remotedeposit.myfirstfarmers.com

- First Farmers and Merchants Bank -

Issued by Thawte SGC CA - G2

About this certificate

This digital certificate with serial number 50:e9:19:2f:ad:df:f6:bc:9d:b1:4c:a9:2d:61:1f:25 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

First Farmers and Merchants Bank

Organization: First Farmers and Merchants Bank
Organization unit: Remote Deposit
State / Province: Tennessee
Locality: Columbia
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:e9:19:2f:ad:df:f6:bc:9d:b1:4c:a9:2d:61:1f:25
Serial Number (int): 107548555668607276470309014654775533349
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 24:c0:c0:a4:49:3c:52:0b:12:d8:92:0c:51:d1:87:a7:4d:54:75:2c

Fingerprint (sha1): 0c:36:a5:56:7b:aa:48:e4:9e:15:28:ab:dc:b7:b7:3e:76:0c:4c:e5
Fingerprint (sha256): b4:a8:20:24:fe:9a:1f:e6:2e:11:6f:5c:99:e3:f9:8c:df:c8:ca:7b:86:40:97:ef:f7:34:7e:35:09:60:aa:72

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for certificate remotedeposit.myfirstfarmers.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remotedeposit.myfirstfarmers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remotedeposit.myfirstfarmers.com

Other certificates including the domain name myfirstfarmers.com

(limited to 100 certificates)
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
readiness.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
demo.myfirstfarmers.com
loans.bssbank.com
5693417237512192-fe3.pantheonsite.io
ffmras.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
ir.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
ir.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
myfirstfarmers.com
myfirstfarmers.com
demo.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
*.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
ffmras.myfirstfarmers.com
loans.bssbank.com
myfirstfarmers.com
demo.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com
loans.bssbank.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com
www.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
readiness.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
demo.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com
5693417237512192-fe3.pantheonsite.io
myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com
5693417237512192-fe3.pantheonsite.io
5693417237512192-fe3.pantheonsite.io
remotedeposit.myfirstfarmers.com
5693417237512192-fe3.pantheonsite.io
*.myfirstfarmers.com
myfirstfarmers.com
loans.classicbank.com
5693417237512192-fe3.pantheonsite.io
loans.bssbank.com

Certificate

The complete raw certificate details for remotedeposit.myfirstfarmers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTGOBR3nzFtxE0wIb13R
VH/4N/+A21nfVQVxA9p0UlcR1Tf4Wk1fjL4deVu5GR6jVFyVcacnRQegeHtFFWz+
s3On7yAongOL82L7vlayH5FE1lL7qsux/41ssnm6ZKbvYArq3xxSsZC6P+4ZI9DA
6bVyRCeju4Su3Dvz44IdH0h5y34W4XjyqzVkkLZdaXRx0Pu0j7qt0dWbLodpDXx2
WedifEDBrY6PLOewuoxVyfIsZDbKSrbZOAI7KTA5P2Xcyfs12ZVageeqV9dLVS0I
iaui8noHO5E5m3a8UGzMOsrMaxXN1HBWN7dlP4+R+ZLsXecX9NNvjfAPec8PXD1R
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107548555668607276470309014654775533349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'First Farmers and Merchants Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Remote Deposit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'remotedeposit.myfirstfarmers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23883476004246647606873914379228168534459336475755501264482143770203736417190412938556789378037470529775423258637754270695731941104758421893759602545357597774358041557314115353479764717163873382232071792562465367156992080401894661152110153137219052005217373602070895417817805242326491066254667496239511304706023374204761257818935281163530751497787530653175165655581927360739302809000669895474538798583262758368727158714341891690868073880284269103951231591801752567595151297536064041235219866731234152204253085315512501523172014104191568209755279531446824871587249828670013774158054600840162093211818325879422535422313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotedeposit.myfirstfarmers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c0c0a4493c520b12d8920c51d187a74d54752c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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