mail.felicianofinancial.com

- Feliciano Financial Group -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 26:33:27:c8:85:c3:4a:72:28:56:37:7b:5c:9b:85:b5 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Feliciano Financial Group

Organization: Feliciano Financial Group
Organization unit: Exchange
State / Province: Texas
Locality: Tyler
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:33:27:c8:85:c3:4a:72:28:56:37:7b:5c:9b:85:b5
Serial Number (int): 50776277880616723049432651453620258229
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 59:fa:d4:85:28:67:f1:d7:bd:fc:6d:50:39:12:b3:13:65:f3:06:b9
Fingerprint (sha256): c3:9c:91:93:86:a9:99:30:68:95:b2:1c:08:f9:a4:00:5d:ea:3a:96:d3:44:67:a8:8b:42:32:df:ca:4e:a1:d0

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate mail.felicianofinancial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.felicianofinancial.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.felicianofinancial.com

Other certificates including the domain name felicianofinancial.com

(limited to 100 certificates)
remote.felicianofinancial.com
felicianoinvestments.com
felicianofinancial.com
mail.felicianofinancial.com
portal.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
felicianofinancial.com
felicianofinancial.com
mail.felicianofinancial.com
felicianosecurities.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
felicianosecurities.com
mail.felicianofinancial.com
portal.felicianofinancial.com
felicianosecurities.com
emailsecurity.felicianofinancial.com
mail.felicianofinancial.com
www.felicianofinancial.com
felicianoinvestments.com
felicianoinvestments.com
remote.felicianofinancial.com
mail.felicianofinancial.com
felicianoinvestments.com
remote.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
laserfiche.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
mail.felicianofinancial.com
*.felicianofinancial.com
mail.felicianofinancial.com
*.felicianofinancial.com
felicianoinvestments.com
mail.felicianofinancial.com

Certificate

The complete raw certificate details for mail.felicianofinancial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50776277880616723049432651453620258229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tyler'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Feliciano Financial Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Exchange'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mail.felicianofinancial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681369280875788064853290326649642731344629141436938529998178502896015745358175431014860692261429476292250640036506076401343461644258584127669708041505565046239332461323500441655104050279278876509597968422446788442109246136155047777879786792217391846871138357414274858414620734955062747603288987092213932642488647488801817548464584594868314000501897752169236203125313690196082654256372041453393406436085820896163935859279172602789791156553199912572362432165086340825649698500045884861274115709207472041373881392327222229201161042934294991747648509580462007824314251914432078224725768657859210118762905530174925390076192479259565865755845491011084943498769177966652000938718953859679828185823729813675299083885331056015621311952586632979098599394099232975969263983652005627442954487816947523133300820446436680741157899247865190079328419111270555718828761577647867476635153280559500686724405079952691772622662113853547871244091164369103494815433467405908744794937997493420887462452728981213535086452627810803717122090432190260315403370682181451479009900130419466880576548340054322913620087971122311349670378274485483940235995267551514643230023310250722172329958422507184109297240595071003678663924221707756708024232274324654510729565291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.felicianofinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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