1uqx3CDfsos2M8jc4rniJlviXp1cfCCFt128pw34pqkWP
ao3vobX0cKtauPbf6/B1weEGyGSj2z9qMWCMg9GkS1VA/QZJD15iVhKHFRTQ3jjb
51fIlDxTtNGXdL2hRxVLKZ4fIKPscyy84uhFdDYlFte2kjBvShFHb59Q8U8G5XSR
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12419861440699752703745384350489241014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fmls.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22285149036486437533938371995143737749651595524710648613184389520417726724978083714313660640736665355461510634379790150453962906488706891723413243758681652171768792941369864645342265933170010702701878258096272138492968124973012710263302754755757549957817438373189319979308876273450142508091984733645669754747863225940003557913711604638456441099531390218562527864433842595104416324569256328848389217795180688256185622886814791600450508734532790536157267624119804419482525141532438020079471176586796632178220402184255076724189752020447023173926022641087435068745868976834181442997959356005702060954420463177276757152141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9b7e8a02f9fbbf62e03c64852a5c889cf3c9715
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmls.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009fb629e98eef22c59eb9b153d6ef14f54a085e7af0b35cbc5eda17e9137ec9877393426e13d824d5dba447674a832cd61c4cd95a5469e29f5720306a9dc684980dea93858cdd887b28bbc7a0c663da3331a2087c8185c4ec37d996fe9edac1e31ce49e0e182d96e53f5abd45cd063a51ad0dc6d64d46a8269b6b74edfade3b96620f391ce0d8a3ab13b736ea3d04877ae42eb286e1cad6c0f91300459bfc5ed68f1f985a19cf6b7b08cde3c47dcfd5f41147aaecd8abba1e3f6451d6afff01b20435ddeb3966fa5aec096362259135f8f0568e0563fdfe2e101d094b10ddceb4df0e1da70628d231a213caab90f9e7d2c5be1e451b9fba1e8895db56fec8a7169df9b6efddb1a08bb1b79b8fe0d5885f58db6485810f083bbfee88c494d6e95e6074eb44a80cb95133cdfa7046345d5fb2ec0b21b859efc5f8f469fa98fb12d97195bccabeb8237dc5db390d96d099ec8ba629c0a87d2979e9d66fafda71f1893153726efd98160ef908b067f7ec92221b07a019df3f60c75e7f054892c606beba0d26577ce6edc61699b87c9856f19ee95c751a96b2c426b8e62ed45f33a8865d44b727016d29e75c9671c2e5b505edafc6b21496cc1ce7f09ec77b0248adb3887bce5f04dc7dd6fd7827275aef2fac79eff51be866f17d0bc3dbac10844c3400735487bda3335ad710ea37a50ee793638faa075f0aae738408745d88a9f2bc