mail580-1.exch580.serverdata.net

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 5d:1b:fe:09:a8:17:c2:e0:08:45:d8:b4:db:c0:26:88 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail580-1.exch580.serverdata.net

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:1b:fe:09:a8:17:c2:e0:08:45:d8:b4:db:c0:26:88
Serial Number (int): 123763548120292613894292678986564642440
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 25:4e:34:4e:94:0d:9a:0a:f6:04:0d:e7:4d:f5:4a:25:08:30:7b:51
Fingerprint (sha256): 03:8d:d9:d9:a5:48:aa:73:6c:43:49:7a:0b:e4:38:1c:ad:b5:34:29:9f:43:31:57:58:ed:20:3d:43:85:f9:ea

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate mail580-1.exch580.serverdata.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail580-1.exch580.serverdata.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail580-1.exch580.serverdata.net

Other certificates including the domain name serverdata.net

(limited to 100 certificates)
exch031.serverdata.net
exch025.serverdata.net
mail026-1.exch026.serverdata.net
sharesync.serverdata.net
apps.exch126.serverdata.net
lyncpool1.exch153.serverdata.net
exch021.serverdata.net
ingram.serverdata.net
mail690-1.exch690.serverdata.net
exch099.serverdata.net
mail500-1.exch500.serverdata.net
lyncgcpool1.exch580.serverdata.net
upload580.serverdata.net
ldap.exch090.serverdata.net
pool1.exch129.serverdata.net
uploadsc9.serverdata.net
ingram.serverdata.net
mail020-1.exch020.serverdata.net
exch099.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch153.serverdata.net
pool1.exch126.serverdata.net
mail032-2.exch032.serverdata.net
mail580-1.exch580.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch082.serverdata.net
lyncpool1.exch082.serverdata.net
owa020.serverdata.net
exch083.serverdata.net
exch029.serverdata.net
ldap.exch123.serverdata.net
lyncsip.exch600.serverdata.net
ldap.exch156.serverdata.net
ldap.exch600.serverdata.net
usa2.akaz.io
exch081.serverdata.net
exch580.serverdata.net
lyncpool1.exch032.serverdata.net
lyncsip.exch500.serverdata.net
exch126.serverdata.net
mail080-1.exch080.serverdata.net
mail157-co-1.exch157.serverdata.net
exch024.serverdata.net
owa.serverdata.net
lyncsip.exch022.serverdata.net
ldap.pexch119.serverdata.net
ldap.pexch121.serverdata.net
lyncpool1.exch027.serverdata.net
lyncsip.exch027.serverdata.net
mail026-2.exch026.serverdata.net
lyncpool1.exch580.serverdata.net
mail690-1.exch690.serverdata.net
lyncpool1.exch026.serverdata.net
exch480.serverdata.net
mail580-2.exch580.serverdata.net
exch084.serverdata.net
lyncpool1.exch032.serverdata.net
lyncedgepool.exch029.serverdata.net
exch027.serverdata.net
nexus.serverdata.net
sy.smtp.mx.serverdata.net
outbound.smtp.o365.serverdata.net
smtp.exch027.serverdata.net
*.serverdata.net
mail029-2.exch029.serverdata.net
mail030-2.exch030.serverdata.net
va.smtp.mx.serverdata.net
lyncsip.exch032.serverdata.net
www.serverdata.net
mail023-1.exch023.serverdata.net
skypepool1.pexch118.serverdata.net
mail080-1.exch080.serverdata.net
exch122.serverdata.net
ldap.pexch118.serverdata.net
exch029.serverdata.net
exch080.serverdata.net
exch029.serverdata.net
au.serverdata.net
*.quarantine.serverdata.net
backup.serverdata.net
ldap.exch027.serverdata.net
ldap.exch580.serverdata.net
lyncpool1.exch025.serverdata.net
lyncpool1.exch082.serverdata.net
exch021.serverdata.net
lyncpool1.exch025.serverdata.net
mail080-1.exch080.serverdata.net
apps.exch090.serverdata.net
pexch120.serverdata.net
exch024.serverdata.net
mail151-1.exch151.serverdata.net
mail154-1.exch154.serverdata.net
mail022-1.exch022.serverdata.net
mail070-1.exch070.serverdata.net
ldap.exch130.serverdata.net
lyncpool1.exch021.serverdata.net
www.serverdata.net
hpbx017.serverdata.net
smtp.exch151.serverdata.net
lyncsip.exch024.serverdata.net

Certificate

The complete raw certificate details for mail580-1.exch580.serverdata.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4q2d/Y39jgNa9fpNcRF
6N4I/sl6qaBdbghak2mMVJtkN24MY8nPnN5AehOdeecW6Ooe1D+OA4zb5WQn5idE
6ZMfktJPpD5C3JV5/Hw+h4mQQ03+QQpWsX4z/vtt7gm3G06Dc6MgZckUT5PeRQA8
rokUMM+T/u3tMHf18i1YOwuAm/AXcvE33G56LY3mKtwg6MiUadEGUxZ6477MEcvs
eTtRWujhvhLGs1hhu3ZwFs7eEW1Ec30EGnSM6+ovKkRfdGzHWyaxVGxKIs/RyzQo
rb1b8pKDWDc6uNmrt7+roNd7t3BJyOBoBSFjBfo/sBYCdDkJMVuCDSh8TpJqiK9o
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123763548120292613894292678986564642440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail580-1.exch580.serverdata.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24179918063774594865995893960413828640505169794015804821694017951821290279496322771344520487706944328633388837328436034091102756162963604809808285280755513042844979234861881948444057096711544479094564391628279882272834409361045141056271020479313598011875995012255558424235631695391070591983357093684047357729862938601922969728833413839502593342326213614727544283003637323199656000895273423011289271108775402611452927743293777377309891320504475183302176357319075621584668495488858160189308438566193208895701459789774505275881883064576316464977924982974671336895431764846742429321459417260895270795702788986837733959741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail580-1.exch580.serverdata.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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