MAILSRV-01.ACDLABS.COM
- Advanced Chemistry Development, Inc -
Issued by Thawte SSL CA
About this certificate
This digital certificate with serial number 0f:30:e9:c1:bf:23:8b:54:23:14:02:70:2b:d5:e0:dc was issued on by Thawte, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Advanced Chemistry Development, Inc
Organization:
Advanced Chemistry Development, Inc
Organization unit: ACD Toronto
Organization unit: ACD Toronto
State / Province:
Ontario
Locality: Toronto
Country: CA
Locality: Toronto
Country: CA
Thawte, Inc.
Organization:
Thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:30:e9:c1:bf:23:8b:54:23:14:02:70:2b:d5:e0:dcSerial Number (int): 20192391337611033152511194183031447772
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId:
Fingerprint (sha1): b7:bd:e9:e5:11:e8:8a:4f:9b:53:e2:46:e3:41:f6:0b:b7:d2:1b:bf
Fingerprint (sha256): 4f:ba:12:70:c0:38:52:b7:5b:ee:64:53:22:f3:71:37:98:ac:fd:2f:59:4e:6f:d1:dd:d1:c8:4a:09:89:06:a2
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl
Check the revocation status for certificate MAILSRV-01.ACDLABS.COM
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for MAILSRV-01.ACDLABS.COM
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Extended Key Usages
Server Authentication
Client Authentication
Extensions
5 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.acdlabs.com
mailsrv-01.acddom.acdlabs.com
MAILSRV-01.ACDLABS.COM
mailsrv-01.acddom.acdlabs.com
MAILSRV-01.ACDLABS.COM
Other certificates including the domain name ACDLABS.COM
(limited to 100 certificates)
Certificate
The complete raw certificate details for MAILSRV-01.ACDLABS.COM in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEWjCCA0KgAwIBAgIQDzDpwb8ji1QjFAJwK9Xg3DANBgkqhkiG9w0BAQUFADA8 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U aGF3dGUgU1NMIENBMB4XDTEyMDExNzAwMDAwMFoXDTEzMDEyNzIzNTk1OVowgZYx CzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMRAwDgYDVQQHFAdUb3JvbnRv MSwwKgYDVQQKFCNBZHZhbmNlZCBDaGVtaXN0cnkgRGV2ZWxvcG1lbnQsIEluYzEU MBIGA1UECxQLQUNEIFRvcm9udG8xHzAdBgNVBAMUFk1BSUxTUlYtMDEuQUNETEFC Uy5DT00wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwtTDUYuovqcQ imDLZHQUTVDbCFMuomuizOpz1G0+1+MlGs3XWDKdKHhmM6gGSib7cbSYXh3r57JK PnLQOGK4Z6aD3qawD75K55xat8krvrBwki36+UuEFG4CWF7XZXUfKppSUU+dEgMW 87ZCfdrpNt7cT9RLGCKaIGsFfTpPhSEOrnOck4Af20gg71hIAWj6tNUxW8arH7z2 tJlbwBvyf6irF/khNHrFONFufkoR4WRY+0k0uVmQgbebu7hNFyyn2uNPor0LBSNe FjDCjRltHTcqepXuGVJBltpF70kRBrM+Yw2rc7H+VYMDUncOqzJbvASP1RZNLm8m 83Z3tb5hAgMBAAGjgfwwgfkwDAYDVR0TAQH/BAIwADA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vc3ZyLW92LWNybC50aGF3dGUuY29tL1RoYXd0ZU9WLmNybDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMgYIKwYBBQUHAQEEJjAkMCIGCCsG AQUFBzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29tMFoGA1UdEQRTMFGCGGF1dG9k aXNjb3Zlci5hY2RsYWJzLmNvbYIdbWFpbHNydi0wMS5hY2Rkb20uYWNkbGFicy5j b22CFk1BSUxTUlYtMDEuQUNETEFCUy5DT00wDQYJKoZIhvcNAQEFBQADggEBAJjl +jalKu8nBCdpamiCYtpuneGgfWQePil1CsuiAE9zd8Bz1ZkFvttche3/FjbKqyCT cYfhHypxFSP2u1skLzPacu7EkQKzQwRUw7Fx/cSE9Q41sD1Sst/q04y2dkEpOe/N 5hp9PPOG1vf4xLIrFmtcR0CBBexZFvjRrkFopPH4uevJ7CZCLxuvrPZKeVb1F5Wy GNGp3jyX3sn680OJ+SSlNtIEA791IguplJOV+cyNnx1o4hV/bDk1zLxe7xDw2Log 6rgAzdpx6EsDBBRl0oZ24L9/7F+3GUgveJczR4nb+HvHLfSQnXsXl8LDW8OWfFY1 Cwa4czQ+3DqlMfQOmYA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMLUw1GLqL6nEIpgy2R0 FE1Q2whTLqJroszqc9RtPtfjJRrN11gynSh4ZjOoBkom+3G0mF4d6+eySj5y0Dhi uGemg96msA++SuecWrfJK76wcJIt+vlLhBRuAlhe12V1HyqaUlFPnRIDFvO2Qn3a 6Tbe3E/USxgimiBrBX06T4UhDq5znJOAH9tIIO9YSAFo+rTVMVvGqx+89rSZW8Ab 8n+oqxf5ITR6xTjRbn5KEeFkWPtJNLlZkIG3m7u4TRcsp9rjT6K9CwUjXhYwwo0Z bR03KnqV7hlSQZbaRe9JEQazPmMNq3Ox/lWDA1J3DqsyW7wEj9UWTS5vJvN2d7W+ YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20192391337611033152511194183031447772 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Toronto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Advanced Chemistry Development, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ACD Toronto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MAILSRV-01.ACDLABS.COM' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22314016472818547555085861837678956107969722179052572259721185148114729621845912727564353942517395954248178194044036379416388840024379667041899161362240677840800960783051002726995803662753236252426024474798598501717562856937766757569689418269343007259127433861671912276775586409640148055644159186712979370540763742548769571662240033766924530297517085875077644708759256295205374136484330419636042301966820419718587173761506003688109319930469821676622294554926695623987114756297775488225365455696759172681932114735868441542341131214837752812836306720590693716452986726676636269958947613562549984604514821046582390406753 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.acdlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailsrv-01.acddom.acdlabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MAILSRV-01.ACDLABS.COM' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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