SSL certificate
TLSv1.3symetra.com · 217.114.94.2:443
Certificate chain, hostname and dates verified using this server’s CA store.
- Subject
- C=US ST=Washington L=Bellevue O=Symetra Financial Corp CN=www.symetra.com
- Issuer
- C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
- Valid from
- 2026-06-11T00:00:00+00:00
- Expires
- 2026-12-26T23:59:59+00:00
- Days remaining
- 94
- Serial (hex)
- 09830F823884250F40142C06DD3E7C08
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
DNS:www.symetra.com, DNS:brokersconsultants.symetra.com, DNS:financialprofessionals.symetra.com, DNS:intcms-brokersconsultants.symetra.com, DNS:intcms-financialprofessionals.symetra.com, DNS:intcms-www.symetra.com, DNS:not-found.symetra.com, DNS:preprodcms-brokersconsultants.symetra.com, DNS:preprodcms-financialprofessionals.symetra.com, DNS:preprodcms-www.symetra.com, DNS:prodcms-brokersconsultants.symetra.com, DNS:prodcms-financialprofessionals.symetra.com, DNS:prodcms-www.symetra.com, DNS:symetra.com, DNS:true.symetra.com, DNS:www.jibberjabber.com, DNS:www.symetramortgage.com
SHA-256 fingerprint
30:DE:CC:91:91:8C:71:E7:12:15:F9:DB:97:C0:F1:65:ED:BC:28:1B:9B:02:AC:6B:7D:C5:1C:97:4F:0F:17:EC
Certificate extensions & PEM
- authorityKeyIdentifier
- 74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
- subjectKeyIdentifier
- B0:55:5F:AC:77:D3:C2:95:1E:7E:EE:37:EE:A0:D1:69:BC:C8:9A:C6
- subjectAltName
- DNS:www.symetra.com, DNS:brokersconsultants.symetra.com, DNS:financialprofessionals.symetra.com, DNS:intcms-brokersconsultants.symetra.com, DNS:intcms-financialprofessionals.symetra.com, DNS:intcms-www.symetra.com, DNS:not-found.symetra.com, DNS:preprodcms-brokersconsultants.symetra.com, DNS:preprodcms-financialprofessionals.symetra.com, DNS:preprodcms-www.symetra.com, DNS:prodcms-brokersconsultants.symetra.com, DNS:prodcms-financialprofessionals.symetra.com, DNS:prodcms-www.symetra.com, DNS:symetra.com, DNS:true.symetra.com, DNS:www.jibberjabber.com, DNS:www.symetramortgage.com
- certificatePolicies
- Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
- keyUsage
- Digital Signature, Key Encipherment
- extendedKeyUsage
- TLS Web Server Authentication
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
- basicConstraints
- CA:FALSE
- ct_precert_scts
- Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Jun 11 18:27:03.905 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:6B:81:C2:C3:CC:2F:00:21:C4:73:FB:4F: 2A:89:5E:4B:BA:B6:F7:6C:41:D1:EA:CE:52:96:60:FB: DE:E3:1D:D8:02:20:4A:73:1A:A3:FD:BC:C8:1C:FA:CC: E6:4C:3F:36:74:B0:26:65:FE:FC:A0:D1:F0:9E:C3:61: 2C:ED:B9:E2:21:C0 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Jun 11 18:27:03.888 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:4D:43:3F:69:33:32:C4:6E:7F:32:35:8B: A7:58:7D:EF:A0:C8:83:32:0E:27:FC:4B:FC:C4:2E:38: 5F:60:41:85:02:21:00:B3:B0:61:24:5D:F4:32:70:64: 46:E3:2A:C7:F3:55:C4:62:36:39:0E:B2:B0:3C:1B:11: D4:B0:A9:95:AE:04:35 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Jun 11 18:27:03.922 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:B0:A0:D4:52:47:9E:34:40:25:FB:A7: 4A:D5:8C:94:38:A4:24:AB:6F:B2:03:7D:49:AE:EA:A2: 37:F6:30:49:30:02:20:76:73:6F:C2:32:3B:7E:9F:44: 03:3E:9D:BF:87:78:22:FF:61:2A:BF:5B:12:60:FB:0C: D9:E4:F4:64:FA:C2:8D
-----BEGIN CERTIFICATE----- MIII0TCCB7mgAwIBAgIQCYMPgjiEJQ9AFCwG3T58CDANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjYw NjExMDAwMDAwWhcNMjYxMjI2MjM1OTU5WjBwMQswCQYDVQQGEwJVUzETMBEGA1UE CBMKV2FzaGluZ3RvbjERMA8GA1UEBxMIQmVsbGV2dWUxHzAdBgNVBAoTFlN5bWV0 cmEgRmluYW5jaWFsIENvcnAxGDAWBgNVBAMTD3d3dy5zeW1ldHJhLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJywdlwdAQ+Sjp7zwo65mDIfY8Jm S4nH52ud46A9waVvO8aCe6v5wTW5orVxKYRZFgNnItpii9A9vYp3JozAWboK8Xkh qVJ46PW8rCn/y9HIZ55Ks5anMIarQWmMhapcBd6oQ+xmFBbwrUAn30FBVGW7MoZo q++39cJoIU3wG1Z8IQw5Tw4PXuMuU05N+Mr35VTqC6UGfbvckANcR7qMPVhxGHZw vnp07zEMKfmOdvviG/wTDX3/YbJlq5IDtisHSw7xJK9osLoCQR2HUwyvLujxe6YW Y/AOKRDMb8vQ5zAR11ozWSJ6rGD/+o+Xly0mAlS3/d1fk7lC5BPNAQafSmECAwEA AaOCBXwwggV4MB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1Ud DgQWBBSwVV+sd9PClR5+7jfuoNFpvMiaxjCCAhQGA1UdEQSCAgswggIHgg93d3cu c3ltZXRyYS5jb22CHmJyb2tlcnNjb25zdWx0YW50cy5zeW1ldHJhLmNvbYIiZmlu YW5jaWFscHJvZmVzc2lvbmFscy5zeW1ldHJhLmNvbYIlaW50Y21zLWJyb2tlcnNj b25zdWx0YW50cy5zeW1ldHJhLmNvbYIpaW50Y21zLWZpbmFuY2lhbHByb2Zlc3Np b25hbHMuc3ltZXRyYS5jb22CFmludGNtcy13d3cuc3ltZXRyYS5jb22CFW5vdC1m b3VuZC5zeW1ldHJhLmNvbYIpcHJlcHJvZGNtcy1icm9rZXJzY29uc3VsdGFudHMu c3ltZXRyYS5jb22CLXByZXByb2RjbXMtZmluYW5jaWFscHJvZmVzc2lvbmFscy5z eW1ldHJhLmNvbYIacHJlcHJvZGNtcy13d3cuc3ltZXRyYS5jb22CJnByb2RjbXMt YnJva2Vyc2NvbnN1bHRhbnRzLnN5bWV0cmEuY29tgipwcm9kY21zLWZpbmFuY2lh bHByb2Zlc3Npb25hbHMuc3ltZXRyYS5jb22CF3Byb2RjbXMtd3d3LnN5bWV0cmEu Y29tggtzeW1ldHJhLmNvbYIQdHJ1ZS5zeW1ldHJhLmNvbYIUd3d3LmppYmJlcmph YmJlci5jb22CF3d3dy5zeW1ldHJhbW9ydGdhZ2UuY29tMD4GA1UdIAQ3MDUwMwYG Z4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwgZ8GA1UdHwSB lzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xv YmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3JsMEigRqBEhkJodHRwOi8vY3Js NC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBD QTEtMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29j c3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdp Y2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5j cnQwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUAwjF+ V0UZo0XufzjespBB68fCIVoiv3/Vta12mtkOUs0AAAGet/AQYQAABAMARjBEAiBr gcLDzC8AIcRz+08qiV5Lurb3bEHR6s5SlmD73uMd2AIgSnMao/28yBz6zOZMPzZ0 sCZl/vyg0fCew2Es7bniIcAAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfA yMVpdwAAAZ638BBQAAAEAwBHMEUCIE1DP2kzMsRufzI1i6dYfe+gyIMyDif8S/zE LjhfYEGFAiEAs7BhJF30MnBkRuMqx/NVxGI2OQ6ysDwbEdSwqZWuBDUAdgCUTkOH +uzB74HzGSQmqBhlAcfTXzgCAT9yZ31VNy4Z2AAAAZ638BByAAAEAwBHMEUCIQCw oNRSR540QCX7p0rVjJQ4pCSrb7IDfUmu6qI39jBJMAIgdnNvwjI7fp9EAz6dv4d4 Iv9hKr9bEmD7DNnk9GT6wo0wDQYJKoZIhvcNAQELBQADggEBAIJzOPcuzLApG/Tx GJujA1PpTR+0LhVFtL3zKsw+Qs+K9VGC2jaaij6/RqbPGnXTVUo8C6vGVFgsTw9P /ZkQOoR2aG1lXEQ2FyWFsjLCS1qoGqdfBoyoKJlYvVcbktcj0R4GMqMlhvsSAO49 P2097q6zP4O/s8sKx47RJj5piIxlyQOqIfxkVXd8yXupaNgFiWsR6wwRXtIHyXDw f9FG6kscfLhlAYI4cMt/To9LWSTHZy2C1icCxaXKjb/QdmWB36qvlaugkxoqe7RE NBMU6tgZw+f3cXCheBTcPb25LshSG16cBAr/C3G6Hz1sOz/VK7qFjRJKZqZj5tJE tzs+IQM= -----END CERTIFICATE-----
Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-09-23T14:20:40+00:00
Server-presented chain · 2 additional certificates
Chain certificate 1
- Subject
- C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Valid from
- 2020-09-24T00:00:00+00:00
- Expires
- 2030-09-23T23:59:59+00:00
- Days remaining
- 1461
- Serial (hex)
- 085F94C02D857BE8CC14FF53EDA23E2A
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
1F:8E:B9:E9:A8:E0:66:CC:5B:38:33:E0:6B:31:29:76:4B:62:26:39:D5:B1:63:F6:00:E1:C7:91:20:BF:3E:ED
Certificate extensions & PEM
- subjectKeyIdentifier
- 74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
- authorityKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- extendedKeyUsage
- TLS Web Server Authentication, TLS Web Client Authentication
- basicConstraints
- CA:TRUE, pathlen:0
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
- crlDistributionPoints
- Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
- certificatePolicies
- Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIQCF+UwC2Fe+jMFP9T7aI+KjANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0yMDA5MjQwMDAwMDBaFw0zMDA5MjMyMzU5NTlaMFkxCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2Jh bCBHMiBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMz3EGJPprtjb+2QUlbFbSd7ehJWivH0+dbn4Y+9lavyYEEV cNsSAPonCrVXOFt9slGTcZUOakGUWzUb+nv6u8W+JDD+Vu/E832X4xT1FE3LpxDy FuqrIvAxIhFhaZAmunjZlx/jfWardUSVc8is/+9dCopZQ+GssjoP80j812s3wWPc 3kbW20X+fSP9kOhRBx5Ro1/tSUZUfyyIxfQTnJcVPAPooTncaQwywa8WV0yUR0J8 osicfebUTVSvQpmowQTCd5zWSOTOEeAqgJnwQ3DPP3Zr0UxJqyRewg2C/Uaoq2yT zGJSQnWS+Jr6Xl6ysGHlHx+5fwmY6D36g39HaaECAwEAAaOCAa4wggGqMB0GA1Ud DgQWBBR0hYDAZsffN97PvSk3qgMdvu3NFzAfBgNVHSMEGDAWgBROIlQgGJXm427m D/r6uRLtBhePOTAOBgNVHQ8BAf8EBAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMBIGA1UdEwEB/wQIMAYBAf8CAQAwdgYIKwYBBQUHAQEEajBoMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKG NGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RH Mi5jcnQwewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA3oDWgM4YxaHR0cDovL2NybDQuZGln aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDAwBgNVHSAEKTAnMAcG BWeBDAEBMAgGBmeBDAECATAIBgZngQwBAgIwCAYGZ4EMAQIDMA0GCSqGSIb3DQEB CwUAA4IBAQB1i8A8W+//cFxrivUh76wx5kM9gK/XVakew44YbHnT96xC34+IxZ20 dfPJCP2K/lHz8p0gGgQ1zvi2QXmv/8yWXpTTmh1wLqIxi/ulzH9W3xc3l7/BjUOG q4xmfrnti/EPjLXUVa9ciZ7gpyptsqNjMhg7y961n4OzEQGsIA2QlxK3KZw1tdeR Du9Ab21cO72h2fviyy52QNI6uyy/FgvqvQNbTpg6Ku0FUAcVkzxzOZGUWkgOxtNK Aa9mObm9QjQc2wgD80D8EuiuPKuK1ftyeWSm4w5VsTuVP61gM2eKrLanXPDtWlIb 1GHhJRLmB7WqlLLwKPZhJl5VHPgB63dx -----END CERTIFICATE-----
Chain certificate 2
- Subject
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
- Issuer
- C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
- Valid from
- 2024-01-18T00:00:00+00:00
- Expires
- 2031-11-09T23:59:59+00:00
- Days remaining
- 1873
- Serial (hex)
- 0FE032AB844D033106C50C8E13C8B068
- Signature
- RSA-SHA256
- Public key
- RSA 2048
Subject alternative names (SAN)
No SAN extension was presented.
SHA-256 fingerprint
79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
- basicConstraints
- CA:TRUE
- subjectKeyIdentifier
- 4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
- authorityKeyIdentifier
- 03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
- keyUsage
- Digital Signature, Certificate Sign, CRL Sign
- authorityInfoAccess
- OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
- crlDistributionPoints
- Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
- certificatePolicies
- Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE----- MIIEfjCCA2agAwIBAgIQD+Ayq4RNAzEGxQyOE8iwaDANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD QTAeFw0yNDAxMTgwMDAwMDBaFw0zMTExMDkyMzU5NTlaMGExCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI 2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx 1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo4IBMDCC ASwwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUTiJUIBiV5uNu5g/6+rkS7QYX jzkwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDgYDVR0PAQH/BAQD AgGGMHQGCCsGAQUFBwEBBGgwZjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZGln aWNlcnQuY24wPwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNu L0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNydDBABgNVHR8EOTA3MDWgM6Axhi9odHRw Oi8vY3JsLmRpZ2ljZXJ0LmNuL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDARBgNV HSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQELBQADggEBAHRBl3jN7+XHBUK0dZnu hMdoNwD1nCROU3BTIh1TNzRI0bQ0m5+C/dCRzzlqoSAFHUlOi+OiDltWkXTzmQn6 Z8bH5PFBy5sYpc/8cNPoSzhyqcpvvEZvv/Ivc0Up+dzma7vBDJC9WrMRUUlSFSQp kdXSmphDNkXJsgARmxzc18IN6LYMRiOWlY7RE2F900pPW60BvJHHNCX0bbSRj/Ql bmVq8wuftBD++D+RS8K++ujpMjFBROyWfBX+woQDGsMazkmgulQdnZrdj476elOL axRvrSgEorju1kJM7M65z2RUZrfzQYW/1rs8mRUXin6iEtad/Rv1ZI1WGYmWPyBm pbo= -----END CERTIFICATE-----
One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.