sip.masholdings.com

- MAS Holdings Private Limited -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 12:75:7a:8a:8a:c2:e3:21:6b:0f:9f:f1:63:31:4b:0a was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

MAS Holdings Private Limited

Organization: MAS Holdings Private Limited
Organization unit: MAS IT
State / Province: Colombo
Locality: Colombo
Country: LK

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:75:7a:8a:8a:c2:e3:21:6b:0f:9f:f1:63:31:4b:0a
Serial Number (int): 24536088086979668575076488560887548682
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 9a:09:77:64:a6:64:9b:e2:25:d7:05:09:0f:74:fb:36:3f:56:f7:1f
Fingerprint (sha256): 45:cc:c2:34:7a:c3:0c:c2:53:15:83:7e:2c:6a:7f:5a:35:8f:98:7f:3d:5c:e4:19:46:19:fd:95:37:70:ed:b0

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate sip.masholdings.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.masholdings.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meet.masholdings.com
lyncdiscover.masholdings.com
dialin.masholdings.com
extweb.masholdings.com
webconf.masholdings.com
sip.masholdings.com

Other certificates including the domain name masholdings.com

(limited to 100 certificates)
energy.masholdings.com
cert00080-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
learn.masholdings.com
cert00080-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
apps.masholdings.com
cert00080-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
shopfloor.masholdings.com
cert00080-azurecdn.akamaized.net
biq.masholdings.com
Activeevents.masholdings.com
portal.masholdings.com
cert00080-azurecdn.akamaized.net
kanban.masholdings.com
sip.masholdings.com
knet.masholdings.com
join.masholdings.com
cert00080-azurecdn.akamaized.net
masholdings.com
board.masholdings.com
plm.masholdings.com
visitors.masholdings.com
cert00080-azurecdn.akamaized.net
connect.masholdings.com
bi.masholdings.com
fs.masholdings.com
dashboard.masholdings.com
psrint.masholdings.com
cert00080-azurecdn.akamaized.net
pragna.masholdings.com
shopfloor.masholdings.com
cert00080-azurecdn.akamaized.net
fs.masholdings.com
cert00080-azurecdn.akamaized.net
visitors.masholdings.com
apps.masholdings.com
cert00080-azurecdn.akamaized.net
portal.masholdings.com
t2ouat.masholdings.com
shopfloor.masholdings.com
cert00080-azurecdn.akamaized.net
pdmobile.masholdings.com
maswas.masholdings.com
learn.masholdings.com
cert00080-azurecdn.akamaized.net
connect.masholdings.com
cert00080-azurecdn.akamaized.net
smc.masholdings.com
cert00080-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
one.masholdings.com
darwinddm.masholdings.com
pdmobile.masholdings.com
smartrouting.masholdings.com
etrnv2.masholdings.com
cert00080-azurecdn.akamaized.net
b1.masholdings.com
acmeerp.masholdings.com
etrnq.masholdings.com
maspdweb.masholdings.com
sip.masholdings.com
shopfloor.masholdings.com
mail.masholdings.com
sip.masholdings.com
connect.masholdings.com
fs.masholdings.com
cert00080-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
cert00080-azurecdn.akamaized.net
knet.masholdings.com
learn.masholdings.com
energy.masholdings.com
cert00080-azurecdn.akamaized.net
remote.masholdings.com
sip.masholdings.com
cert00080-azurecdn.akamaized.net
mail.masholdings.com
biq.masholdings.com
sip.masholdings.com
cert00080-azurecdn.akamaized.net
acmeerp.masholdings.com
apps.masholdings.com
learn.masholdings.com
learn.masholdings.com
portal.masholdings.com
etrn.masholdings.com
fs.masholdings.com
fs.masholdings.com
visitors.masholdings.com
cert00080-azurecdn.akamaized.net
sip.masholdings.com
sip.masholdings.com
visitors.masholdings.com
cert00080-azurecdn.akamaized.net
legcompliance.masholdings.com
shopfloor.masholdings.com
supportdesk.masholdings.com

Certificate

The complete raw certificate details for sip.masholdings.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvIPrt7UqsCwrLYnG11g
tlO9WP7PfYUBLW2MEarL4F2Pemnz3qOvkwgHD7NHP3H8RNDGd4i0jcfNUcXbxDfU
76fEfPU1Ko5OsBbT5dEHy6ujqoHyKb67CqNjub2CT82k6AhXYCKRHNqrsLf9wu89
q/HSsxT7tHy6yDAxcuQg/H+rFwWtUNrh1duaqaz2JHBRNqDhPCrkd3pBs+fNBZkl
h4ZRRdmmvMj5F1ELf1JBmChF7Qin8Z0mvoGhwohErTjW/+97W782wda6+znlwhCO
LfDCbiTM3HFEg3WA4X7GYqNj5gcRFJ+d88S58STV2DZ54JEZaPu6RhbB++twQNq3
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24536088086979668575076488560887548682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Colombo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Colombo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MAS Holdings Private Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MAS IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sip.masholdings.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19055110602020242691486407966432411569504748791401512079053576878548641971202673478784585549917841752443460605374306699378382282122476990036087847186193439623971367654119067881710927300163864228369921703352377262291915064068283725959537818981487185970562522830450684566309426561832399803416811312839756756510687505865042050376823252694411354903947444299979950047731312720537634685558503799978201821673033685409799426552759870667333722217315177584389910833502291775063824833999801230321899345501687135715467215554642439364788830590900866386825177407387937110437245154423926086143985862451213101262238958789603402364807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.masholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.masholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.masholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extweb.masholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.masholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.masholdings.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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