secure.seguroslafise.com.ni

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:58:21:94:7a:41:bf:87:6b:cd:2e:65:ab:7b:44:2c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.seguroslafise.com.ni

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:58:21:94:7a:41:bf:87:6b:cd:2e:65:ab:7b:44:2c
Serial Number (int): 7103743185597272658631316362462184492
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ee:af:27:76:b3:c0:0d:52:84:e1:55:7d:b7:bc:2c:35:e1:8d:27:f8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 47:56:35:53:b4:75:ac:b3:a6:51:68:60:56:e7:a0:f1:0f:45:05:be
Fingerprint (sha256): b5:4e:d2:c1:0b:21:16:71:ea:28:81:7d:ad:08:8c:13:71:45:f5:77:37:8f:e9:b3:06:6f:a2:ad:87:31:7f:97

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate secure.seguroslafise.com.ni

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.seguroslafise.com.ni

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.seguroslafise.com.ni

Other certificates including the domain name seguroslafise.com.ni

(limited to 100 certificates)
bancaseguros.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
secure.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
corredurias.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronet.seguroslafise.com.ni

Certificate

The complete raw certificate details for secure.seguroslafise.com.ni in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NqC81jTmNDI/OEK5+m8
4tEp/H1u+275WRjJ2gfDEA7tYYy6y8oD6tiP7IbOc0YLcfRjbMJ7R81mOaDxPqO0
GuKj+9TirTtuF38wTzCu6jdEmC41vexP91EZZ+zKANhspjL9qhgAJmNAIeUYQCAH
vav2iQOVfJyHUyRX1YdVHMikRKQio7hiy1Tht5fS4X0fDlnbS4Z8MyYt2cc0Wm7+
xJXKkglBSiXjNZ5PUnVhDiLKwRZmzHShvyR9t6cCPdvVb/56e4fM8l9je0VOPzRS
m+DhJWFJaEZ50R3s9bBwui2Oo0kFRDNrigR1QVVZ6Q0tTLQ6TWfumBG11uG6QXmt
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7103743185597272658631316362462184492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.seguroslafise.com.ni'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28890085581548154964750410943145264837009128755520093942652768738806942560866857908398385671769334744776484216325680344087617375836416416435544880291675201452574492302032748349306194839066008577192131926977469899353624951653660930764766292633411579320748570700237276908092722591999978081343889222407988660349576321800550126556879556371444091883275444069398703331701978284816792761962392411941232676840446824159572055597782761674021998579424573688438960996707809243662333087947200349413978247894907190916548653835280664975019141898068676270449136909479892475860098373350256824668073938197224639951050310841482411093493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eeaf2776b3c00d5284e1557db7bc2c35e18d27f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seguroslafise.com.ni'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008315229909bc2e31b5045df56dfac955359d277c673a456155ebe2f906b8d7ea82d97096b23eb15001dc3428f93a42e72b43bb03108011941f334f752b1e9c3468be00163677b1158445b3088eddee69245425481b11c11b8053c812379f2e7647dcfc2312cafda240e6aa39a3d34843369682967e8414486c6f5a5ab1820654c04ae419c503617278bdfd7c5b3f3de6b7e8a21892566da51f7e3a08f71d572c500ec92513c504cdfd65d3c3654a780970fd4516134beff0b19d9f448277e3dcf7b1a8f419dd6969942431646a0a9c4b82fab1c5744050853b10c31b60371f19bf58bc07e696ccc8ff63ae308400f3592357b78b30fd823680a95362b4fe18dd