mail.sgdl.org

Issued by thawte DV SSL SHA256 CA

About this certificate

This digital certificate with serial number 57:90:22:d1:cc:10:e7:89:f1:d0:fa:91:e6:4b:f9:18 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=mail.sgdl.org

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:90:22:d1:cc:10:e7:89:f1:d0:fa:91:e6:4b:f9:18
Serial Number (int): 116391232604684563987134988508767975704
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 7d:29:31:2f:c1:1e:6e:ae:31:05:6a:b3:eb:1c:cd:a9:dd:ae:80:9a

Fingerprint (sha1): 15:3a:9c:95:02:2a:65:b9:b4:b3:32:b9:27:f1:77:d6:5b:65:d7:84
Fingerprint (sha256): 31:d0:48:fd:22:b3:39:f3:ab:5d:7f:02:88:f7:26:a2:38:78:b0:3e:ab:01:f0:45:11:fb:f6:fa:c4:b8:ce:83

Issuing Certificate URL: http://tm.symcb.com/tm.crt

Revocation information

OCSP Server: http://tm.symcd.com
CRL Distribution Point: http://tm.symcb.com/tm.crl

Check the revocation status for certificate mail.sgdl.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.sgdl.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.sgdl.org

Other certificates including the domain name sgdl.org

(limited to 100 certificates)
www.membres.sgdl.org
www.membres.sgdl.org
mail.sgdl.org
www.adhesion.sgdl.org
www.membres.sgdl.org
mail.sgdl.org
www.adhesion.sgdl.org
sgdl.org
www.adhesion.sgdl.org
mail.sgdl.org
www.membres.sgdl.org
sgdl.org
sgdl.org
www.adhesion.sgdl.org
membres.sgdl.org
www.adhesion.sgdl.org
sgdl.org
www.adhesion.sgdl.org
sgdl.org
www.membres.sgdl.org
www.membres.sgdl.org
www.adhesion.sgdl.org
www.adhesion.sgdl.org
mail.sgdl.org
sgdl.org
www.adhesion.sgdl.org
www.membres.sgdl.org
sgdl.org
sgdl.org
www.adhesion.sgdl.org
sgdl.org
www.adhesion.sgdl.org
sgdl.org
www.adhesion.sgdl.org
www.adhesion.sgdl.org
sgdl.org
sgdl.org
www.test.sgdl.org
sgdl.org
www.adhesion.sgdl.org
mail.sgdl.org
sgdl.org
sgdl.org
www.adhesion.sgdl.org
sgdl.org
sgdl.org
www.adhesion.sgdl.org
www.adhesion.sgdl.org
sgdl.org
sgdl.org
sgdl.org
mail.sgdl.org
mail.sgdl.org
www.membres.sgdl.org
www.membres.sgdl.org
mail.sgdl.org
sgdl.org
sgdl.org
sgdl.org
sgdl.org
aideurgence.sgdl.org
www.test.sgdl.org
mail.sgdl.org

Certificate

The complete raw certificate details for mail.sgdl.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w4VobXoBXtcj9Xim0bv
7qOBtOSf4nNTjtnAu1jaLY9iPBPCvatG7b/mOBkH6Gpjaarh8EXl0w4q2fQrNQzO
XH9cbWlVRdCm0DR4lMTyrI1SEI50yIRf68Br2qVd6ODzI+NdDTnnHCp5DvsUx2aK
/ccFInlWgBjD7OmMY3g9RsMTYR+JqQ453F8R3i9LbLW/9TMjMUCldJjswNd9pOAv
mtIMqpyDhl5CWcaS7ZbWvawiV8yGnmBGvdXGPr2va2nnp0ZfgjCRM/OLdrImFnax
kqxCKwjejrsyR2b662+vzlqOI+U14HQD4kLGdy0Tjmvd4ZZgUI3lNfP/9qDsrX7l
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116391232604684563987134988508767975704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.sgdl.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30682853431945384052220427300366827492928906594900028382315468705410921585814825174062091467043971118520107765120993412917860468438319750102120871937831417325854148216181021025124724022934346946965277637579930025720502479223841968886941269069833454837204738038223553878412601378847911965415418478178457722998964256620796847308050547603438968102622837715405778708537963665919766192573660011590493910682835762645778250104767419662176117473285986063944480098021988089117481464569855349113470364889702305449669343423935944415282376153763793591745245196731624069154102624295029447388847505600867070107318742219959721452937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sgdl.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7d29312fc11e6eae31056ab3eb1ccda9ddae809a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tm.symcb.com/tm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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