mail20.intermedia.net

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 01:54:a5 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail20.intermedia.net,OU=GT75713367+OU=See www.geotrust.com/resources/cps (c)13+OU=Domain Control Validated - QuickSSL(R) Premium

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:54:a5
Serial Number (int): 87205
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): fb:bb:66:d5:ff:b5:08:c2:ae:38:37:3e:b6:95:cc:88:df:03:2c:35
Fingerprint (sha256): 0b:4a:fa:76:24:9f:36:09:cc:82:de:0a:4c:a0:ac:a0:e5:ab:1e:89:9e:53:fc:e7:8b:38:ca:fa:20:f8:12:12

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate mail20.intermedia.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail20.intermedia.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail20.intermedia.net

Other certificates including the domain name intermedia.net

(limited to 100 certificates)
owa-2fa.exch091.intermedia.net
owa-2fa.exch580.intermedia.net
buyvsa.intermedia.net
acco.intermedia.net
macd001.intermedia.net
intermedia.net
mail12.intermedia.net
*.intermedia.net
acspb2.intermedia.net
acec.intermedia.net
voice.intermedia.net
account.securisync.intermedia.net
voice.intermedia.net
account.securisync.intermedia.net
*.quarantine.intermedia.net
account.securisync.intermedia.net
macd001.intermedia.net
developer.intermedia.net
account.securisync.intermedia.net
owa010.intermedia.net
account.securisync.intermedia.net
hosting7807-3.intermedia.net
owa-2fa.exch092.intermedia.net
account.securisync.intermedia.net
lyncpool1.exch180.serverdata.net
acva-contractor.intermedia.net
voice.intermedia.net
buyvsa.intermedia.net
view.intermedia.net
owa6.intermedia.net
mail14.intermedia.net
account.securisync.intermedia.net
exchange.intermedia.net
account.securisync.intermedia.net
mail.intermedia.net
owa-2fa.exch031.intermedia.net
usa2.akaz.io
api-jp.intermedia.net
owa-2fa.exch154.intermedia.net
owa-2fa.exch029.intermedia.net
acca.intermedia.net
go.intermedia.net
intermedia.net
owap021.intermedia.net
dwreports.intermedia.net
aclo.intermedia.net
*.intermedia.net
hosting7809-4.intermedia.net
buyvsa.intermedia.net
hosting7802.intermedia.net
owa-2fa.exch157.intermedia.net
account.securisync.intermedia.net
*.archive.intermedia.net
hosting7809-2.intermedia.net
owa-2fa.exch025.intermedia.net
*.securemail.intermedia.net
acva.intermedia.net
account.securisync.intermedia.net
exchange.intermedia.net
footprints.intermedia.net
owa-2fa.exch083.intermedia.net
voice.intermedia.net
account.securisync.intermedia.net
voice.intermedia.net
mail3.intermedia.net
acca.intermedia.net
partnersales.intermedia.net
owa3.intermedia.net
reports.intermedia.net
go.intermedia.net
mail20.intermedia.net
mail14.intermedia.net
account.securisync.intermedia.net
account.securisync.intermedia.net
footprints.intermedia.net
api-jp.intermedia.net
backup.intermedia.com
*.quarantine.intermedia.net
mail20.intermedia.net
owa.intermedia.net
api-jp.intermedia.net
uniteoutlookaddin.intermedia.net
mail1.intermedia.net
acva.intermedia.net
voice.intermedia.net
blog.intermedia.net
hosting7836.intermedia.net
owas.sync.myonlinedata.net
learn.intermedia.net
viewarchive.intermedia.net
go.intermedia.net
webmail.intermedia.net
smtp.intermedia.net
owa3.intermedia.net
acspb.intermedia.net
*.securemail.intermedia.net
emg-ca-1.securemail.intermedia.net
owa-2fa.exch084.intermedia.net
usa2.akaz.io
account.securisync.intermedia.net

Certificate

The complete raw certificate details for mail20.intermedia.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XCX7gU0k0KDjSQWfeh7
0HWtac7J6j+NR2f0y3iQc367wk+QTG67aRO8xSQvA7Q2hXaC6q2pRy/AcjboMRjh
2EngQXSGQw62zlMaRYEKWNgsMEwe06KmAZDfh88gZ/KRtQCI8NkKloKUGRYsgjb9
qyPJR3tVKEg2zEqZfMnh9f2uatJHgpBXY1brIH4xH5fJ2hzuDGMQh6YRZmMhx86T
dddNdFiT27LPzh7kWHx9h1gf8G9fJKsTvFKRJTHTszSf2bLJ1eRBjHVi9ivFU723
kg066ARNlh7y4PgJkWZewKbbm27AafmsYWUv3b+h10SrRSAZF29o+S8swZdiK23W
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-14 10:21:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-09 10:30:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT75713367'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R) Premium'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail20.intermedia.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26439327650080288776887677020769240833375502164302810552257942981148911783398122392251398213532427144035136351968906364890797477400886918702568250133782275118962869920020189043292867163633025995809850004455461548762025700763070633818239864465976728003467806485066498924058946139191341725341943304310049316386837185290653083209734669278709260168488788407416018350323658343270376370323811396022734787599379661734627254657720868417038510119363635096634352432557375058129556533815574919011006449893223335642579963376472712653490280160474671786692055619202750414254486910143589174871847699461282038400303326359938245973633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail20.intermedia.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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