mail023-1.exch023.serverdata.net

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:a4:21:93:7d:90:08:2d:f3:cb:08:0c:34:28:90:7c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail023-1.exch023.serverdata.net

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a4:21:93:7d:90:08:2d:f3:cb:08:0c:34:28:90:7c
Serial Number (int): 3510673681286103751163362114649231484
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c7:f5:83:35:61:6f:d7:d3:eb:0e:06:c0:cb:3a:5e:f0:7a:65:9f:3c
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 20:7b:c4:27:40:07:db:c8:6f:26:86:55:e9:e9:64:32:6c:79:a4:4e
Fingerprint (sha256): 0c:bc:fd:94:a9:77:7a:13:9c:79:83:0c:15:44:40:62:67:77:8f:12:4c:02:9f:75:27:74:0e:be:96:bc:fc:f7

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate mail023-1.exch023.serverdata.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail023-1.exch023.serverdata.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail023-1.exch023.serverdata.net

Other certificates including the domain name serverdata.net

(limited to 100 certificates)
exch031.serverdata.net
exch025.serverdata.net
mail026-1.exch026.serverdata.net
sharesync.serverdata.net
apps.exch126.serverdata.net
lyncpool1.exch153.serverdata.net
exch021.serverdata.net
ingram.serverdata.net
mail690-1.exch690.serverdata.net
exch099.serverdata.net
mail500-1.exch500.serverdata.net
lyncgcpool1.exch580.serverdata.net
upload580.serverdata.net
ldap.exch090.serverdata.net
pool1.exch129.serverdata.net
uploadsc9.serverdata.net
ingram.serverdata.net
mail020-1.exch020.serverdata.net
exch099.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch153.serverdata.net
pool1.exch126.serverdata.net
mail032-2.exch032.serverdata.net
mail580-1.exch580.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch082.serverdata.net
lyncpool1.exch082.serverdata.net
owa020.serverdata.net
exch083.serverdata.net
exch029.serverdata.net
ldap.exch123.serverdata.net
lyncsip.exch600.serverdata.net
ldap.exch156.serverdata.net
ldap.exch600.serverdata.net
usa2.akaz.io
exch081.serverdata.net
exch580.serverdata.net
lyncpool1.exch032.serverdata.net
lyncsip.exch500.serverdata.net
exch126.serverdata.net
mail080-1.exch080.serverdata.net
mail157-co-1.exch157.serverdata.net
exch024.serverdata.net
owa.serverdata.net
lyncsip.exch022.serverdata.net
ldap.pexch119.serverdata.net
ldap.pexch121.serverdata.net
lyncpool1.exch027.serverdata.net
lyncsip.exch027.serverdata.net
mail026-2.exch026.serverdata.net
lyncpool1.exch580.serverdata.net
mail690-1.exch690.serverdata.net
lyncpool1.exch026.serverdata.net
exch480.serverdata.net
mail580-2.exch580.serverdata.net
exch084.serverdata.net
lyncpool1.exch032.serverdata.net
lyncedgepool.exch029.serverdata.net
exch027.serverdata.net
nexus.serverdata.net
sy.smtp.mx.serverdata.net
outbound.smtp.o365.serverdata.net
smtp.exch027.serverdata.net
*.serverdata.net
mail029-2.exch029.serverdata.net
mail030-2.exch030.serverdata.net
va.smtp.mx.serverdata.net
lyncsip.exch032.serverdata.net
www.serverdata.net
mail023-1.exch023.serverdata.net
skypepool1.pexch118.serverdata.net
mail080-1.exch080.serverdata.net
exch122.serverdata.net
ldap.pexch118.serverdata.net
exch029.serverdata.net
exch080.serverdata.net
exch029.serverdata.net
au.serverdata.net
*.quarantine.serverdata.net
backup.serverdata.net
ldap.exch027.serverdata.net
ldap.exch580.serverdata.net
lyncpool1.exch025.serverdata.net
lyncpool1.exch082.serverdata.net
exch021.serverdata.net
lyncpool1.exch025.serverdata.net
mail080-1.exch080.serverdata.net
apps.exch090.serverdata.net
pexch120.serverdata.net
exch024.serverdata.net
mail151-1.exch151.serverdata.net
mail154-1.exch154.serverdata.net
mail022-1.exch022.serverdata.net
mail070-1.exch070.serverdata.net
ldap.exch130.serverdata.net
lyncpool1.exch021.serverdata.net
www.serverdata.net
hpbx017.serverdata.net
smtp.exch151.serverdata.net
lyncsip.exch024.serverdata.net

Certificate

The complete raw certificate details for mail023-1.exch023.serverdata.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy4sd6gFrjcXoweDD0Xu
9tcr0J7nsxk46HKZlkBroQEf9n9OLyynj38sX2SrdI+jnX8Kks1Zacxn1GFyHbII
OqMOIinHoFmwHCIY0fNmhNjss1LyT/c69SGJ9JsD09x6y8vBE6O1hG2zlO5howpM
jJAztaUs/j38cjpy50hJ/qxt6INmUxY6SzQ/h9HXhBHkNvFJX+WwqWLCrkw0KZt7
irEvDy0nw9sVoEkdK8kGhUpUzDBs+D240PnExDIOnR8J0QMj14enTBcIyTth4NAr
vWHQZzArSHL3jl7GueVVRrlhHsETGDE+z1/+neEBdxpsDx1qXrcoHtbPMTlM20Mn
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3510673681286103751163362114649231484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail023-1.exch023.serverdata.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24639238568867234039440034788203096960300949592854271332897585930168376261690418470954223615724949159174593932782412421134476095903429650210678196084559301408042325029241994344872335095537228872172978639220746815930669127013520901133548945004767507631670420735391519934306023533967724194438959452794381381946504037799828377421174726563309668886353888111409635371702336405685462141497681375909916981340365544854751523706231722699951905226045490675483317900630719183301516710683777835394814593546007916553596353852967355285343362029122579705800955880663336829692690184330130280394071528885597395405336790703789536651109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7f58335616fd7d3eb0e06c0cb3a5ef07a659f3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail023-1.exch023.serverdata.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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