mail.dopplerschirme.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number af:33:9e:ad:54:ad:84:17:2b:e2:19:10:ed:5a:4c:fa was issued on by Sectigo Limited.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.dopplerschirme.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): af:33:9e:ad:54:ad:84:17:2b:e2:19:10:ed:5a:4c:fa
Serial Number (int): 232882924755541554670477964768110595322
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d8:45:6c:61:3f:4a:49:5e:e6:71:e8:b2:22:6e:be:2c:86:9f:72:d0
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 99:0e:fa:49:50:49:4e:6e:15:02:6d:0c:a4:2c:f9:4d:7f:85:fb:0a
Fingerprint (sha256): 2f:da:05:56:b0:d5:55:d3:34:29:ef:42:bd:ce:45:6a:67:25:a0:5d:e5:30:35:67:90:a6:f3:f6:26:97:a7:e2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate mail.dopplerschirme.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.dopplerschirme.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.dopplerschirme.com
autodiscover.dopplerschirme.com
sync2.dopplerschirme.com
zimbra-doppler.dopplerschirme.com

Other certificates including the domain name dopplerschirme.com

(limited to 100 certificates)
sni11903.cloudflaressl.com
mail.dopplerschirme.com
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
sdp.hja.net
servicedesk.monaghancoco.ie
sni11903.cloudflaressl.com
support.bong.com.pl
sni11903.cloudflaressl.com
helpdesk.porvairfiltration.com
helpdesk.llyc.global
itsupport.bandmwaste.com
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
webgate1.dopplerschirme.com
sync2.dopplerschirme.com
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
sync2.dopplerschirme.com
sni11903.cloudflaressl.com
helpdesk.alivetravel.com
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
sync2.dopplerschirme.com
sni11903.cloudflaressl.com
itassist.harrowschool.org.uk
helpdesk.commit.fi
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
sni11903.cloudflaressl.com
help.thereader.org.uk
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
sni11903.cloudflaressl.com
pomoc.lekam.pl
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
servicedesk.endrich.com
sni11903.cloudflaressl.com
servicedesk.moredun.ac.uk
servicedesk.ambient.org.uk
itservicedesk.emhartglass.com
sni11903.cloudflaressl.com
itsm.dopplerschirme.com
dopplerschirme.com
webgate1.dopplerschirme.com
dopplerschirme.com
sni11903.cloudflaressl.com
servicedesk.barnardos.ie
itsupport.bhtc.com
servicedesk.monaghancoco.ie
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
mail.dopplerschirme.com
servicedesk.monaghancoco.ie
itsupport.bandmwaste.com
sni11903.cloudflaressl.com
servicerequest.sapref.com
dopplerschirme.com
sni11903.cloudflaressl.com
ololo.sm.urusai.fun
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
ictservicedesk.bield.co.uk
itservicedesk.emhartglass.com
sni11903.cloudflaressl.com
servicedesk.endrich.com
hrdemo.servicedeskplus.nl
dopplerschirme.com
mail.dopplerschirme.com
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
service-desk.bedfordgirlsschool.co.uk
servicedesk.ambient.org.uk
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
sni11903.cloudflaressl.com
servicedesk.durbinglobal.com
servicedesk.grupaeurocash.pl
sni11903.cloudflaressl.com
helpdesk.greenfood.nl
sni11903.cloudflaressl.com
newservicedesk.mi-hub.co.uk
servicedesk.labbuit.it
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
sni11903.cloudflaressl.com
sni.cloudflaressl.com
sni11903.cloudflaressl.com
servicedesk.monaghancoco.ie
servicedesk.monaghancoco.ie
pomoc.lekam.pl

Certificate

The complete raw certificate details for mail.dopplerschirme.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 232882924755541554670477964768110595322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.dopplerschirme.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782358870369550509105939212982049264412754841921194402357365768548653301621620593240197838913695356272846440848448479676732307092363388374112499054387963644664737296837999753274103768720998868967385137671565579530268221213014793775509685350814877493491613082534285871892278886433289430553244367549926107809245877430448746503059789448229031158480165715453589006314720101342809486610070941730942626717048140781415545005904952585806295822559581506451154329852969312622006366810489453839768894250150042074197454113421210239739327166718461806160329697609147349907323375654862106181216644863845899637333435824172524447632746842904487829365699223712967463128816300490762564521349259709588762759497042389807506804965565725093152733348833845183505943340256157985963457554275192252784822749716503970334530839296399798601837074492715375474066633287551681961580466644217517303740552169434929768091774164314687525984887086215385907459257091007333416587670095306311973567633803722751343835717368973231926071471916095058155349278049559744937869537640548663200767312073507062509576331400690298177587287555982763486937729174349896544012190321077097115285467234162233617670548538336552264221976318377173735650697675343317229957437854477684501681123181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8456c613f4a495ee671e8b2226ebe2c869f72d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dopplerschirme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dopplerschirme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync2.dopplerschirme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimbra-doppler.dopplerschirme.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051b8e0ab5774548b843af19e24304c552441a5a3c8df8a6fe2ad6ac8ea617cf7d81c01afc28c2fc35a55941b033371a7fa089b9b021978d0c629bf851f03cb45cb386472157f7253f4ce989040dc5b83c111a202b4e4557014d97adc0ee024b6bbfc93923711595350691a2b0e6f06b684a92f9c5b6e639207cae4b2f43e29910571e626f01bc107d55dc4e417a6d87a18432e2a6dc5eea2ac9450979e310b2122f3aec28601ae1133e93f34549a27d9c4ca1c6999206092f2ddf86f6099d44a815c26ba9c42de853371cd03a1814804c4e6f9b2449cf3a81b51cc6d726fb262766c3c5dc0e944f752c30a16fdf39f434efb27c264f68e09faf2a6658a0f024c