owa.plastipak.com

- PLASTIPAK HOLDINGS, INC. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:a9:0d:8b:74:0e:42:b5:38:a1:c5:22:33:96:eb:01 was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PLASTIPAK HOLDINGS, INC.

Organization: PLASTIPAK HOLDINGS, INC.
State / Province: MI
Locality: Plymouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a9:0d:8b:74:0e:42:b5:38:a1:c5:22:33:96:eb:01
Serial Number (int): 7523912867973903308079065004508637953
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 55:01:a9:5a:02:07:cc:df:28:a3:3e:ef:95:43:c0:7d:b2:3d:dd:45
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): fe:1c:6d:29:0e:4f:c6:28:f4:5d:d9:60:d8:66:a6:45:88:c8:2a:74
Fingerprint (sha256): 42:95:e1:5a:87:41:b4:63:8c:df:ba:4e:e8:79:d3:51:23:a0:6c:38:28:80:5c:b9:42:be:a2:fc:9b:57:4e:17

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate owa.plastipak.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.plastipak.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.plastipak.com
mail.plastipak.com
plastipakemail.plastipak.com
legacy.plastipak.com
autodiscover.plastipak.com
owa.absopure.com
autodiscover.absopure.com
email.plastipak.com
email.absopure.com
mail.absopure.com
ntex00ch1.plastipak.com
ntex00ch2.plastipak.com
ntex00ch3.plastipak.com
ntex00ch4.plastipak.com

Other certificates including the domain name plastipak.com

(limited to 100 certificates)
owa.plastipak.com
email.absopure.com
supplier.plastipak.com
secure.plastipak.com
email.plastipak.com
*.plastipak.com
plastipak.com
email.absopure.com
plastipak.com
*.plastipak.com
plastipak.com
PPAK0003.Plastipak.Com
plastipak.com
plastipak.com
*.plastipak.com
lnxvcs-e.plastipak.com
owa.plastipak.com
PPAK0003.Plastipak.Com
gp.plastipak.com
*.plastipak.com
*.plastipak.com
secure.plastipak.com
ntreports02.plastipak.com
plastipak.com
plastipak.com
email.plastipak.com
*.plastipak.com
supplier.plastipak.com
plastipak.com
owa.plastipak.com
tmwsrdfarm.plastipak.com
plastipak.com
plastipak.com
sip.plastipak.com
plastipak.com
PPAK0003.Plastipak.Com
tmwsrdfarm.plastipak.com
securevpn.plastipak.com
plastipak.com
*.plastipak.com
pulsevpn.plastipak.com
email.absopure.com
plastipak.com
plastipak.com
supplier.plastipak.com
pulsevpn.plastipak.com
plastipak.com
sip.plastipak.com
plastipak.com
plastipak.com
apps.plastipak.com
psa3000fc.plastipak.com
plastipak.com
plastipak.com
plastipak.com
*.plastipak.com
plastipak.com
lyncedge.plastipak.com
supplier.plastipak.com
plastipak.com
plastipak.com
NTUCCX01.plastipak.com
lnxvcs-e.plastipak.com
supplier.plastipak.com
*.plastipak.com
*.plastipak.com
securevpn.plastipak.com
PPAK0003.Plastipak.Com
sip.plastipak.com
plastipak.com
plastipak.com
plastipak.com
PPAK0003.Plastipak.Com
plastipak.com
mediacenter.plastipak.com
lnxvcs-e.plastipak.com
psa3000fc.plastipak.com
pulsevpn.plastipak.com
secure.plastipak.com
*.plastipak.com
gp.plastipak.com
PPAK0003.Plastipak.Com
*.plastipak.com
securevpn.plastipak.com
supplier.plastipak.com
*.plastipak.com
tmwsrdfarm.plastipak.com
*.plastipak.com
owa.plastipak.com
email.absopure.com
securevpn.plastipak.com
plastipak.com
*.plastipak.com
owa.plastipak.com

Certificate

The complete raw certificate details for owa.plastipak.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7523912867973903308079065004508637953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plymouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PLASTIPAK HOLDINGS, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa.plastipak.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782570908715811848934833452810107631891673434594013601712582249537954534492519850769898360715721018820760956332546124770774371032383434434122299973577838294777500638998136224535215145566667031666100171554999666168216636050331220848803915168335900837524862127418491637066257831435239191417961021398632686046200725009629255206827310685383318247416133004708527974090115011588703441020506339054844531165238024800008598970096916656911678210203825546887575224247352983791500704361620463920857125665980900171024763328935935745905978210047945870718628578067754725020506173497765781040261738320030976087039422089070228882524186071200997151348305041583191411908325482967999945982239606186361733551801814583171959527742744596871201389454171670369499160162109630601015325036061489335575901247987962793307370267661307283448334206481229164027993099061539674020209700725651460489192971359406565913925513887322026268678182905844210979417911702330531322373400895506382907986196999554946222658364685953114630828460728332048343891081603369077389077158101059544575593439302211487741231360036320894727096012341874046612264612810296221545197418253135338441183884189283999631357228896852871009605628519832175907072061111415464594406118259376982308676975571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5501a95a0207ccdf28a33eef9543c07db23ddd45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (328 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastipakemail.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.absopure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.absopure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.absopure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.absopure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntex00ch1.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntex00ch2.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntex00ch3.plastipak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntex00ch4.plastipak.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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