euromail.eurekaforbes.com

- Eureka Forbes Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0e:21:90:d8:c9:f3:c0:e7:ae:6f:bb:9a:74:c9:e8:df was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Eureka Forbes Limited

Organization: Eureka Forbes Limited
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:21:90:d8:c9:f3:c0:e7:ae:6f:bb:9a:74:c9:e8:df
Serial Number (int): 18783475580087667370421550891462682847
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c0:5a:d7:73:86:8c:bb:93:df:fd:e7:15:65:a0:fd:09:cc:29:65:a4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): b6:45:52:df:ca:9c:09:aa:26:59:ce:7e:60:00:03:a4:cf:68:ba:47
Fingerprint (sha256): 1c:7e:10:ae:de:4a:ad:c8:1c:2f:6e:8e:cd:e9:42:fc:8d:5e:82:29:88:f0:91:ca:f9:47:3e:e1:70:48:b9:f3

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate euromail.eurekaforbes.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for euromail.eurekaforbes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

euromail.eurekaforbes.com
www.euromail.eurekaforbes.com
efl-mail-cas1.eurekaforbes.co.in
AutoDiscover.eurekaforbes.co.in
webmail.eurekaforbes.co.in
efl-mail-cas2.eurekaforbes.co.in

Other certificates including the domain name eurekaforbes.com

(limited to 100 certificates)
www.img.eurekaforbes.com
cpanel.eurekaforbes.com
cpanel.eurekaforbes.com
www.img.eurekaforbes.com
euromail.eurekaforbes.com
www.eurekaforbes.com
*.eurekaforbes.com
euromail.eurekaforbes.com
www.eurekaforbes.com
www.eurekaforbes.com
www.img.eurekaforbes.com
cpanel.eurekaforbes.com
euromail.eurekaforbes.com
www.eurekaforbes.com
euromail.eurekaforbes.com
einvoice.eurekaforbes.com
euromail.eurekaforbes.com
www.eurekaforbes.com
euromail.eurekaforbes.com
www.eurekaforbes.com
euromail.eurekaforbes.com
euromail.eurekaforbes.com
www.eurekaforbes.com
www.img.eurekaforbes.com
*.eurekaforbes.com
*.eurekaforbes.com
cpanel.eurekaforbes.com
www.eurekaforbes.com
www.eurekaforbes.com
cpanel.eurekaforbes.com
euromail.eurekaforbes.com
cpanel.eurekaforbes.com
www.eurekaforbes.com
www.eurekaforbes.com
euromail.eurekaforbes.com
www.img.eurekaforbes.com
euromail.eurekaforbes.com
einvoice.eurekaforbes.com
euromail.eurekaforbes.com
cpanel.eurekaforbes.com
www.eurekaforbes.com
euromail.eurekaforbes.com
www.eurekaforbes.com
www.eurekaforbes.com
cpanel.eurekaforbes.com
www.img.eurekaforbes.com
www.eurekaforbes.com
euromail.eurekaforbes.com

Certificate

The complete raw certificate details for euromail.eurekaforbes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YnGtOO843gtlxqr8r5o
muY8vQnbrqQ1F4I05Df743u2XSdVJA/sW4JOSbJz3bvkW1naxUyZ5XsQxUMqn3id
184cn2gD6Yv3AvfUj3IH0sV7ZJQUSwYiYblCXmHhhxGVIC7ddh+fgCJFvLDSXhFq
moxRWw18+f7L+TtMD206mE1wM/6ErpDxOTeM/m995DWHEwRi9i1W73MOnk72+XI2
ALaXQTZFiu6sEVlSFBDgtrStW9oyaJdhtEewzSdY3orMWMDwL4kCrP3nNoDMuK35
9icxFEEEbybCEYiuxRGR9nMqbjfOs3Bprxls5lG9f8/Q0G/axqlaV+gNFpvo1We4
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18783475580087667370421550891462682847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eureka Forbes Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'euromail.eurekaforbes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27461652152856578489273490724272360357147754752047682048949449340973830574994015274155646958364944954739307802996117066539249950638874333018808300336720188507180122326473800962942065154594482865556525886722071524530558204645403991677617647883933127200598761821483006847587618790543168112112968739695055464284823739162212698067821861575761304376557457466131070074065462607028926136252758555573009425782675893362796681834437583401828464137478217205904956662483472896381087835011647212328814697020998917745846327141348693387991802161599820256205704345135515677789857649751339771059692840079169406363996486707011085907989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c05ad773868cbb93dffde71565a0fd09cc2965a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euromail.eurekaforbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.euromail.eurekaforbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efl-mail-cas1.eurekaforbes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.eurekaforbes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.eurekaforbes.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efl-mail-cas2.eurekaforbes.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001772eb390f300000403004730450221008d765261d88bd05365185824771e86f3bbd098b227d5b9569eb369e1b72f09580220785b7cf9a9ee4475b230db2cd8dd131d812835e08770ef01d428d02ea16d537a0076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001772eb391340000040300473045022068bac426d8aa325ba1518b34be3a6780b79f28465025f446eafb9fcc87d1d93c022100ac5247368d6f2db068091c81c1a7c289b2b51b0e214738641938402cd6ee3bf3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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