mail.haynes.com

- Haynes Manuals Inc -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 62:de:7a:82:7d:50:17:1e:6b:31:b7:6f:a7:67:df:ec was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Haynes Manuals Inc

Organization: Haynes Manuals Inc
Organization unit: Haynes Manuals
State / Province: California
Locality: Newbury Park
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 62:de:7a:82:7d:50:17:1e:6b:31:b7:6f:a7:67:df:ec
Serial Number (int): 131419518281931709105055359481726623724
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 10:83:88:44:95:d4:08:f3:9c:b2:ad:f5:13:18:c0:52:b7:10:9a:29
Fingerprint (sha256): 0d:82:b3:88:9d:93:7a:b6:c8:24:bc:25:1b:6f:e9:0b:83:8d:68:27:90:70:e4:93:c5:5d:c1:b8:13:f6:be:a7

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate mail.haynes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.haynes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.haynes.com

Other certificates including the domain name haynes.com

(limited to 100 certificates)
incapsula.com
incapsula.com
mail.haynes.com
incapsula.com
mail.haynes.com
incapsula.com
incapsula.com
incapsula.com
secure.haynes.com
haynes.com
incapsula.com
incapsula.com
secure.haynes.com
incapsula.com
www.haynes.com
mail.haynes.com
haynes.com
incapsula.com
incapsula.com
incapsula.com
*.haynes.com
au.haynes.com
incapsula.com
incapsula.com
incapsula.com
mail.haynes.com
reader.haynes.com
incapsula.com
incapsula.com
incapsula.com
dev.haynes.com
www.haynes.com
incapsula.com
au.haynes.com
www.haynes.com
mail.haynes.com
incapsula.com
reader-qa.haynes.com
incapsula.com
incapsula.com
haynesallaccess.com
incapsula.com
secure.haynes.com
incapsula.com
haynesallaccess.com
haynesallaccess.com
incapsula.com
incapsula.com
haynes.com
haynes.com
incapsula.com
qa.haynesmanualsallaccess.co.uk
au.haynes.com
haynesallaccess.com
incapsula.com
haynesallaccess.com
haynesallaccess.com
haynes.com
haynes.com
incapsula.com
reader.haynes.com
incapsula.com
haynes.com
incapsula.com
incapsula.com
mail.haynes.com
incapsula.com
www.haynesmanualsallaccess.co.uk
incapsula.com
incapsula.com
incapsula.com
incapsula.com
haynes.com
www.haynes.com
au.haynes.com
qa.haynesmanualsallaccess.co.uk
incapsula.com
incapsula.com
incapsula.com
haynesallaccess.com
incapsula.com
au.haynes.com
qa.haynesmanualsallaccess.com
incapsula.com
incapsula.com
incapsula.com
haynes.com
incapsula.com
reader-qa.haynes.com
incapsula.com
*.haynes.com
qa.haynesmanualsallaccess.co.uk
incapsula.com
*.haynes.com
au.haynes.com
incapsula.com
incapsula.com
reader-qa.haynes.com
mail.haynes.com
incapsula.com

Certificate

The complete raw certificate details for mail.haynes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzlIyMmzV+dcjwV4RA5e
xXDSkAlxl+XXnt8qsv+NI2ve5ZZc9hEh7tWQiEpyyskR/KjdDV6Gnw739zcesUZ8
uYm+jtRQjWLmjOs57PafCwLk2IN0dImMkdTessMzXPGYcjM9rH9FoblflojzMM5x
6awUUSJJG8ZlEKDrq6y3UsmhYrJ3XSm3lvYCfOrJTO7C6bzTDoUwlzPB/XZol/6j
Ysmjmi9bN+86e80QMSWm9NajKFXugeYv8Xq7qjKFC27j6PZoz0RxUayJpSwoEo8S
+rBqXS7Vkbsxj1KPZzSpp3yYB+Wu8bVLidn/ha4odBuM1RtCo7+mYCziZGFBNdZr
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131419518281931709105055359481726623724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Newbury Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Haynes Manuals Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Haynes Manuals'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.haynes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19595185217679492714168243837206103778533444715566618900784733511258590434722034955846820924775336681670699536896464704972405193963393230122828099816154433671779188436223145643176706804415190760458246422967948636390481277615491317748398607356501630578999763464625105919808316238977953527670234970944006444828405144936398765487130363570365059613627843407665312296191464247972869668135202172812869812186109922470198143755985549242676692983317201744170993746172192732411623057283864441058612569579296733572623775580254145844692983465319704109215691853111730766691388254053917796686690008546127096482170610675384868825991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.haynes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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