exch099.serverdata.net

- SystemServer -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 12:35:c1:1e:34:3f:ae:b5:6f:0e:4b:ff:e8:53:cd:6e was issued on by GeoTrust Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

SystemServer

Organization: SystemServer
Organization unit: Internet Services
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:35:c1:1e:34:3f:ae:b5:6f:0e:4b:ff:e8:53:cd:6e
Serial Number (int): 24205212555699419652879372038073208174
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): b8:96:da:c8:ad:ae:10:b7:8e:64:5c:a2:53:13:63:d5:57:46:bd:44
Fingerprint (sha256): 02:f6:9d:46:58:79:68:26:78:8f:94:6f:c1:11:89:02:87:e7:61:72:cb:07:b1:04:e5:4b:59:84:93:5e:e9:06

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate exch099.serverdata.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exch099.serverdata.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

west.exch099.serverdata.net
west.smtp.exch099.serverdata.net
out.west.exch099.serverdata.net
west.smtp.mx.exch099.serverdata.net
exch099.serverdata.net

Other certificates including the domain name serverdata.net

(limited to 100 certificates)
exch031.serverdata.net
exch025.serverdata.net
mail026-1.exch026.serverdata.net
sharesync.serverdata.net
apps.exch126.serverdata.net
lyncpool1.exch153.serverdata.net
exch021.serverdata.net
ingram.serverdata.net
mail690-1.exch690.serverdata.net
exch099.serverdata.net
mail500-1.exch500.serverdata.net
lyncgcpool1.exch580.serverdata.net
upload580.serverdata.net
ldap.exch090.serverdata.net
pool1.exch129.serverdata.net
uploadsc9.serverdata.net
ingram.serverdata.net
mail020-1.exch020.serverdata.net
exch099.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch153.serverdata.net
pool1.exch126.serverdata.net
mail032-2.exch032.serverdata.net
mail580-1.exch580.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch082.serverdata.net
lyncpool1.exch082.serverdata.net
owa020.serverdata.net
exch083.serverdata.net
exch029.serverdata.net
ldap.exch123.serverdata.net
lyncsip.exch600.serverdata.net
ldap.exch156.serverdata.net
ldap.exch600.serverdata.net
usa2.akaz.io
exch081.serverdata.net
exch580.serverdata.net
lyncpool1.exch032.serverdata.net
lyncsip.exch500.serverdata.net
exch126.serverdata.net
mail080-1.exch080.serverdata.net
mail157-co-1.exch157.serverdata.net
exch024.serverdata.net
owa.serverdata.net
lyncsip.exch022.serverdata.net
ldap.pexch119.serverdata.net
ldap.pexch121.serverdata.net
lyncpool1.exch027.serverdata.net
lyncsip.exch027.serverdata.net
mail026-2.exch026.serverdata.net
lyncpool1.exch580.serverdata.net
mail690-1.exch690.serverdata.net
lyncpool1.exch026.serverdata.net
exch480.serverdata.net
mail580-2.exch580.serverdata.net
exch084.serverdata.net
lyncpool1.exch032.serverdata.net
lyncedgepool.exch029.serverdata.net
exch027.serverdata.net
nexus.serverdata.net
sy.smtp.mx.serverdata.net
outbound.smtp.o365.serverdata.net
smtp.exch027.serverdata.net
*.serverdata.net
mail029-2.exch029.serverdata.net
mail030-2.exch030.serverdata.net
va.smtp.mx.serverdata.net
lyncsip.exch032.serverdata.net
www.serverdata.net
mail023-1.exch023.serverdata.net
skypepool1.pexch118.serverdata.net
mail080-1.exch080.serverdata.net
exch122.serverdata.net
ldap.pexch118.serverdata.net
exch029.serverdata.net
exch080.serverdata.net
exch029.serverdata.net
au.serverdata.net
*.quarantine.serverdata.net
backup.serverdata.net
ldap.exch027.serverdata.net
ldap.exch580.serverdata.net
lyncpool1.exch025.serverdata.net
lyncpool1.exch082.serverdata.net
exch021.serverdata.net
lyncpool1.exch025.serverdata.net
mail080-1.exch080.serverdata.net
apps.exch090.serverdata.net
pexch120.serverdata.net
exch024.serverdata.net
mail151-1.exch151.serverdata.net
mail154-1.exch154.serverdata.net
mail022-1.exch022.serverdata.net
mail070-1.exch070.serverdata.net
ldap.exch130.serverdata.net
lyncpool1.exch021.serverdata.net
www.serverdata.net
hpbx017.serverdata.net
smtp.exch151.serverdata.net
lyncsip.exch024.serverdata.net

Certificate

The complete raw certificate details for exch099.serverdata.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszNU+JoOBuoaSTyFRCkw
GDKHRVYjVl/DJWgX8+TEreCcMJ++Pk1Ae0n7nUTRWABI1XxKkMZODfZEI3/s6mTG
mQ4oIEjkFFXg9j2XJH6Y26m2qouUPzpt3xYU/IkCcNXWsMH+Vz9gUmanXyze6i7i
ueUmys2zvaOZVHjwAQNfmKt2a/yV1dGVkUul9lCh5wPuMytiV0wYqfk+7+eCNGLp
O3XfoI29Vo6wk+FirsXkET6iTjKnERKpnTtsw9CkmM/0JhJajhhF8NmogCHsBZxN
IqzAhNqkmMTSfKb/KmGGe8btB6HYSiu959boog4inYZds/GJoAjASs0DklGRdtZp
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24205212555699419652879372038073208174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SystemServer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Internet Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'exch099.serverdata.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22621969301286538911840138975334263067759942745047856234482322088038644139895735659160329166045417309299351826601489312619578048260358401722987041144550582048531347045874797363246128418177008753030033143427668961366650297935460080868516614595374964031165023629994649171927265922790214329855182905470778106520400276000572358332260845946456555240171359309824573509540399977455312268157101662941978148133994638633220635534099449399735943179850821745944184769857423365970199076210051530583235967273913568816562355082839984793170393409768382095408324460547646164421291879805255936192077619067559429771324083930953741134177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.exch099.serverdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.smtp.exch099.serverdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'out.west.exch099.serverdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'west.smtp.mx.exch099.serverdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch099.serverdata.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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