app.blackpearlmail.com

- Black Pearl Mail Limited -

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate

This digital certificate with serial number 61:03:98:2f:f6:cb:f0:1b:3d:e8:74:2a:1a:25:dc:8c was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Black Pearl Mail Limited

Company registration number: 4064918
Organization: Black Pearl Mail Limited
State / Province: Lower Hutt
Locality: Lower Hutt
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 61:03:98:2f:f6:cb:f0:1b:3d:e8:74:2a:1a:25:dc:8c
Serial Number (int): 128953779208075695606794761703799512204
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): ee:57:79:2e:18:ed:c8:d2:cc:42:33:89:1a:95:99:20:5b:53:8d:dd
Fingerprint (sha256): 01:5e:09:b7:a7:d8:f2:b4:4a:f2:30:10:e7:86:34:39:06:49:62:22:62:d8:a0:38:db:f8:88:20:7c:07:5a:fa

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for certificate app.blackpearlmail.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.blackpearlmail.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.blackpearlmail.com

Other certificates including the domain name blackpearlmail.com

(limited to 100 certificates)
support.identitybrandingforum.net
app.blackpearlmail.com
support.pawsatpeacecremation.com
admin-help.blackpearlmail.com
sa189gl.wpc.edgecastcdn.net
support.katsana.com.bd
support.identitybrandingforum.net
support.proxycom.fr
sa19gl.wpc.edgecastcdn.net
*.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
accounting.rahisystems.com
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
sa19gl.wpc.edgecastcdn.net
support.vizoport.com
cert00043-azurecdn.akamaized.net
sa22gl.wpc.edgecastcdn.net
support.thedatabasediva.com
sa19gl.wpc.edgecastcdn.net
*.blackpearlmail.com
cert00043-azurecdn.akamaized.net
support.thedatabasediva.com
support.identitybrandingforum.net
sa19gl.wpc.edgecastcdn.net
helpcenter.salesvee.com
sa22gl.wpc.edgecastcdn.net
*.blackpearlmail.com
support.zsphere.fr
*.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
app.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
support.thedatabasediva.com
sni19b28gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
support.katsana.com.bd
sa22gl.wpc.edgecastcdn.net
lilly.direct.reducio.fr
sni1a17cgl.wpc.edgecastcdn.net
support.metric.international
support.pawsatpeacecremation.com
blackpearlmail.com
blackpearlmail.com
suporte.h8brasil.com.br
support.identitybrandingforum.net
sni19b23gl.wpc.edgecastcdn.net
support.zsphere.fr
*.blackpearlmail.com
cert00043-azurecdn.akamaized.net
sa19gl.wpc.edgecastcdn.net
sa19gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
sni19b23gl.wpc.edgecastcdn.net
portal.support.arryved.com
support.identitybrandingforum.net
sa22gl.wpc.edgecastcdn.net
sni10bbgl.wpc.edgecastcdn.net
support.thedatabasediva.com
helpdesk.holisticbusinessconsultants.com
help.quickstream.tech
*.blackpearlmail.com
support.katsana.com.bd
support.sitebuilderone.com
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
260dc.gestionhb.com
admin-help.blackpearlmail.com
sa22gl.wpc.edgecastcdn.net
sa19gl.wpc.edgecastcdn.net
support.identitybrandingforum.net
app.blackpearlmail.com
admin-help.blackpearlmail.com
support.identitybrandingforum.net
sa22gl.wpc.edgecastcdn.net
support.identitybrandingforum.net
sa22gl.wpc.edgecastcdn.net
www.blackpearlmail.com
support.katsana.com.bd
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
new-stage-mta.blackpearlmail.com
support.katsana.com.bd
cert00043-azurecdn.akamaized.net
sa22gl.wpc.edgecastcdn.net
support.identitybrandingforum.net
sa19gl.wpc.edgecastcdn.net
*.blackpearlmail.com
cert00043-azurecdn.akamaized.net
suporte.h8brasil.com.br
admin-help.blackpearlmail.com
support.identitybrandingforum.net
support.thedatabasediva.com
destek2.bitexen.com
support.katsana.com.bd
sa19gl.wpc.edgecastcdn.net
sa22gl.wpc.edgecastcdn.net
accounting.rahisystems.com

Certificate

The complete raw certificate details for app.blackpearlmail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUtLGW+vhfpkcs52JCyo
tdUcjAjGKgpsw1GKl3LNN0JzMjR3V4/yWFMfNBvrTWAmM67kR/kPAJCb87T2T0Ae
r0bnNus44f/m/u0LHB0g6W5d+n53oiB34NhiA8Fk00+WEcJXEcAZCND4STJnVLNo
KmT3ZdG5wrB6dqIbIQhkfrwIkSCAmt5VnUqrFpS/YYF7Cnagoy5lQBZp1wU+Emy3
CrdD+U7PSY1bQZNiP4ELcpgZtXlc88rya+Mz7lTjt6TuEd+2bqwvB68dlUHQxaJV
FZ1eFuVrjpbgT9U8XuVroqDifNM8Gc4i+NeTQNzbMz/n8IdpYjl3ymn0yacywCWJ
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128953779208075695606794761703799512204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4064918'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Lower Hutt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Lower Hutt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Black Pearl Mail Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'app.blackpearlmail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20866448857475142681121546932235755747715403986542652690471944340134495779097361093667763016783064022622698809566476988663484755168214565657265225285586518757229973610412953358613334334965976338821956757200746146320741414993115581208876759678547577650514016691465865534835305698915498937534487928299459721110564690173546486692649508882727669385540304419751753320293352408788865046950407188282328725573772041427850970450798043316037452319553297175714858023017672936919905903197466773888871061688344051379978566616501704332521877249657454601145492389934366899849283319897194829831894820300635994148789910586330964134347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.blackpearlmail.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00109857f28abd7ed6c5cf94842a74bb119e29203e8d16c7c4bec6eae8b407bc79308511cb7aa2f0f0d1fbe0a81c1eba6ef431a9a120f49f620761abca86ecec5764859370430d8c56c2f55f4acf245a0e2be7e1aed44a4821227d775bc2c49d961faa70401aa6cb7cc9f2b323e334ea3f8660c88dc12e2eb268fc9101e384cc1a1b87a9c8c3e265fa170754944462aec07600ae1276fc84dbc734b91162548ac976020f61d9fe9c54c23589f1bd3ee483317b7b11e0be17f2f73720a7f7a4b008303242bd0aa7c039cbbd653982de854dce94ef7d3232119ea97cb1124d8feba442d66b83d856727f00650a51816823426d72ed566b1126b48e54e447e73b2ea9