xos-us.americanexpress.com

Issued by Cybertrust SureServer EV OCSP CA

About this certificate


This digital certificate with serial number 02:00:00:00:00:01:45:52:f4:e7:97:4e:11:d1 was issued on by Verizon Cybertrust Security .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: Certificate contains no Authority Info Access Issuers
  • ERROR: businessCategory should contain 'Private Organization', 'Government Entity', 'Business Entity', or 'Non-Commercial Entity'

American Express Travel Related Services Company, Inc.

Company registration number: 767655
Organization: American Express Travel Related Services Company, Inc.
Address: 200 Vesey Street
State / Province: NY
Locality: New York
Country: US

Verizon Cybertrust Security

Organization: Verizon Cybertrust Security
State / Province: NY
Locality: New York
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 02:00:00:00:00:01:45:52:f4:e7:97:4e:11:d1
Serial Number (int): 40564819207326782916180432523729
Serial Number lenght: 106 bits, 14 octets

SubjectKeyId: 50:11:e1:f6:90:93:87:08:c7:f4:a5:20:14:d4:77:11:fa:6b:91:18
AuthorityKeyId: f3:94:a8:66:a6:7a:14:86:8a:84:e0:f5:1c:db:f9:0b:14:d0:54:05

Fingerprint (sha1): fd:ad:37:5c:81:2d:2b:c1:49:12:b9:be:fc:1a:85:88:25:9e:bd:38
Fingerprint (sha256): 78:41:88:6d:1e:d5:8c:98:41:b7:fc:93:d8:0d:65:54:74:83:ec:32:c1:ff:00:86:80:9b:6a:18:c1:e3:97:c7


Revocation information

OCSP Server: http://ee-ocsp.omniroot.com/evssl/
CRL Distribution Point: http://crl.omniroot.com/ctevocsp.crl

Check the revocation status for the current certificate on xos-us.americanexpress.com
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: xos-us.americanexpress.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIOAgAAAAABRVL055dOEdEwDQYJKoZIhvcNAQEFBQAwUTEk MCIGA1UEChMbVmVyaXpvbiBDeWJlcnRydXN0IFNlY3VyaXR5MSkwJwYDVQQDEyBD eWJlcnRydXN0IFN1cmVTZXJ2ZXIgRVYgT0NTUCBDQTAeFw0xNDA0MTEyMjQyMzZa Fw0xNTExMjIwMDAwMDBaMIIBBjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk5ZMREw DwYDVQQHEwhOZXcgWW9yazEZMBcGA1UECRMQMjAwIFZlc2V5IFN0cmVldDETMBEG CysGAQQBgjc8AgEDEwJVUzETMBEGCysGAQQBgjc8AgECEwJOWTE/MD0GA1UEChM2 QW1lcmljYW4gRXhwcmVzcyBUcmF2ZWwgUmVsYXRlZCBTZXJ2aWNlcyBDb21wYW55 LCBJbmMuMRswGQYDVQQPExJWMS40LCBDbGF1c2UgOC41LjIxDzANBgNVBAUTBjc2 NzY1NTEjMCEGA1UEAxMaeG9zLXVzLmFtZXJpY2FuZXhwcmVzcy5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcRzgyq1w5WVketYBp+4q/fvKIChj xritHt+yjjmzqdiOXuTSRG12VF81tv2sTpuR/dW9fWbxy44UwWmRoyF4gMrIcaXk HqlMEHEjtnRqaRrl77kjuNaA5YZvkyNWCRbr7VkmiQVpBTuEvimeph/MyUDIuFV1 awh4AlhzxFMRN+UGQJPzLQf6aHMSe0MWNg3vs3Vwp6kFlyOvTJlIMWgBv06eGYq0 zL2HTd6elunYcKLKfl0YZIn2wk6ygnmhe9D9PYDhgQapja8jpJLwlM2wNmz2EJQc LxijwIRMzm5zu9aJcrWATfvGFzDHn2AtnqACzq23JMrkcGZ8/mDSKUPbAgMBAAGj ggFxMIIBbTAfBgNVHSMEGDAWgBTzlKhmpnoUhoqE4PUc2/kLFNBUBTA+BggrBgEF BQcBAQQyMDAwLgYIKwYBBQUHMAGGImh0dHA6Ly9lZS1vY3NwLm9tbmlyb290LmNv bS9ldnNzbC8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5vbW5pcm9vdC5j b20vY3Rldm9jc3AuY3JsMB0GA1UdDgQWBBRQEeH2kJOHCMf0pSAU1HcR+muRGDAM BgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIFoDBQBgNVHSAESTBHMEUGCisGAQQB sT4BZAEwNzA1BggrBgEFBQcCARYpaHR0cDovL2N5YmVydHJ1c3Qub21uaXJvb3Qu Y29tL3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCUG A1UdEQQeMByCGnhvcy11cy5hbWVyaWNhbmV4cHJlc3MuY29tMA0GCSqGSIb3DQEB BQUAA4IBAQAlBmyq2J191wMszbOpjYdj/jo1ye7DYff5KE+R8ywfpaIrKVzOsbgc cUtTtScVj7W8aV6QtxMlqD+kQKes41FIOfdFgmPd98liqTdbEwTn6RuWwPG/iCsL A9sEWzTFTR2g05xlytrjgqxdV9J5m3+Ueim8dq53jwPFQzA+2HoGaA9UIk7ANlmt 9+kT9/vcQgAk38Q17mm7c5PX3iDuGQfG4GvtClYdUnxkAT8QgHSauTqdokpZprOJ 70N7bKXBPtWQme3VRR2CjoJGY680VVm7Vt4u76yP48y31xVnCeNzXtm5a3WPuV2j WZmCkPJik4pQ7avOCxGeLvTRuw6PUQN4 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Ec4MqtcOVlZHrWAafu Kv37yiAoY8a4rR7fso45s6nYjl7k0kRtdlRfNbb9rE6bkf3VvX1m8cuOFMFpkaMh eIDKyHGl5B6pTBBxI7Z0amka5e+5I7jWgOWGb5MjVgkW6+1ZJokFaQU7hL4pnqYf zMlAyLhVdWsIeAJYc8RTETflBkCT8y0H+mhzEntDFjYN77N1cKepBZcjr0yZSDFo Ab9OnhmKtMy9h03enpbp2HCiyn5dGGSJ9sJOsoJ5oXvQ/T2A4YEGqY2vI6SS8JTN sDZs9hCUHC8Yo8CETM5uc7vWiXK1gE37xhcwx59gLZ6gAs6ttyTK5HBmfP5g0ilD 2wIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 40564819207326782916180432523729 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Cybertrust Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust SureServer EV OCSP CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-11 22:42:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-22 00:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200 Vesey Street' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Express Travel Related Services Company, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'V1.4, Clause 8.5.2' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '767655' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xos-us.americanexpress.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24672247471425869469934455398157798341667952745745531401400882734735938364590884258965588273976558403883833107739759362106506632918563732302653632928645734547756409925733605799731411782056239495278723145873660690279674026826435489027644709629741781934264284945845503404808660341671509992720651511645603818916232703062654273617367483859642285679050654163280878653460067724750090024266791397934524592720188429823743555381504179847881869537758257272701246420646041578202528996625709133238083686154440133801937583686496935327007974301278980746830642515881504396658379150371342730385489863508324299677248854265367020258267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f394a866a67a14868a84e0f51cdbf90b14d05405 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ee-ocsp.omniroot.com/evssl/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.omniroot.com/ctevocsp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5011e1f690938708c7f4a52014d47711fa6b9118 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.100.1 (Cybertrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cybertrust.omniroot.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xos-us.americanexpress.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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