tescobankmi.adaresec.com

- Adare Ltd -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 32:da:dc:c8:60:7a:b2:b7:5c:05:22:c8:87:26:e2:b4 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Adare Ltd

Organization: Adare Ltd
Organization unit: IT Department
State / Province: West Yorkshire
Locality: Huddersfield
Country: GB

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 32:da:dc:c8:60:7a:b2:b7:5c:05:22:c8:87:26:e2:b4
Serial Number (int): 67597798510010586145031760231478518452
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 19:6b:1e:dc:53:1d:b1:fc:53:2c:2c:53:bf:7f:f6:8c:8e:65:e8:bf
Fingerprint (sha256): cd:7b:65:76:ad:ea:d7:8b:23:e5:aa:84:29:68:50:32:78:b1:e2:f5:4f:7a:95:61:97:e4:56:e4:73:e8:42:dd

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate tescobankmi.adaresec.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tescobankmi.adaresec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tescobankmi.adaresec.com

Other certificates including the domain name adaresec.com

(limited to 100 certificates)
adare.com
servicedesk1.adaresec.com
adaresec.com
adaresec.com
equote.adaresec.com
*.adaresec.com
*.adaresec.com
*.adaresec.com
SV-Greenwich-VPN.adaresec.com
*.adaresec.com
adaresec.com
smartview-vwfs.adaresec.com
tescobankmi.adaresec.com
nonprod-api.adaresec.com
adare.com
*.adaresec.com
*.adaresec.com
tescobankmiqa.adaresec.com
servicedesk1.adaresec.com
pddevops.clinisys.com
smartspace.adaresec.com
mailing-service.adaresec.com
printmedev.adaresec.com
adaresec.com
adaresec.com
*.adaresec.com
smartview.adaresec.com
helpdesk.anfalservices.com.sa
expressway.adaresec.com
expressway.adaresec.com
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
adaresec.com
imperva.com
vpn.adaresec.com
smartview.adaresec.com
printmedev.adaresec.com
vpn6dg.adaresec.com
adare.com
equote.adaresec.com
imperva.com
adaresec.com
prod-api.adaresec.com
*.adaresec.com
adaresec.com
adaresec.com
smartview-vwfs.adaresec.com
helpdesk.camagroup.com
adaresec.com
vpn.adaresec.com
helpdesk.anfalservices.com.sa
adaresec.com
prod-api.adaresec.com
adaresec.com
mailing-service.adaresec.com
tescobankmiqa.adaresec.com
vwfs-service.adaresec.com
*.adaresec.com
tescobankmi.adaresec.com
nonprod-api.adaresec.com
helpdesk.anfalservices.com.sa
serviceportal.lbfoster.com
www.adaresec.com
imperva.com
adare.com
adaresec.com
adaresec.com
SV-Studley-VPN.adaresec.com
expressway.adaresec.com
adaresec.com

Certificate

The complete raw certificate details for tescobankmi.adaresec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWbUq5NfPLmgFQltdDmq
lkJa9J0sb0PRMwv5llUgMnzy6k3AoG6eG1tdtOAlcm6ZqYZQD1B6Xu8IW/n32ATr
/cWMw2H1VHO2WMZa06gEE4vN64Vp62rvDBsl0rerqsAoRmfpX/XqTcocqMxQW+/G
wpcJmrmKPpAvLyfjG2bBwNFMFEW9eY4qmMv3xXRVnGyuRcRzOZc32SvI67rRrMlN
r2Bf++lavsYwWh29fD6H55pEsJOlsiQGpOgIG84hqkCRF86bYvxbAgCaxEkFjDQl
f0mSs44lVCcEB0Lefi9XYS4D1uMHpdBqnMx/129Pb2qVooWGf4Pgn5Vmzq+tS2St
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 67597798510010586145031760231478518452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'West Yorkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Huddersfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Adare Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tescobankmi.adaresec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25929560247336507896412890870969575443908551892960237785989386979272053455236704972604587737829401292709223813530537066999365960525031679973677679732140086593348567578083692539287496023046887583676249961963492147444601569065405465337815147935993174527687366817762748689993227431824669021921727928904594388550508194939206452795335133853368410218451560806640716113999995272713496414237566075610171322641701303769403816903609619008021795296540876898652249259064603246191982120442754506750382018834368337014987502919973508428403033072038713624618056836741854536480524712533626556448196435400876034287705141205732025478633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescobankmi.adaresec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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