www.edmontonstatebank.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:7f:18:af:07:90:d7:52:d1:af:7f:36:9d:c7:81:fd was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.edmontonstatebank.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:7f:18:af:07:90:d7:52:d1:af:7f:36:9d:c7:81:fd
Serial Number (int): 1989150341919263841386621945852166653
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d0:ba:52:84:06:cd:39:0a:80:58:86:a9:5e:2e:ab:16:af:ff:b9:c8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 90:ae:df:2e:3e:30:09:e7:90:d2:cc:ec:f5:b2:e2:8b:19:0f:05:5d
Fingerprint (sha256): e8:c6:63:d1:0a:f0:6e:9e:6a:d6:11:df:38:ec:8c:31:eb:a5:5c:db:66:5b:ac:33:3a:cf:37:0f:d0:17:0a:51

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.edmontonstatebank.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.edmontonstatebank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.edmontonstatebank.com
edmontonstatebank.com

Other certificates including the domain name edmontonstatebank.com

(limited to 100 certificates)
www.edmontonstatebank.com
helpdesk.edmontonstatebank.com
edmontonstatebank.com
helpdesk.edmontonstatebank.com
edmontonstatebank.com
my.edmontonstatebank.com
www.edmontonstatebank.com
edmontonstatebank.com
service.upperlinehealth.com
www.edmontonstatebank.com
helpdesk.edmontonstatebank.com
service.upperlinehealth.com
www.edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
www.edmontonstatebank.com
vpn.edmontonstatebank.com
www.edmontonstatebank.com
www.edmontonstatebank.com
service.upperlinehealth.com
edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com
www.edmontonstatebank.com
service.upperlinehealth.com
helpdesk.edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com
service.upperlinehealth.com
vpn.edmontonstatebank.com
www.edmontonstatebank.com
service.upperlinehealth.com
edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com
www.edmontonstatebank.com
service.upperlinehealth.com
service.upperlinehealth.com

Certificate

The complete raw certificate details for www.edmontonstatebank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA159+G8aqR7CSHc9XrrZz
ZQDz/wsj/jWMxYQ09JS27ItXq8XDZHt+AeQFGo8XX0KbhX2lY4dKETkkTir9oxnj
NP5EsLWIBSCpgk0klyzkF0fzDbvjl4FpjZOU2N2BOtdV8N2k+eysf7zCvixVCK1J
s0wvXwVNUPoTevk3cRd23ml8PYhQaCVZBZGb6Uuo0VCnHIAcjw0NOf7ylsJ1BZK4
2ToDOhM9YKHSoqsA6zkXdJmxlPPU4za+SdNPylKtjuhJFwgvjzRa7zMIghLqfAmJ
6ifIljztQ8UZBIqiMteAzgMONcjOhIxe/540sHre7UwnMsYjQ4uaSukOsYcMcvUW
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1989150341919263841386621945852166653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.edmontonstatebank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27219884305627376428992862018263286756615258351310584669694435377502504289250677553206629829935936539495877692396625105924435269086967394909862165286427846379015494610822836450512666541495902538254657054367649154939572007688354838867643834320351852280295335535267980638350490087279082102698595335769007033551209234888180602113053932275540349129930452998817318394949314408141301879324665793170690516952597115438446577754372550119301311593346550732997317751019734103925697933983295551114808690787565798053858918968682976966312871973094268793320723070013503490647823781450865518238619630189761215560923356255630755436279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0ba528406cd390a805886a95e2eab16afffb9c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edmontonstatebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmontonstatebank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001845cf28e60000004030047304502203a2128fbac7cd6d692a5ed3e49c14e2c15af0eee425f39279d9a281bab187aaf022100e1bc593112ae13456828672bc49f7da5a49ef3b781810f50314ce5cd58730061007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001845cf28e7b000004030047304502206ca850fde62edf6604cdc36667bcfaf48277a00d02965c51db5ac6e0aca8d9d10221008ced557cb825619c40c3a4f765e722d66a10c89f8f8e54eedccd934276da47ea007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001845cf28e480000040300483046022100fd6f4623376e064c5de4ad47a8dbf4fc56f6a187334815265b758794ea5161c2022100b98b7dff0ba8f64c391fea8677855624a45eb8524459f4029bd3d56283460328
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0046ea22b7e91fcc216bb072c7f7ddaf5bc58f304e0e6a7e367537ce119afa2f85deb94889c5428d3889d2564d17284fa53d85850e4f7f516ad836fea7ccccd4d86c7414a6e9227e992e45cc24af479c12e1681fc747e52f7c1ca9a23338a6b2d653f14d77e8eba49f5355b8b2dc1170282264232c02c0e77c3bf143927ba5a98b6db6cff7f6c4ed2773712e158482824ba1b066216190567ea0e9d35093c578c87af3fca1301781f3caf71d6ef8b36dbae44a5819e312c4d4c5f3821fbe8dff6a3c69b1e8cd1675582ce5a1c1c79ab7556b561073f1022fca0d7edb35749a01bd500b9488c641c8cf169849a7317da1c3bca869f191cbc3f167bee50b0be38518838126893fd250502e25c4d6f8718ea4aa21b3eabeda452f0ca7b96593e5f04c82f341be8c775334ea8c7faf4344ae0facdda69412f178c139d895e665de01fe6a89a64f54d72dddb9bf2c403995d1f7daa89fb77a6fa7447908067dacfa1a4d87c0763704cf7675f88d5ee9dd77cba4c960b3d9b3acf6066c4605f9108f7569182376ebfd20e3eab14a1013a0e2bd0656dc535cdc39b96d0954bb3227347f915421d8fe88479ed0834daaa9c58f1510ec6207874227171531dac24709dbf2c8e2aff03f1cb39e4329f92817f967cee5cd815a914191f440ab2dcd33e8506bc3bd7ce1acbd5dd98f7bd061260634600f86fac6ccd5dc0a58f40b3faf57060205