securemail-pc-net.com

- ZixCorp Systems, Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 9f:a1:78:db:7a:be:51:f0:00:00:00:00:58:08:94:33 was issued on by AffirmTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ZixCorp Systems, Inc.

Organization: ZixCorp Systems, Inc.
State / Province: Texas
Locality: Dallas
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 9f:a1:78:db:7a:be:51:f0:00:00:00:00:58:08:94:33
Serial Number (int): 212185662402133013907074107210507785267
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9a:3d:84:f8:b4:eb:f3:0b:6c:f2:62:6d:5f:48:f4:be:1d:a1:1f:38
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): cc:67:7c:d7:d8:cf:50:2e:fc:04:aa:a6:25:a1:81:a3:49:31:7b:00
Fingerprint (sha256): 09:85:1e:9e:63:89:da:5d:aa:25:d0:ac:59:5c:33:c9:53:ad:ea:6c:a6:fc:f2:7c:d7:81:e2:6c:65:dd:12:5a

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate securemail-pc-net.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securemail-pc-net.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securemail-pc-net.com
www.securemail-pc-net.com

Other certificates including the domain name securemail-pc-net.com

(limited to 100 certificates)
securemail-pc-net.com
securemail-pc-net.com
securemail-pc-net.com
securemail-pc-net.com
securemail-pc-net.com
securemail-pc-net.com
securemail-pc-net.com

Certificate

The complete raw certificate details for securemail-pc-net.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZWJFijgV0RgFvbbO6w1
8a59Ohz+OUthle2vURMANSa8Si/EhPyeMZaVZz2dTMkyB2Q0f4hTnYpLdReOYlz/
i+6GdXWmI18ypnrUaC+UFLstdRV0bcaqC8NWCdObpbvRqxdpTPaCikoj2q4N9hhH
5Q8vOd2CUMo1B8cJq642yhoZE5lFeahtlUf0JWrZQLyWjzJta13PG9Rt7qCwvyZ7
Yfb8qIPRYhF1k4XZQpZpV3Q3fuubTjT/vjalf5ZlvdWadLLbmqaiGZ3ZRXerhgjN
SOHt44/zkLTsNaS6Nem6BMTzdZdvfpCd4rN5bn3YCfekqKOfaJyfeLg109//SPjv
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 212185662402133013907074107210507785267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 18:33:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-14 19:03:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZixCorp Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securemail-pc-net.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23932778339142754749094567180807972272248718543210598923774407128926390793365090107909965165143083030849850736180560562733469522487058162258835689932378547500514636830913287527600276682243534744232481083572335646811144738419722309528743811500854438344484105326724772105842010588620512682690283423326681705540745682532703522603982310221907159548606196179865230323593489510680435797203366669787799621095109716583570220928967242466985872158701031224484156548641843680278462409243917207011546611079976571941791587963592390760773774191018301401851222999962552788734940229764686682333901119439218436770212016289623544753997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail-pc-net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securemail-pc-net.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a3d84f8b4ebf30b6cf2626d5f48f4be1da11f38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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