ispmail2.nimag.net

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number b8:f2:7f:44:8c:3f:c7:06:ce:ae:d2:75:d0:39:05:83 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ispmail2.nimag.net,OU=Domain Control Validated+OU=Gandi Standard SSL

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): b8:f2:7f:44:8c:3f:c7:06:ce:ae:d2:75:d0:39:05:83
Serial Number (int): 245837068361129667210651336047494497667
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 20:e6:1d:dd:97:ef:55:20:33:4c:38:c1:8b:ab:dc:df:74:53:8e:1f
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 81:31:b2:70:a4:a1:cf:c4:2f:31:04:aa:21:58:8c:0b:d1:42:a9:10
Fingerprint (sha256): 4c:fe:7a:0a:3e:53:80:5a:73:ad:e0:91:5d:45:a2:df:34:20:12:f0:77:87:be:ae:2d:c8:c8:1b:e3:ab:b0:41

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate ispmail2.nimag.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ispmail2.nimag.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ispmail2.nimag.net
www.ispmail2.nimag.net

Other certificates including the domain name nimag.net

(limited to 100 certificates)
s3.nimag.net
ispmail3.nimag.net
ispmail3.nimag.net
grid.nimag.net
ispmail3.nimag.net
lesjardinsdouchy.ch
baikal.nimag.net
ispmail3.nimag.net
openproject.nimag.net
confluences.ch
nimag.net
ispmail1.nimag.net
ftth.nimag.net
lesjardinsdouchy.ch
cockpit.saitis.net
ispmail1.nimag.net
lesjardinsdouchy.ch
ispmail3.nimag.net
dev.webmail.nimag.net
admin.nimag.net
ispmail3.nimag.net
nimag.net
nimag.net
olympiafilms.com
dev.webmail.nimag.net
*.ssl.nimag.net
s3.nimag.net
s3.nimag.net
isptest1.nimag.net
unifi.nimag.net
www.nimag.net
ispmail3.nimag.net
wiki.nimag.net
ispmail2.nimag.net
extranet.ssl.nimag.net
ispmail2.nimag.net
mailcleanerpro.saitis.net
nimag.net
mail.nimag.net
admin.nimag.net
ispmail2.nimag.net
plesk9.nimag.net
nimag.net
wiki.nimag.net
admin.nimag.net
ispmail1.nimag.net
ispmail3.nimag.net
nimag.net
baikal.nimag.net
baikal.nimag.net
admin.nimag.net
olympiafilms.com
ispmail1.nimag.net
stats.nimag.net
nimag.net
ispmail2.nimag.net
ispmail1.nimag.net
www.nimag.net
nimag.net
bruno.vserver.nimag.net
antispam.nimag.net
b-o-v-arch.ch
olympiafilms.com
extranet.ssl.nimag.net
files.nimag.net
mailcleanerpro.saitis.net
cololausanne.ch
ispmail2.nimag.net
nimag.net
olympiafilms.com
ispmail3.nimag.net
ispmail3.nimag.net
ispmail3.nimag.net
cockpit.saitis.net
meige.ch
baikal.nimag.net
ispmail2.nimag.net
ispmail3.nimag.net
nimag.net
openproject.nimag.net
smtp.nimag.net
antispam.nimag.net
lesjardinsdouchy.ch
extranet.ssl.nimag.net
lesjardinsdouchy.ch
admin.nimag.net
git.nimag.net
baikal.nimag.net
olympiafilms.com
ispmail3.nimag.net
b-o-v-arch.ch
admin.nimag.net
ispmail1.nimag.net
extranet.ssl.nimag.net
nimag.net
bbb.nimag.net
nimag.net
admin.nimag.net
bruno.vserver.nimag.net
nimag.net

Certificate

The complete raw certificate details for ispmail2.nimag.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshVgHpIrkb+7L5lcpIvL
VqCMTXjQ/KNS8WucxY3rQPOSnb4yEkTn/PnAJQUGnBDHpToTLI/zYWfjEvJ+phzC
kf9oFsxGzFocN78Y1lzWgzQpjzlzpg+k1qYZowYFfU+SU4DbbzEa3V3NoBdE7i23
gmXA4S8xtk80kByKurKyH/Ii7VV4CaPYWVvOPnqHuzt3dV+Tejdt5YmqmW/m+drv
NtlYKF83SQggQgfPODCIvfMR1glmV2YWRTTlNSqfpntwGoQljqrszIPBfmYn4c8+
JkiWMHcuKmTq7svOtAyqac6L4XOfVZwhC2M7B1rviOH6VZW5CYBGek1G7C+7onOP
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 245837068361129667210651336047494497667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ispmail2.nimag.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22480958919332657236934253830671980247415356359296324132157102965479180796353891028106251633639633815007770392566155965193767424012609795621463520083368743178867626810580489926059660945223093191298577511714388590634814961050693422618418732514628842726361884259964112481962565798032438667088569184430194985576312819728019193739249752609192510955697319245590939413231582990265737106841070326795009568567620167218066912653628468419804586406898272396363097154818524148283315740723892825483872761562400244287961890731332845137273635641443116553426027551480364569332901946906217851691628872477579049776218307922004374949779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20e61ddd97ef5520334c38c18babdcdf74538e1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispmail2.nimag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ispmail2.nimag.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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