DV SSL/TLS Certificate for mail.per-agency.com

Certificate is witin its validity period

Issued by DigiCert Inc (GeoTrust TLS RSA CA G1)

About the mail.per-agency.com DV SSL/TLS Certificate

This certificate with serial number 07:7b:88:8e:71:25:5d:81:48:59:bc:21:2e:8a:76:7c for mail.per-agency.com was issued on by DigiCert Inc.

With 11 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for mail.per-agency.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 07:7b:88:8e:71:25:5d:81:48:59:bc:21:2e:8a:76:7c
Serial Number (int): 9946018177216346491413526905132578428
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 39:1a:f9:0b:c8:bd:36:0c:99:ec:a2:04:1a:24:6d:ab:67:24:d9:c8
Authority Key Identifier: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (SHA-1): 1a:d2:c7:df:09:55:31:07:f3:cf:30:62:ac:97:68:11:bc:d7:fe:82
Fingerprint (SHA-256): 73:33:ed:27:8a:72:d1:51:5e:ea:69:08:99:7c:04:89:1d:e0:f5:7f:da:3e:25:e0:12:cb:6e:e9:81:67:45:0d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate mail.per-agency.com
11
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mail.per-agency.com

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

mail.per-agency.com
autodiscover.per-agency.com
mail.imwf.de
mail.imwf.at
mail.faktenkontor.de
autodiscover.imwf.de
autodiscover.imwf.at
autodiscover.faktenkontor.de
mail.per-agency.ch
autodiscover.per-agency.ch
autodiscover.companion.de

X.509 Certificate

The complete raw X.509 certificate details for mail.per-agency.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xwHLhF2uKUwP2q3Y9wF
K/qxfdnDY9KwCxm77YCAaNVG+1KM+7y70EU4QwXYl5QLk2Z2CIYhfV6O+bxjAw0H
OD/mWV9YjmUOq6YjpEldTidpnYx5ikIOXrX2LI62ohSeoKJ10EawO2YsL/AIQxGK
uT6GBjOMjcdveS5S5k319TwiD1O6dx82MI2QOt8KHCVhBnk+V9rv9nZIl6t7gkfY
1Xm3ugRTVOmOTh2mpDJBRdQVrAqtFbBQd7nQ4b/3oy0QyEaHtw4IunzOiL4hs3eh
jsl6v1aPHj+s31zQ/CPtTxk4rgR7gl10vybDKtUNJISql4Vcy0yWqlWFXveJgiBY
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9946018177216346491413526905132578428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.per-agency.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28164963152377611181457567170138058545266071962263874046733201838537387229075794556237719016829578523591721644086175005879604511436224315598080431101324258977363085592141467034729317851174385221252195073627146421769977530814485551925060899813573176574031574685291613032417014871729784540510841411766640526244950109970370073152176159204896184929453470187589785802730744385324272740269046900617152497885443864671335138478693737420261687693858599530088327566394281294391915750771935538441638657830566813122819787037363491721669972971479563819642945840262984919746449133387996750341559057533605778460038192842063686424757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							391af90bc8bd360c99eca2041a246dab6724d9c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.per-agency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.per-agency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.imwf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.imwf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.faktenkontor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.imwf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.imwf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.faktenkontor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.per-agency.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.per-agency.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.companion.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600969764bf555897adf743876837084277e9f03ad5f6a4f3366e46a43f0fcaa9c6000001960b490de00000040300473045022015e584ea8bc2d4d445f6f3e6ee9d9ba012a37082f2e22f40696aab6a7d0aec16022100ff5f1041780ccb952fde9095b44fc64392d68abc3f815a6e76e6d3494a42ce910076006411c46ca412eca7891ca2022e00bcab4f2807d41e3527abeafed503c97dcdf0000001960b490de70000040300473045022073d67d8b0cd6665a9ed9f8da099fc07dd1e3af3a93388135a4848e0ee7ec0dfe022100fecc7b9dc4381ec14680fa5593dc10bd9cc6b4b0dc62a308125caa2ba9b03f7a007600499c9b69de1d7cecfc36decd8764a6b85baf0a878019d15552fbe9eb29ddf8c3000001960b490dfa000004030047304502201169ef948900874f2a90de8e30bbbd7de3b392b1e5f43a32da0d620320bfe8b0022100abc64ccf3389ed34f839a17f570debe3472a41b9cb4b468649b9959b23ff4013
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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