mail.etlsystems.com

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 0f:51:ae:2f:52:5d:a0:a4:ce:c8:98:a9 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.etlsystems.com,OU=Domain Control Validated,C=GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:51:ae:2f:52:5d:a0:a4:ce:c8:98:a9
Serial Number (int): 4741020703409028290287540393
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 20:9a:30:8f:6b:62:fd:83:e9:77:0b:ce:9a:9b:59:c2:40:1b:84:a0
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): 30:41:07:b3:d3:0c:55:77:4e:64:4f:cb:c2:78:8d:e5:62:42:3f:03
Fingerprint (sha256): 46:cd:77:cc:80:51:49:bf:68:8a:32:ca:bb:d8:87:d1:e9:66:ce:87:f6:e3:7b:29:d8:3f:32:bd:a6:74:7b:0f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate mail.etlsystems.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.etlsystems.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.etlsystems.com
owa.etlsystems.com
autodiscover.etlsystems.com

Other certificates including the domain name etlsystems.com

(limited to 100 certificates)
ssc-sd.oshco.com
servicedesk.primeenergy.ph
etlsystems.com
etlsystems.com
newsletter.etlsystems.com
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
ssc-sd.oshco.com
ssc-sd.oshco.com
etl.orphans.website
hd.gsp.bl.it
hd.gsp.bl.it
etl.orphans.website
hd.gsp.bl.it
mail.etlsystems.com
mail.etlsystems.com
cascadeadsso.etlsystems.com
hd.gsp.bl.it
etlsystems.com
etlsystems.com
ssc-sd.oshco.com
mail.etlsystems.com
etlsystems.com
etlsystems.com
atendimento.escrimig.com.br
atendimento.escrimig.com.br
atendimento.escrimig.com.br
atendimento.escrimig.com.br
hd.gsp.bl.it
atendimento.escrimig.com.br
mail.etlsystems.com
etlsystems.com
hd.gsp.bl.it
hd.gsp.bl.it
etlsystems.com
newsletter.etlsystems.com
ssc-sd.oshco.com
servicedesk.etlsystems.com
hd.gsp.bl.it
etlsystems.com
etlsystems.com
atendimento.escrimig.com.br
mail.etlsystems.com
etlsystems.com
atendimento.escrimig.com.br
servicedesk.etlsystems.com
atendimento.escrimig.com.br
hd.gsp.bl.it
hd.gsp.bl.it
ssc-sd.oshco.com
hd.gsp.bl.it
atendimento.escrimig.com.br
atendimento.escrimig.com.br
hd.gsp.bl.it
servicedesk.etlsystems.com
atendimento.escrimig.com.br
mail.etlsystems.com
hd.gsp.bl.it
atendimento.escrimig.com.br
etlsystems.com
ithelpdesk.niatero.org
etl.orphans.website
hd.gsp.bl.it
etlsystems.com
hd.gsp.bl.it
hd.gsp.bl.it
etlsystems.com
ssc-sd.oshco.com
ssc-sd.oshco.com
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
etlsystems.com
atendimento.escrimig.com.br
hd.gsp.bl.it
etlsystems.com
atendimento.escrimig.com.br
atendimento.escrimig.com.br
etl.orphans.website
hd.gsp.bl.it
etlsystems.com
hd.gsp.bl.it
servicedesk.etlsystems.com
atendimento.escrimig.com.br
hd.gsp.bl.it
etlsystems.com
hd.gsp.bl.it
mail.etlsystems.com
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
ithelpdesk.niatero.org
hd.gsp.bl.it
hd.gsp.bl.it
atendimento.escrimig.com.br
etlsystems.com
atendimento.escrimig.com.br

Certificate

The complete raw certificate details for mail.etlsystems.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6e7KiPfZegFRmf78eKx
8dEysQk6US7S2T9jdznbCoklq49dA2xa+RJyD1LuJITbbHBMYGscpuLizJayseaY
Cqmtcpe55t/ERNtgXweurX8LtLbyF2fUJfbnhllfqhQYur+nQFP7TiwEIKooM01o
ZbIAc0Hx0cgQsq2Ld3t01GFq7wlrfDRBJHpdM+yCvfdSjNyMzXtd4fOZxfwHVc0w
96ItDE0NNewceAkVddNhGRgQ6FzEACVqoJ19RRu2hvdBVBbe/EFvdcSPRV1xEOIc
zzT9+yDz0MMkFm7PLk1QTH+p2MDPA7I02WOYxvRhPek2ViLGq0vPhFlE6U9CZ8eE
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4741020703409028290287540393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 14:42:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 15:45:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.etlsystems.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23184321102688400758552965985825703559296329111094306245530136915390394648303299455875567469256475875819441447739500395248596454153733678063570286813832702124462102071602305757298817110327319108730875802904503118378424003319133964286186372356083683881890783590311024068513454504359304074017300014788176398275905039352104185788979181912960556634677481152457868919990820250942618620447829653934350507615953093123859363814708250386043980222817312524689725862528033924313849456304742370162839342072263237250219953117310907640826413095055675522781662950108666202539752192876337615303906264894088345611299862866498926642329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.etlsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.etlsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.etlsystems.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							209a308f6b62fd83e9770bce9a9b59c2401b84a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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